Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
File: SqXjXAXCq1S-dYtshnGGzuFZvWM.mft (raw, json)
Hash identifier: r5ZntsjyopRGlN4yHoN5yMjWyXWsPFeluRcdP7wH/UQ=
Subject key identifier: 37:04:DC:B3:B6:9D:4E:C6:BF:F1:1F:81:DD:7B:24:80:E3:B4:CE:D3
Authority key identifier: 4A:A5:E3:5C:05:C2:AB:54:BE:75:8B:6C:86:71:86:CE:E1:59:BD:63
Certificate issuer: /CN=4aa5e35c05c2ab54be758b6c867186cee159bd63
Certificate serial: 01992444066D8021978C89C61A68103654F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqXjXAXCq1S-dYtshnGGzuFZvWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
Manifest number: 106D
Signing time: Sun 07 Sep 2025 13:01:01 +0000
Manifest this update: Sun 07 Sep 2025 13:01:01 +0000
Manifest next update: Mon 08 Sep 2025 13:01:01 +0000
Files and hashes: 1: 0giOT2-cspinjb0AYnQ0xR7oe3s.roa (hash: JsKfvRyfvFNiFnymkkC31pksnK2WhZYhTKOkR+nS9d4=)
2: SqXjXAXCq1S-dYtshnGGzuFZvWM.crl (hash: InBpkpa/7ybTFUe2e8qyYfh96nzjFsLB+o3tHbV5908=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SqXjXAXCq1S-dYtshnGGzuFZvWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:44:06:6d:80:21:97:8c:89:c6:1a:68:10:36:54:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aa5e35c05c2ab54be758b6c867186cee159bd63
Validity
Not Before: Sep 7 13:01:01 2025 GMT
Not After : Sep 8 13:01:01 2025 GMT
Subject: CN=3704dcb3b69d4ec6bff11f81dd7b2480e3b4ced3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:41:d6:2e:37:a9:bb:7d:7f:50:4d:ed:41:53:
a8:a8:85:9e:2d:fd:44:1e:2f:b5:6b:39:80:9a:c2:
72:a7:b4:f9:8b:2d:3b:6a:f5:31:ad:60:72:f2:ff:
56:55:74:53:2a:35:07:61:de:a6:a3:02:e4:70:db:
cf:e9:5d:90:a4:5c:a8:c9:55:b9:6f:c6:2e:b9:ac:
d7:b2:d0:9a:5b:b9:d3:79:40:d3:db:31:96:46:31:
5e:fa:88:90:60:ce:12:a3:93:cd:d1:ab:38:65:bf:
46:3b:ca:18:f1:dc:da:0d:fe:99:b1:09:76:73:43:
c6:e1:95:25:c9:1e:9f:2c:6f:8d:3f:1e:45:be:4c:
c5:88:27:a9:d3:72:ab:f1:e2:7e:7f:96:1f:10:fb:
30:da:aa:26:3d:b1:4f:36:20:4a:34:c4:e5:07:ec:
b8:c7:e7:ec:cd:ce:cb:d9:8c:ca:7b:ab:84:d7:36:
38:c1:bd:88:97:a3:dc:a0:c5:9f:18:ff:19:a9:c8:
8d:c8:28:18:bf:90:39:26:12:57:65:a4:67:b2:9f:
a9:de:00:33:93:fe:c6:6f:92:db:ca:c3:d6:e8:6e:
74:1c:46:4c:36:8c:90:a5:10:f4:be:44:bd:84:b7:
a9:21:da:4f:a0:89:ed:cf:84:e2:1e:21:a7:de:69:
e1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:04:DC:B3:B6:9D:4E:C6:BF:F1:1F:81:DD:7B:24:80:E3:B4:CE:D3
X509v3 Authority Key Identifier:
keyid:4A:A5:E3:5C:05:C2:AB:54:BE:75:8B:6C:86:71:86:CE:E1:59:BD:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqXjXAXCq1S-dYtshnGGzuFZvWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:26:0b:ec:9f:72:c6:92:a0:0c:11:03:5a:ea:2a:1e:d3:b1:
