Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
File: SqXjXAXCq1S-dYtshnGGzuFZvWM.mft (raw, json)
Hash identifier: Su2PBg2iDlOb0pDxqpHp5nlHEnirMzrZsXUluDHaLPg=
Subject key identifier: AA:71:BA:EA:E0:A1:9A:0D:3A:A5:67:E9:0B:FD:90:88:FD:85:DD:F0
Authority key identifier: 4A:A5:E3:5C:05:C2:AB:54:BE:75:8B:6C:86:71:86:CE:E1:59:BD:63
Certificate issuer: /CN=4aa5e35c05c2ab54be758b6c867186cee159bd63
Certificate serial: 019A725C7B2DF32DD76DB9CFEA5B5A4C8935
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqXjXAXCq1S-dYtshnGGzuFZvWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
Manifest number: 111A
Signing time: Tue 11 Nov 2025 10:00:54 +0000
Manifest this update: Tue 11 Nov 2025 10:00:54 +0000
Manifest next update: Wed 12 Nov 2025 10:00:54 +0000
Files and hashes: 1: 0giOT2-cspinjb0AYnQ0xR7oe3s.roa (hash: JsKfvRyfvFNiFnymkkC31pksnK2WhZYhTKOkR+nS9d4=)
2: SqXjXAXCq1S-dYtshnGGzuFZvWM.crl (hash: KnINrbBjeyz572E2kkXjirhr0vRtLh2TOJUNhcvrJCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SqXjXAXCq1S-dYtshnGGzuFZvWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:7b:2d:f3:2d:d7:6d:b9:cf:ea:5b:5a:4c:89:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aa5e35c05c2ab54be758b6c867186cee159bd63
Validity
Not Before: Nov 11 10:00:54 2025 GMT
Not After : Nov 12 10:00:54 2025 GMT
Subject: CN=aa71baeae0a19a0d3aa567e90bfd9088fd85ddf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:58:5d:05:a7:ce:c3:f3:d5:ab:fc:3e:be:51:
38:e8:2d:3b:09:4d:15:34:13:9c:07:af:1a:2e:3c:
fd:09:f8:7f:a7:72:1c:7c:33:9f:07:23:8e:7e:5e:
d8:73:7d:ad:d3:ca:8a:2f:2f:37:b9:22:42:91:12:
6c:f0:52:ef:21:ae:bf:fc:a3:4f:39:2f:ac:52:e4:
ff:ca:75:e5:bb:ec:9d:dd:84:cc:ba:98:c3:f1:b3:
2a:4d:50:91:02:d6:80:86:38:10:f3:e5:25:f4:72:
1f:a9:5e:d8:0e:3f:5c:28:43:a8:fc:7c:cf:af:d3:
e3:8b:3e:4a:82:cd:f5:f2:db:50:82:68:8f:76:93:
22:3d:01:ec:e5:2b:39:d4:5c:95:25:c5:0b:ca:c4:
54:ee:29:96:eb:83:49:7b:ca:41:d9:e5:eb:ee:ec:
f3:32:ad:56:27:17:40:64:b5:55:7f:67:ba:3d:c7:
26:ed:f4:86:7b:d3:6a:42:81:f2:c4:1c:5b:83:7d:
4f:c9:3f:51:79:44:b4:c7:4a:91:76:5b:f2:e3:27:
7e:77:cb:31:9d:bf:09:59:b9:83:98:e7:22:ef:d9:
79:3a:4c:51:13:88:67:0e:98:cd:a8:a7:f9:e9:c5:
60:43:2a:b1:eb:ce:82:3c:21:ed:6a:f0:a5:f4:27:
ce:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:71:BA:EA:E0:A1:9A:0D:3A:A5:67:E9:0B:FD:90:88:FD:85:DD:F0
X509v3 Authority Key Identifier:
keyid:4A:A5:E3:5C:05:C2:AB:54:BE:75:8B:6C:86:71:86:CE:E1:59:BD:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqXjXAXCq1S-dYtshnGGzuFZvWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:fc:3c:3f:bf:4a:5d:e7:0a:82:e3:05:75:50:9f:69:d2:e7:
dc:37:0c:5a:2e:0e:c6:25:10:5e:75:de:e9:81:d4:5d:fe:d1:
79:59:64:6d:33:7f:79:3d:ac:83:2c:9e:d8:21:56:6c:a2:e4:
a9:de:e0:11:20:43:0e:fd:34:b9:b1:ac:7a:8f:7e:6f:84:e1:
7b:f9:3a:86:15:46:b6:69:8c:2f:15:90:76:6a:42:c3:19:f3:
30:97:db:23:7b:c5:8a:e3:b3:96:36:21:3f:b0:76:c8:e8:97:
66:1a:01:29:55:42:e3:a2:b5:e8:d6:77:83:b7:3c:19:0f:c7:
93:87:1e:cf:9c:a2:dc:7f:4c:f3:45:44:c8:a6:06:75:a6:d5:
d1:a9:7b:5c:ad:54:21:c5:8c:c6:ee:8f:9e:49:7d:71:ab:86:
2e:9a:f1:03:d0:dd:63:a2:ae:a3:2a:21:5d:a1:af:b9:d5:d8:
de:ee:6d:bb:35:80:d9:82:1b:8f:17:36:39:c8:72:96:93:0c:
af:30:69:79:44:e6:8b:05:81:3e:59:b1:73:be:4f:2b:12:79:
d0:37:cb:58:b4:a1:57:36:b3:7a:e2:b0:2f:c2:c4:51:8d:72:
2a:33:6a:9f:b2:bc:d8:22:cc:82:43:50:a5:91:79:b7:ac:b1:
a3:89:34:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:22:32 2025 by rpki-client