Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.mft
File: sQvyxqnxpCuKzuASWfkfUUSrivU.mft (raw, json)
Hash identifier: F9JD+gfGNnwj7sGuqSzzNaMn7R1c2xaONoNFFVkdUhU=
Subject key identifier: FC:FD:F4:6B:EB:C6:83:7F:3C:FE:8A:65:A6:0D:9D:DA:E5:E4:02:83
Authority key identifier: B1:0B:F2:C6:A9:F1:A4:2B:8A:CE:E0:12:59:F9:1F:51:44:AB:8A:F5
Certificate issuer: /CN=b10bf2c6a9f1a42b8acee01259f91f5144ab8af5
Certificate serial: 019A725C5E870885D95BD6D0016FE54A9B7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQvyxqnxpCuKzuASWfkfUUSrivU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.mft
Manifest number: 06B7
Signing time: Tue 11 Nov 2025 10:00:47 +0000
Manifest this update: Tue 11 Nov 2025 10:00:47 +0000
Manifest next update: Wed 12 Nov 2025 10:00:47 +0000
Files and hashes: 1: RagZVp33x_ZhRPfhRcY-ePMpfNA.roa (hash: gMsYucRSntBj1BaVj8EkbP09b3qQ09XAtS6QWD6kZsw=)
2: sQvyxqnxpCuKzuASWfkfUUSrivU.crl (hash: vzdybMZMhs/rlW0Fg54/z0YbFroVvzfNQuSMyMu1mu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sQvyxqnxpCuKzuASWfkfUUSrivU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:5e:87:08:85:d9:5b:d6:d0:01:6f:e5:4a:9b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b10bf2c6a9f1a42b8acee01259f91f5144ab8af5
Validity
Not Before: Nov 11 10:00:47 2025 GMT
Not After : Nov 12 10:00:47 2025 GMT
Subject: CN=fcfdf46bebc6837f3cfe8a65a60d9ddae5e40283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e7:d2:ef:dc:b4:79:14:54:4e:86:34:fa:5e:
62:c4:eb:94:ef:84:c9:d4:ac:0b:c5:9f:9f:d8:28:
9b:97:be:6c:c2:cf:71:e4:6d:e2:64:7c:c7:b9:5a:
22:ec:fa:1d:3a:8c:d5:87:aa:bf:63:ef:35:ba:8e:
69:2b:e5:5a:59:80:00:12:5d:97:83:63:5f:81:7b:
e5:ef:36:47:a0:ce:3e:5d:17:ca:26:2e:d0:94:75:
4d:3e:f8:97:d1:b1:5a:d7:89:7e:18:fb:9d:e0:24:
7c:2b:50:9a:fa:0d:eb:8e:03:41:af:19:f9:a4:cb:
51:59:dc:e7:fe:63:4c:29:3f:33:90:19:5f:e6:bf:
32:69:e9:ff:29:b5:ab:91:f7:41:6d:25:9f:f7:a2:
5b:41:c3:8d:43:4d:4b:07:33:36:d6:e7:28:a5:b6:
47:4f:5a:56:ea:21:79:7d:9e:62:61:06:0f:a4:92:
c3:c3:e4:2d:eb:92:df:82:eb:74:1b:5c:c6:b4:15:
67:6e:5a:a7:cf:cb:93:be:39:5f:3b:38:4a:3f:65:
80:ee:3e:f6:c2:8b:e3:3a:8d:93:48:5b:38:c0:38:
2b:e6:1d:24:44:2f:62:2f:e4:cd:12:fc:2b:73:77:
d1:fc:49:02:3a:9e:a0:76:19:f6:ee:2f:1a:55:8a:
d7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:FD:F4:6B:EB:C6:83:7F:3C:FE:8A:65:A6:0D:9D:DA:E5:E4:02:83
X509v3 Authority Key Identifier:
keyid:B1:0B:F2:C6:A9:F1:A4:2B:8A:CE:E0:12:59:F9:1F:51:44:AB:8A:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQvyxqnxpCuKzuASWfkfUUSrivU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:34:fe:a8:a5:1c:b4:f8:3d:54:ca:a9:e6:f4:1e:0c:4e:d3:
b9:70:2d:eb:69:15:e9:65:60:6f:51:6c:5f:a4:1c:04:8b:5f:
0c:53:bb:eb:7a:4c:ff:df:92:8c:8d:63:25:f4:f0:e6:3b:2c:
0e:d1:df:4b:6d:92:a2:2d:6c:6f:47:93:2f:96:14:1a:f0:23:
73:28:29:29:db:88:f6:4f:8b:67:9f:81:61:bd:f8:7f:3c:48:
80:00:e5:67:95:99:fb:c4:e3:e7:5a:03:76:c4:e0:7b:19:9f:
11:59:94:cf:47:b6:b0:5f:c8:b4:6b:77:c8:b3:09:f7:c7:56:
33:a0:15:a7:ec:92:d7:29:ff:3e:1d:d0:21:07:02:bb:73:d8:
55:f1:5a:65:71:ac:67:0a:a5:df:ed:9e:aa:c3:3d:e5:94:6c:
b9:35:f9:de:21:d5:5d:8b:71:3a:56:c7:96:c4:3e:5e:e7:56:
08:8d:88:d1:e6:b8:36:cd:b8:32:56:69:aa:e5:fa:43:cd:da:
1e:4f:a6:86:c0:ba:12:8c:8e:ce:17:56:a9:e8:71:d7:3f:e3:
e4:c4:96:ea:e0:a4:21:da:d4:bd:80:61:45:52:35:b3:3b:7d:
20:a1:86:f4:3c:21:a8:ed:8a:90:55:fc:9d:79:0f:38:47:d8:
eb:46:f4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:19:07 2025 by rpki-client