e4:53:a6:58:92:d5:36:5a:09:cf:6f:8a:50:5d:50:c3:7e:6f:
27:0b:b1:60:ac:f2:4c:80:b5:ac:fc:4a:75:ef:3d:eb:f3:6d:
05:49:21:f4:e4:2d:f8:d0:6b:5f:cf:8d:b4:8a:af:d4:49:fd:
a4:4d:19:85:24:ba:61:e2:d9:72:29:e6:fd:6d:84:ad:7a:e5:
52:98:82:cb:e2:89:cf:71:86:8c:f4:89:d7:a2:60:c4:c5:b9:
9c:47:c3:d0:7d:52:4b:32:a2:7a:f4:8c:40:6b:76:78:6a:f7:
8c:63:89:ba:29:28:06:7e:c4:70:0d:e6:8e:ca:b8:fb:60:bd:
bb:98:1c:f2:f1:c9:7f:0f:54:9d:7f:ea:38:66:86:5f:84:dc:
9e:36:aa:5d:f5:18:28:4e:a0:2e:c0:d6:21:29:50:35:35:6d:
c6:2d:b1:c7:77:92:e8:7a:fc:a5:1c:14:2e:46:6e:b0:8c:b2:
2b:93:10:aa:c0:e5:52:e0:8c:64:8c:c2:e8:61:d2:32:fa:45:
db:eb:44:27:06:b7:77:c5:9c:cd:53:c9:10:c8:74:ee:28:da:
7e:21:ad:d3:37:d0:ce:36:c7:b7:96:ac:c9:0b:38:16:72:2e:
2e:e1:da:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkkRAZtgCGXjInGGmgQNlTzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhYTVlMzVjMDVjMmFiNTRiZTc1OGI2Yzg2NzE4NmNlZTE1
OWJkNjMwHhcNMjUwOTA3MTMwMTAxWhcNMjUwOTA4MTMwMTAxWjAzMTEwLwYDVQQD
EygzNzA0ZGNiM2I2OWQ0ZWM2YmZmMTFmODFkZDdiMjQ4MGUzYjRjZWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EHWLjepu31/UE3tQVOoqIWeLf1E
Hi+1azmAmsJyp7T5iy07avUxrWBy8v9WVXRTKjUHYd6mowLkcNvP6V2QpFyoyVW5
b8YuuazXstCaW7nTeUDT2zGWRjFe+oiQYM4So5PN0as4Zb9GO8oY8dzaDf6ZsQl2
c0PG4ZUlyR6fLG+NPx5FvkzFiCep03Kr8eJ+f5YfEPsw2qomPbFPNiBKNMTlB+y4
x+fszc7L2YzKe6uE1zY4wb2Il6PcoMWfGP8ZqciNyCgYv5A5JhJXZaRnsp+p3gAz
k/7Gb5LbysPW6G50HEZMNoyQpRD0vkS9hLepIdpPoIntz4TiHiGn3mnhPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDcE3LO2nU7Gv/Efgd17JIDjtM7TMB8GA1UdIwQY
MBaAFEql41wFwqtUvnWLbIZxhs7hWb1jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3FYalhBWENxMVMtZFl0c2huR0d6dUZadldNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy83YjY3ZmItYzhiYS00NjJjLWIwNjQt
N2M2NWFlYzZmMmJkLzEvU3FYalhBWENxMVMtZFl0c2huR0d6dUZadldNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy83YjY3ZmItYzhiYS00NjJjLWIwNjQtN2M2NWFlYzZmMmJk
LzEvU3FYalhBWENxMVMtZFl0c2huR0d6dUZadldNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiyYL7J9y
xpKgDBEDWuoqHtOx5FOmWJLVNloJz2+KUF1Qw35vJwuxYKzyTIC1rPxKde896/Nt
BUkh9OQt+NBrX8+NtIqv1En9pE0ZhSS6YeLZcinm/W2ErXrlUpiCy+KJz3GGjPSJ
16JgxMW5nEfD0H1SSzKievSMQGt2eGr3jGOJuikoBn7EcA3mjsq4+2C9u5gc8vHJ
fw9UnX/qOGaGX4TcnjaqXfUYKE6gLsDWISlQNTVtxi2xx3eS6Hr8pRwULkZusIyy
K5MQqsDlUuCMZIzC6GHSMvpF2+tEJwa3d8WczVPJEMh07ijafiGt0zfQzjbHt5as
yQs4FnIuLuHaUQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:41:39 2025 by rpki-client