Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.mft
File: sq-PF3TgWSXyTkHe5p5bYj2axj0.mft (raw, json)
Hash identifier: SQFOSM6pAZmLq30TcqTrk8KGeO9n5QqaEZ6mQghi73I=
Subject key identifier: DA:6C:8E:19:49:DA:9B:65:E2:7B:6F:9F:55:5A:A4:B6:77:13:7D:B3
Authority key identifier: B2:AF:8F:17:74:E0:59:25:F2:4E:41:DE:E6:9E:5B:62:3D:9A:C6:3D
Certificate issuer: /CN=b2af8f1774e05925f24e41dee69e5b623d9ac63d
Certificate serial: 01993492E4E6C4CD4D763A4704DEC1EBF6B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sq-PF3TgWSXyTkHe5p5bYj2axj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.mft
Manifest number: 167C
Signing time: Wed 10 Sep 2025 17:01:06 +0000
Manifest this update: Wed 10 Sep 2025 17:01:06 +0000
Manifest next update: Thu 11 Sep 2025 17:01:06 +0000
Files and hashes: 1: dHmQJZqThrz58J_TSvHl_H-39E8.roa (hash: lBrrDh2GaFmnqywSNW3PsD5utU5WNEXu75PvBG3VZjI=)
2: sq-PF3TgWSXyTkHe5p5bYj2axj0.crl (hash: gcivyLxMIB5RqrsCOQd63DfpVowXW1aEtw/s0b/3STE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sq-PF3TgWSXyTkHe5p5bYj2axj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 17:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:92:e4:e6:c4:cd:4d:76:3a:47:04:de:c1:eb:f6:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2af8f1774e05925f24e41dee69e5b623d9ac63d
Validity
Not Before: Sep 10 17:01:06 2025 GMT
Not After : Sep 11 17:01:06 2025 GMT
Subject: CN=da6c8e1949da9b65e27b6f9f555aa4b677137db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:10:fc:03:00:34:a3:0d:2f:57:6c:38:cd:9a:
02:65:16:1a:84:39:cd:c2:60:a3:34:f6:ed:f7:72:
22:43:0c:13:41:06:5c:8b:f0:92:88:ec:0a:d7:f8:
96:c2:27:89:1d:37:1a:c9:83:d7:dd:96:d1:55:60:
60:5e:a0:09:d0:b6:be:91:79:d1:87:93:5d:27:d4:
0b:b0:3b:ac:d9:14:89:fb:00:d4:eb:30:38:71:08:
de:6f:fe:f7:a3:19:18:95:2a:13:30:a7:15:45:01:
31:7c:da:de:6c:1d:2e:a5:85:9d:73:67:8f:ce:09:
0c:68:eb:ff:1e:1d:78:08:c6:b5:98:ef:af:a5:44:
2c:ac:a4:dd:9b:c3:a5:a1:c1:ff:d3:52:02:3c:e9:
a9:23:84:e2:a4:15:8e:db:cc:17:bd:79:61:34:9d:
c6:fc:ff:fc:47:ee:69:fa:a2:98:46:6f:6a:09:d4:
e4:cd:d7:52:f4:7b:37:35:ad:71:29:35:fa:f9:56:
61:02:9b:39:da:82:f3:81:ee:fb:00:d3:8c:ad:f4:
1f:b5:66:d1:7c:b4:a1:ce:f1:f1:33:d2:97:72:0e:
10:d0:04:4c:af:2c:48:ca:e8:0b:69:65:c2:c4:64:
09:c8:2a:99:0f:e5:47:24:13:02:48:0a:6d:76:03:
0e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:6C:8E:19:49:DA:9B:65:E2:7B:6F:9F:55:5A:A4:B6:77:13:7D:B3
X509v3 Authority Key Identifier:
keyid:B2:AF:8F:17:74:E0:59:25:F2:4E:41:DE:E6:9E:5B:62:3D:9A:C6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sq-PF3TgWSXyTkHe5p5bYj2axj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:19:56:9e:ac:25:43:96:fc:ca:d2:29:9b:b2:43:a4:d8:cc:
40:97:c2:f4:8e:f6:d9:87:02:0c:79:34:e8:2d:40:e5:6c:4c:
fc:0e:1a:35:42:d1:81:93:3d:16:b6:33:43:05:45:bb:bd:ba:
b6:b3:8c:52:5f:09:ab:0d:7d:ca:1d:63:a4:03:45:a9:2d:62:
4f:1d:6e:93:aa:18:7b:10:d8:04:2d:e1:64:e8:c8:6c:15:94:
94:56:73:38:b8:b8:06:52:8f:e6:03:02:3a:78:51:09:a6:1c:
a6:35:12:7c:de:d4:e4:b5:1e:86:ed:cf:c8:a1:88:e9:99:3f:
d7:ea:1c:34:ec:72:37:cd:e9:1a:6a:4c:2c:99:fb:56:33:b4:
1d:be:3e:60:02:b4:41:39:b4:bd:99:75:7e:ff:c3:bc:98:1c:
f3:20:39:91:90:5e:05:d4:e8:f8:09:a6:16:b2:c0:45:1c:8c:
51:ca:0a:ad:7f:72:f7:e5:08:e0:47:62:3b:b8:5b:10:7b:e9:
12:21:63:7f:2d:2b:15:2e:75:9d:b9:08:04:fb:75:31:35:e1:
5f:8b:08:7d:a6:3e:28:ad:44:c9:da:cb:7c:09:3f:b5:0e:54:
26:db:23:8a:db:56:4a:42:e9:16:68:55:36:ea:5f:a3:76:bb:
cd:4e:eb:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 21:59:11 2025 by rpki-client