Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.mft
File: SqbchPRraQchSFpEBb_JOdolSWk.mft (raw, json)
Hash identifier: 8OIhfIHSjl6f6WBmiaYnHU/UpxrSus5qxVmr+RkOCE0=
Subject key identifier: BE:6F:F7:EB:54:C9:6B:AC:95:36:68:3F:FB:31:73:82:E4:DD:46:36
Authority key identifier: 4A:A6:DC:84:F4:6B:69:07:21:48:5A:44:05:BF:C9:39:DA:25:49:69
Certificate issuer: /CN=4aa6dc84f46b690721485a4405bfc939da254969
Certificate serial: 019A7149B4555FFCD149D84DED4AA8F345FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqbchPRraQchSFpEBb_JOdolSWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.mft
Manifest number: 0274
Signing time: Tue 11 Nov 2025 05:00:46 +0000
Manifest this update: Tue 11 Nov 2025 05:00:46 +0000
Manifest next update: Wed 12 Nov 2025 05:00:46 +0000
Files and hashes: 1: SqbchPRraQchSFpEBb_JOdolSWk.crl (hash: N0BKqQfofEuv01A0+pPAqaDLz2uzwm69K5VGvkqFpdQ=)
2: b__HqKu-AMKs2UTm6p-v2OEs7OA.roa (hash: f7396FR/6MUlNoG4o7cmoviarkI5X6EgtZeJr/g+J2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/SqbchPRraQchSFpEBb_JOdolSWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:b4:55:5f:fc:d1:49:d8:4d:ed:4a:a8:f3:45:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aa6dc84f46b690721485a4405bfc939da254969
Validity
Not Before: Nov 11 05:00:46 2025 GMT
Not After : Nov 12 05:00:46 2025 GMT
Subject: CN=be6ff7eb54c96bac9536683ffb317382e4dd4636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d2:8a:56:d5:dc:4c:1c:19:aa:0a:84:d5:02:
6b:80:10:6f:ad:2d:87:9a:39:36:2a:c0:be:c3:86:
fa:85:c3:c9:2c:d2:d2:50:c6:f2:9d:1b:c4:58:72:
a6:38:f9:c3:26:a9:47:78:ed:18:c8:b7:ce:82:61:
fe:39:74:b0:50:c3:f1:3a:a3:7d:9d:93:8a:18:d3:
88:44:67:29:3b:bf:8e:3b:ce:af:ea:2a:f5:ab:5d:
e5:ba:53:dd:2d:c0:93:a9:c6:03:b0:0e:53:ba:20:
0f:68:b5:73:c1:30:53:62:c4:4b:c4:61:a3:98:42:
99:c9:57:9c:10:f6:b6:bc:95:20:0c:1b:66:69:78:
9a:10:d9:8c:19:b3:f5:b2:45:95:ad:a0:97:ae:9c:
48:ef:f8:c8:c8:e3:d9:9e:d9:a1:92:ca:36:bd:5d:
cb:57:0b:65:d9:8c:4e:ab:95:87:da:f7:fa:df:79:
e0:47:d0:c0:97:5d:eb:a1:5a:74:22:cd:c5:35:0b:
fa:6e:9e:69:6b:e4:4d:9d:9e:ad:12:8a:34:67:73:
f0:e0:b2:9b:c6:38:88:7d:6e:45:40:d8:31:7b:1d:
9e:bd:d3:63:1d:99:95:e3:0e:98:4b:9a:54:73:bb:
31:bd:cc:97:d4:7e:ab:fe:0f:85:32:e7:b2:e2:b2:
b3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:6F:F7:EB:54:C9:6B:AC:95:36:68:3F:FB:31:73:82:E4:DD:46:36
X509v3 Authority Key Identifier:
keyid:4A:A6:DC:84:F4:6B:69:07:21:48:5A:44:05:BF:C9:39:DA:25:49:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqbchPRraQchSFpEBb_JOdolSWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:b3:4c:7a:1a:48:a5:80:d2:a9:cd:36:3b:a9:c8:5c:04:2b:
89:08:57:13:6b:cd:cc:03:4d:3d:87:e5:8e:7f:be:87:26:59:
55:ac:b5:0a:13:37:df:1a:ad:bd:93:f9:63:ad:81:21:70:c8:
4e:65:3f:c1:76:40:0a:44:ca:80:e3:7e:bf:e4:62:6d:79:28:
b2:ad:13:f5:ae:44:6b:fa:88:2c:38:8d:b7:11:ec:8d:78:1a:
91:eb:47:9f:9c:52:83:2d:25:e1:aa:64:f5:73:1c:99:dd:be:
18:14:86:4d:5c:08:1f:6f:41:3b:0a:2c:d7:3a:c6:9f:9a:1c:
4b:5f:8b:b2:98:11:75:b5:5a:3c:24:10:f8:1c:f3:fa:db:42:
85:21:52:ce:3a:f8:dc:4a:bc:9c:04:d3:39:57:5d:d0:b3:b8:
7e:5a:98:59:5e:2a:d0:78:4c:90:16:54:46:e2:b3:fc:11:50:
be:57:0a:09:af:33:9a:5a:1b:bd:b3:1e:97:c7:d4:a8:f5:bd:
90:c0:15:08:4b:80:3b:64:52:ab:82:fe:95:da:a8:15:ba:0b:
0f:99:7b:5b:a4:c7:22:fa:a1:6d:ea:93:3f:3c:9e:33:52:8a:
f1:f7:15:91:c0:d9:c0:b6:16:1b:ce:8e:ed:c7:74:8e:a5:f6:
f0:ea:af:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:01 2025 by rpki-client