Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.mft
File: sq-PF3TgWSXyTkHe5p5bYj2axj0.mft (raw, json)
Hash identifier: yk7ME4d5XKPO8lGLzqLsxMr7b1UtjbwvmC8aSkrCnws=
Subject key identifier: 42:A9:9D:21:8E:FD:44:A1:3A:4C:7A:AA:B0:2C:81:A4:0C:A1:6F:4F
Authority key identifier: B2:AF:8F:17:74:E0:59:25:F2:4E:41:DE:E6:9E:5B:62:3D:9A:C6:3D
Certificate issuer: /CN=b2af8f1774e05925f24e41dee69e5b623d9ac63d
Certificate serial: 01974BFB8E77C59D03739369F2EFB472F57D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sq-PF3TgWSXyTkHe5p5bYj2axj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 20:01:06 +0000
Manifest this update: Sat 07 Jun 2025 20:01:06 +0000
Manifest next update: Sun 08 Jun 2025 20:01:06 +0000
Files and hashes: 1: dHmQJZqThrz58J_TSvHl_H-39E8.roa (hash: lBrrDh2GaFmnqywSNW3PsD5utU5WNEXu75PvBG3VZjI=)
2: sq-PF3TgWSXyTkHe5p5bYj2axj0.crl (hash: J1Gm44YQvQNJusRfJUeQGEKMe8X8rE0hjeM6EnH56B8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sq-PF3TgWSXyTkHe5p5bYj2axj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:8e:77:c5:9d:03:73:93:69:f2:ef:b4:72:f5:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2af8f1774e05925f24e41dee69e5b623d9ac63d
Validity
Not Before: Jun 7 20:01:06 2025 GMT
Not After : Jun 8 20:01:06 2025 GMT
Subject: CN=42a99d218efd44a13a4c7aaab02c81a40ca16f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:03:5f:72:51:65:0e:24:cd:5e:ed:65:b4:be:
2b:ac:1c:14:2c:6d:60:f9:c6:c1:f9:8e:aa:63:a3:
9e:cc:34:46:11:69:d1:e4:46:45:6f:31:c4:91:50:
95:53:fe:9a:8b:5b:54:57:32:15:09:a0:42:39:97:
31:7a:db:fb:0d:51:00:5a:ad:73:fe:4f:a5:dc:6b:
c4:c5:f3:7d:4f:2d:50:11:21:7b:09:28:ed:3a:8a:
28:c0:4f:be:50:cb:de:5b:23:13:2e:ef:28:18:32:
2c:ac:ce:85:dc:aa:05:92:42:99:7a:d5:20:44:7e:
f8:4f:42:1c:5b:00:da:4a:1f:b7:60:bb:0d:75:22:
88:86:17:7b:84:db:f0:7d:29:c6:d0:54:16:7a:91:
5f:12:55:9c:21:35:41:a7:19:d5:99:e5:e1:ac:6c:
4c:fd:7d:70:54:19:c9:50:1b:2c:56:f3:9d:d5:17:
b1:86:d0:73:bf:dc:01:02:43:4c:ad:4d:26:54:4a:
da:f9:fb:bf:c2:08:ad:c7:2b:c4:6b:4d:8b:d2:63:
97:71:79:24:9f:a2:4c:94:73:7b:0a:63:5b:ab:72:
78:82:db:90:51:c3:d1:c3:bd:62:8f:ac:33:2e:93:
eb:48:05:43:bc:93:87:42:5e:04:97:c4:98:66:08:
b4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A9:9D:21:8E:FD:44:A1:3A:4C:7A:AA:B0:2C:81:A4:0C:A1:6F:4F
X509v3 Authority Key Identifier:
keyid:B2:AF:8F:17:74:E0:59:25:F2:4E:41:DE:E6:9E:5B:62:3D:9A:C6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sq-PF3TgWSXyTkHe5p5bYj2axj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:9d:91:ba:9f:22:10:83:31:7e:7d:da:2e:33:bd:a4:b6:fa:
a0:06:e1:21:5e:f7:06:aa:f7:7c:9e:0b:40:ff:b9:36:45:b1:
07:c5:32:fa:c2:32:5e:46:80:f3:a4:08:5b:78:5e:8a:f6:d2:
00:de:b9:33:a8:b8:c7:95:fd:c9:50:9c:21:ca:a1:7b:0c:3b:
c0:07:55:c0:95:12:5e:6d:89:65:c5:1a:3c:e3:ce:10:4a:84:
57:ae:3d:20:8b:d6:42:a9:2a:aa:3e:a1:ee:92:50:5c:98:84:
9d:9a:4e:9a:ee:70:11:c9:2a:7b:7f:47:c2:5a:49:27:b5:da:
45:fb:70:b4:7d:63:6c:cf:e3:40:1b:67:b4:fd:c4:6c:96:18:
67:e9:b7:71:b7:19:84:25:67:39:d1:85:15:2b:2b:d0:6c:d4:
0a:ec:e9:20:fa:6a:86:d2:5e:a1:a5:fa:64:5a:5f:ed:04:01:
48:22:41:ff:a8:a5:da:4a:3a:a7:ce:be:52:20:a1:45:f9:5d:
bc:da:f6:cb:dc:7b:6c:44:8e:b4:82:48:8f:3b:9c:9f:f6:e0:
7f:3b:97:79:bb:3a:88:2e:45:85:46:6d:96:57:c9:b8:66:7e:
56:e4:0f:f3:fc:0c:2a:57:13:0c:87:e7:61:35:3c:a3:4e:72:
42:14:a9:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdL+453xZ0Dc5Np8u+0cvV9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYWY4ZjE3NzRlMDU5MjVmMjRlNDFkZWU2OWU1YjYyM2Q5
YWM2M2QwHhcNMjUwNjA3MjAwMTA2WhcNMjUwNjA4MjAwMTA2WjAzMTEwLwYDVQQD
Eyg0MmE5OWQyMThlZmQ0NGExM2E0YzdhYWFiMDJjODFhNDBjYTE2ZjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QNfclFlDiTNXu1ltL4rrBwULG1g
+cbB+Y6qY6OezDRGEWnR5EZFbzHEkVCVU/6ai1tUVzIVCaBCOZcxetv7DVEAWq1z
/k+l3GvExfN9Ty1QESF7CSjtOooowE++UMveWyMTLu8oGDIsrM6F3KoFkkKZetUg
RH74T0IcWwDaSh+3YLsNdSKIhhd7hNvwfSnG0FQWepFfElWcITVBpxnVmeXhrGxM
/X1wVBnJUBssVvOd1RexhtBzv9wBAkNMrU0mVEra+fu/wgitxyvEa02L0mOXcXkk
n6JMlHN7CmNbq3J4gtuQUcPRw71ij6wzLpPrSAVDvJOHQl4El8SYZgi0twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEKpnSGO/UShOkx6qrAsgaQMoW9PMB8GA1UdIwQY
MBaAFLKvjxd04Fkl8k5B3uaeW2I9msY9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3EtUEYzVGdXU1h5VGtIZTVwNWJZajJheGowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9jMTU2NzEtYmExYi00OGYyLWI2OTEt
ZmE1N2MxMjZiYzJhLzEvc3EtUEYzVGdXU1h5VGtIZTVwNWJZajJheGowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9jMTU2NzEtYmExYi00OGYyLWI2OTEtZmE1N2MxMjZiYzJh
LzEvc3EtUEYzVGdXU1h5VGtIZTVwNWJZajJheGowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASJ2Rup8i
EIMxfn3aLjO9pLb6oAbhIV73Bqr3fJ4LQP+5NkWxB8Uy+sIyXkaA86QIW3heivbS
AN65M6i4x5X9yVCcIcqheww7wAdVwJUSXm2JZcUaPOPOEEqEV649IIvWQqkqqj6h
7pJQXJiEnZpOmu5wEckqe39HwlpJJ7XaRftwtH1jbM/jQBtntP3EbJYYZ+m3cbcZ
hCVnOdGFFSsr0GzUCuzpIPpqhtJeoaX6ZFpf7QQBSCJB/6il2ko6p86+UiChRfld
vNr2y9x7bESOtIJIjzucn/bgfzuXebs6iC5FhUZtllfJuGZ+VuQP8/wMKlcTDIfn
YTU8o05yQhSpsA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:33:16 2025 by rpki-client