Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft
File: SqvRp2WuXL4dyT2vAk06R-cqyRg.mft (raw, json)
Hash identifier: aJ1CVd2N6AZ1BTUHVdq0mhugtRrBrEJq/vd4OIu8AFs=
Subject key identifier: DC:4A:57:78:2A:8C:76:FE:66:3A:87:47:09:6E:C1:8F:E9:04:64:7E
Authority key identifier: 4A:AB:D1:A7:65:AE:5C:BE:1D:C9:3D:AF:02:4D:3A:47:E7:2A:C9:18
Certificate issuer: /CN=4aabd1a765ae5cbe1dc93daf024d3a47e72ac918
Certificate serial: 019A73387CCE5BB4AA7139FD36811E6F2DD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqvRp2WuXL4dyT2vAk06R-cqyRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft
Manifest number: 10DB
Signing time: Tue 11 Nov 2025 14:01:13 +0000
Manifest this update: Tue 11 Nov 2025 14:01:13 +0000
Manifest next update: Wed 12 Nov 2025 14:01:13 +0000
Files and hashes: 1: SqvRp2WuXL4dyT2vAk06R-cqyRg.crl (hash: eEQeoo0WFLzrsf2BLTMlVh83Vwj/cHJGTng1NVspCOg=)
2: tmx5LjQV62XIOiTTxX3EbhTuW90.roa (hash: ONvGVTfcwoaLd5CXPlp64qPMMnmfgrXhtwa7DXeFCYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SqvRp2WuXL4dyT2vAk06R-cqyRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:7c:ce:5b:b4:aa:71:39:fd:36:81:1e:6f:2d:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aabd1a765ae5cbe1dc93daf024d3a47e72ac918
Validity
Not Before: Nov 11 14:01:13 2025 GMT
Not After : Nov 12 14:01:13 2025 GMT
Subject: CN=dc4a57782a8c76fe663a8747096ec18fe904647e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2e:eb:ef:fd:bd:9c:c8:45:db:bf:15:dd:be:
75:0e:91:39:7c:3c:66:9f:d8:44:bf:7d:76:86:a7:
e0:4e:06:e5:8f:6e:66:e0:73:ee:7e:2a:7e:dd:b6:
98:1f:34:4a:04:6a:14:18:83:3e:99:fe:e1:ad:2e:
e6:1d:2d:2d:1b:ec:98:a2:66:16:54:8d:0c:5e:ef:
7a:af:59:f0:0e:0f:b4:13:c3:8d:53:bd:0b:36:2b:
98:f2:77:3e:f8:03:55:53:2a:17:ba:7b:27:61:70:
fc:e3:65:41:ca:26:42:38:de:21:d5:3e:56:d1:d2:
1b:9f:2b:4b:de:1f:11:63:8e:16:0e:32:3e:76:30:
9b:62:30:43:35:d2:00:f0:0a:d6:3c:d5:80:1e:13:
e0:aa:e2:9a:e6:eb:92:e1:37:dc:87:c5:7e:aa:e7:
e6:43:84:8f:43:84:93:2c:f7:23:4c:ec:01:02:d4:
69:60:52:eb:2f:55:23:dc:9d:18:b0:66:9a:76:19:
75:df:93:99:48:b3:49:86:d7:94:6d:37:fd:2c:ff:
9d:32:f5:1e:d7:f7:f3:4d:57:27:b8:8b:98:a3:3b:
d1:ed:c1:fd:e9:76:e6:65:6b:03:b0:ec:f8:fd:f6:
9b:21:4a:a7:29:6b:98:9b:e3:11:52:cc:55:47:63:
72:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:4A:57:78:2A:8C:76:FE:66:3A:87:47:09:6E:C1:8F:E9:04:64:7E
X509v3 Authority Key Identifier:
keyid:4A:AB:D1:A7:65:AE:5C:BE:1D:C9:3D:AF:02:4D:3A:47:E7:2A:C9:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqvRp2WuXL4dyT2vAk06R-cqyRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:42:c4:4f:06:e1:8d:89:04:fe:23:fa:ea:e5:59:ce:d5:e9:
05:11:1a:f1:8a:24:1a:6e:e4:12:86:d7:ac:2b:57:43:fa:f1:
52:6e:41:b1:7b:a2:d0:af:84:a7:a4:9e:be:40:03:ef:59:46:
72:b4:ad:55:cb:a2:0f:72:ef:83:7f:e9:65:7d:cf:e9:40:e3:
00:55:a5:38:7f:63:16:1e:8a:80:61:b1:27:ec:8f:9b:8c:dd:
73:f9:6d:c1:f2:94:99:65:c9:61:2e:39:c0:b2:a1:00:7f:d2:
1e:87:44:0b:33:99:b1:52:9f:94:aa:8c:19:16:39:af:0c:2f:
00:20:ce:c3:9e:ad:a2:50:44:32:13:21:bf:82:ca:4c:cf:01:
54:ce:34:77:fb:78:0c:13:5b:e7:8c:43:c0:9e:84:d0:06:70:
2a:75:d9:ed:89:69:b4:ba:4f:dc:b1:f8:0b:d2:0a:98:cd:b6:
03:da:26:e5:2c:85:04:ec:1e:ff:95:74:21:33:62:28:2f:a0:
27:20:4a:42:f9:19:b8:98:18:91:13:9d:fa:1b:84:f3:53:fa:
f7:1d:da:e1:a0:e9:bc:5a:0a:bf:f7:1e:98:5c:be:92:79:68:
3f:81:ad:e6:0d:c2:7a:bb:2e:e3:95:fa:18:78:7b:3e:6f:2c:
0c:37:7b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:51:37 2025 by rpki-client