Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft
File: sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft (raw, json)
Hash identifier: x7j7HFGq3b9TxlEyQddgaJh5SGZM3sTGLFlfzO7nmJI=
Subject key identifier: A0:03:5E:55:40:78:C3:4F:D8:E6:65:35:D1:F6:44:82:BE:26:68:EF
Authority key identifier: B2:A4:8A:F3:D9:69:31:BD:90:C3:BF:D5:5F:1F:A3:04:7B:35:60:14
Certificate issuer: /CN=b2a48af3d96931bd90c3bfd55f1fa3047b356014
Certificate serial: 019922FA15D99482079B823A24D051DF0CEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft
Manifest number: 10A4
Signing time: Sun 07 Sep 2025 07:00:38 +0000
Manifest this update: Sun 07 Sep 2025 07:00:38 +0000
Manifest next update: Mon 08 Sep 2025 07:00:38 +0000
Files and hashes: 1: snSOZMPfK49AItHHPweedqu08i4.roa (hash: pOp6DYxwdd50QS7EO4q/xTqIWe4F0C/r3RXRy+6+GXo=)
2: sqSK89lpMb2Qw7_VXx-jBHs1YBQ.crl (hash: fOVmg69jidyy7erxFNRDoaPBP67CO+Eqw4HBqVA2c1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:15:d9:94:82:07:9b:82:3a:24:d0:51:df:0c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2a48af3d96931bd90c3bfd55f1fa3047b356014
Validity
Not Before: Sep 7 07:00:38 2025 GMT
Not After : Sep 8 07:00:38 2025 GMT
Subject: CN=a0035e554078c34fd8e66535d1f64482be2668ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2f:4f:57:7f:c4:25:92:ad:c8:02:e3:fd:86:
f0:2e:45:9c:d1:90:b5:bc:19:15:f4:9f:bd:b5:7a:
da:22:7f:97:2a:ca:cb:04:49:5b:e8:4f:ab:43:d3:
e8:dc:e4:87:4f:ab:66:28:df:b4:38:52:81:59:91:
28:85:fd:55:dc:94:00:f2:12:21:8e:3d:3a:1c:e5:
fb:31:b5:db:57:49:1a:9f:e3:17:b5:43:74:f2:80:
26:cf:db:b5:dd:aa:95:f4:7a:eb:d3:0c:77:89:bd:
c6:d2:96:e0:f0:b4:e3:f7:56:15:ef:f1:00:43:fe:
82:23:2a:df:f3:e6:55:9f:32:05:65:26:40:86:8f:
74:c2:ab:17:54:9f:76:71:00:55:98:b3:09:a4:75:
4c:38:8b:15:8e:55:3f:0c:85:3f:37:84:fe:84:92:
c8:fe:d0:90:42:96:fc:ae:96:30:38:83:57:21:97:
a7:64:b8:e7:7f:6e:8a:c8:89:d0:1b:e5:3c:47:f3:
3f:97:0e:76:b1:28:ca:66:72:6c:ab:8c:d7:af:d5:
9d:22:d7:5b:38:ff:8f:a8:7d:52:13:6f:f5:4d:75:
b7:bc:cd:9e:b7:b0:fa:b2:97:d7:c2:cf:ca:7d:5c:
40:48:d5:3f:8f:4c:34:c6:72:35:31:41:2b:d6:5a:
b6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:03:5E:55:40:78:C3:4F:D8:E6:65:35:D1:F6:44:82:BE:26:68:EF
X509v3 Authority Key Identifier:
keyid:B2:A4:8A:F3:D9:69:31:BD:90:C3:BF:D5:5F:1F:A3:04:7B:35:60:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:8b:5d:67:32:a7:f0:a7:13:ea:11:e8:4e:d3:70:ac:b0:c9:
65:24:8b:2c:c4:14:55:bd:f7:55:d6:c9:13:08:c1:93:57:ee:
a7:d6:3f:f1:fc:de:4c:4a:1f:f0:e3:39:83:07:5e:dd:db:6f:
23:17:92:24:f8:9d:8c:1d:73:73:76:a6:fd:1f:b6:cb:e9:59:
2a:f0:ec:66:6f:28:f7:86:85:be:ef:64:06:57:44:c9:04:5f:
fd:e4:53:5d:29:bb:f2:a0:2d:99:2b:c5:cc:ad:88:d6:89:8f:
68:71:d4:e5:b1:ad:8c:fe:96:ba:d3:c2:54:7d:8d:44:1b:e9:
33:5f:c8:24:65:ed:51:80:13:34:7a:d6:00:82:5b:c5:3d:6a:
33:41:55:0f:14:88:ed:ac:48:21:cf:ab:6c:3e:41:99:51:28:
35:5a:31:81:06:3a:0b:7f:ba:55:ac:eb:e4:35:0f:bc:f1:2e:
61:ea:90:ad:7b:b6:de:fb:6d:ad:82:2a:bf:5e:30:ac:7d:ff:
88:e7:56:4b:e8:85:7b:1c:41:d4:bf:14:b1:0c:21:bc:94:6b:
48:d4:40:26:ad:12:b7:52:2c:cc:93:2f:53:66:d6:8c:36:c0:
4f:f4:97:98:0e:f2:95:ab:ee:7e:c6:8a:b4:55:97:3e:5f:41:
fd:15:45:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+hXZlIIHm4I6JNBR3wzqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYTQ4YWYzZDk2OTMxYmQ5MGMzYmZkNTVmMWZhMzA0N2Iz
NTYwMTQwHhcNMjUwOTA3MDcwMDM4WhcNMjUwOTA4MDcwMDM4WjAzMTEwLwYDVQQD
EyhhMDAzNWU1NTQwNzhjMzRmZDhlNjY1MzVkMWY2NDQ4MmJlMjY2OGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuC9PV3/EJZKtyALj/YbwLkWc0ZC1
vBkV9J+9tXraIn+XKsrLBElb6E+rQ9Po3OSHT6tmKN+0OFKBWZEohf1V3JQA8hIh
jj06HOX7MbXbV0kan+MXtUN08oAmz9u13aqV9Hrr0wx3ib3G0pbg8LTj91YV7/EA
Q/6CIyrf8+ZVnzIFZSZAho90wqsXVJ92cQBVmLMJpHVMOIsVjlU/DIU/N4T+hJLI
/tCQQpb8rpYwOINXIZenZLjnf26KyInQG+U8R/M/lw52sSjKZnJsq4zXr9WdItdb
OP+PqH1SE2/1TXW3vM2et7D6spfXws/KfVxASNU/j0w0xnI1MUEr1lq2ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKADXlVAeMNP2OZlNdH2RIK+JmjvMB8GA1UdIwQY
MBaAFLKkivPZaTG9kMO/1V8fowR7NWAUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3FTSzg5bHBNYjJRdzdfVlh4LWpCSHMxWUJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kNTFhZGYtMTQ5Mi00YzE0LTg4MjEt
YjliZDA2NTk0ODNhLzEvc3FTSzg5bHBNYjJRdzdfVlh4LWpCSHMxWUJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kNTFhZGYtMTQ5Mi00YzE0LTg4MjEtYjliZDA2NTk0ODNh
LzEvc3FTSzg5bHBNYjJRdzdfVlh4LWpCSHMxWUJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArYtdZzKn
8KcT6hHoTtNwrLDJZSSLLMQUVb33VdbJEwjBk1fup9Y/8fzeTEof8OM5gwde3dtv
IxeSJPidjB1zc3am/R+2y+lZKvDsZm8o94aFvu9kBldEyQRf/eRTXSm78qAtmSvF
zK2I1omPaHHU5bGtjP6WutPCVH2NRBvpM1/IJGXtUYATNHrWAIJbxT1qM0FVDxSI
7axIIc+rbD5BmVEoNVoxgQY6C3+6Vazr5DUPvPEuYeqQrXu23vttrYIqv14wrH3/
iOdWS+iFexxB1L8UsQwhvJRrSNRAJq0St1IszJMvU2bWjDbAT/SXmA7ylavufsaK
tFWXPl9B/RVFpw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:02 2025 by rpki-client