Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.mft
File: SqaReHb9eJJsGSe5_ceWWNdGyEw.mft (raw, json)
Hash identifier: Bg/0pTdkRU7VLFH4zJmrb/srRmgrwHQNzo4eAK/mkSI=
Subject key identifier: CB:72:4B:5E:1B:E4:36:22:BB:75:AB:EA:84:D6:83:FC:DE:7A:87:75
Authority key identifier: 4A:A6:91:78:76:FD:78:92:6C:19:27:B9:FD:C7:96:58:D7:46:C8:4C
Certificate issuer: /CN=4aa6917876fd78926c1927b9fdc79658d746c84c
Certificate serial: 019A7293979FF32808648666AD5D334487D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqaReHb9eJJsGSe5_ceWWNdGyEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.mft
Manifest number: 1481
Signing time: Tue 11 Nov 2025 11:01:06 +0000
Manifest this update: Tue 11 Nov 2025 11:01:06 +0000
Manifest next update: Wed 12 Nov 2025 11:01:06 +0000
Files and hashes: 1: IbpEEeU88LFNxh5nL5cwRSdFORY.roa (hash: 4vG5HojNCWpZzK5uMY8x1XnpP7QHbyElnVInTc+EUlM=)
2: SqaReHb9eJJsGSe5_ceWWNdGyEw.crl (hash: hSqIhJ5BsT6lm4b6GfiGDMli6lroG4CxSJgxsbg7XjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/SqaReHb9eJJsGSe5_ceWWNdGyEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:97:9f:f3:28:08:64:86:66:ad:5d:33:44:87:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aa6917876fd78926c1927b9fdc79658d746c84c
Validity
Not Before: Nov 11 11:01:06 2025 GMT
Not After : Nov 12 11:01:06 2025 GMT
Subject: CN=cb724b5e1be43622bb75abea84d683fcde7a8775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7f:ff:02:57:8f:3c:b3:46:42:e1:28:b9:04:
7c:0e:fc:d9:13:a4:89:85:07:99:4c:d8:37:67:b8:
65:c5:55:3c:b5:43:5f:20:be:9a:db:1f:a6:54:f8:
a9:d8:65:38:f4:6e:c8:72:30:18:32:c9:f9:ee:ce:
69:df:16:12:ad:59:9b:1e:25:ce:56:6b:de:20:f9:
6c:c3:ef:92:da:9f:cb:31:32:0a:06:e3:04:f2:86:
f4:33:bd:98:e3:46:f8:83:db:00:8a:b0:ca:8c:1b:
76:23:b0:b6:7e:e3:9f:62:37:7b:7c:35:0d:d0:13:
e7:f8:16:d1:98:05:c9:93:ec:65:63:84:4a:fa:7b:
65:5a:f8:ca:2a:1e:05:f3:28:76:92:87:a3:51:14:
20:66:f9:06:eb:64:51:e8:04:95:76:c4:5b:4c:0b:
ae:2d:0b:dc:cf:c5:fb:71:62:a1:a4:fd:7a:95:b6:
0d:a1:9f:01:7b:f5:60:04:e3:43:f0:e5:9a:93:e7:
03:c5:3f:ee:a1:f6:8c:f6:9a:9b:de:9d:6b:db:2d:
11:3e:06:d3:78:de:af:84:0a:80:05:c0:0f:d2:25:
1f:21:9a:fa:ed:d6:8c:16:e6:8a:4e:75:41:dc:67:
04:07:7c:9b:72:66:75:ba:07:ce:0a:02:03:bd:21:
f5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:72:4B:5E:1B:E4:36:22:BB:75:AB:EA:84:D6:83:FC:DE:7A:87:75
X509v3 Authority Key Identifier:
keyid:4A:A6:91:78:76:FD:78:92:6C:19:27:B9:FD:C7:96:58:D7:46:C8:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqaReHb9eJJsGSe5_ceWWNdGyEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:1e:a4:70:ad:38:2d:fa:99:39:d6:7f:80:9c:b1:b8:e1:c5:
f8:82:cd:bf:96:d6:ef:cb:5e:88:a9:1a:60:d1:7e:62:a9:50:
41:6e:84:7c:6f:e2:6c:0a:ab:95:33:26:80:0f:6e:42:e9:60:
fb:af:f0:5f:5f:d3:54:67:ea:84:d9:f8:bb:ff:0c:d8:b9:b2:
3d:8c:46:10:9a:84:66:9a:d8:cb:cb:d2:b5:10:50:78:35:dd:
6d:67:56:c5:bc:0d:7c:93:24:c9:46:93:e9:45:96:0d:01:5e:
a6:c4:df:16:6d:dd:2b:ff:aa:53:82:74:eb:5a:25:c4:50:c3:
db:fa:16:27:98:de:cf:3e:90:df:11:7f:b4:08:2c:a4:de:5d:
13:e5:91:4b:c7:b7:5b:d8:41:95:b6:bd:ac:70:63:84:3b:73:
a3:f3:55:0b:23:2b:8a:0a:d1:f5:12:7b:0b:c4:c4:a2:1a:e3:
86:64:a3:1a:02:0d:c8:2e:f0:ad:25:b3:50:21:f4:17:5c:31:
72:24:8d:00:d2:95:eb:e9:b4:16:fa:e5:92:4f:9f:a9:91:00:
1c:5f:79:df:70:a1:17:e1:1d:b8:8b:98:be:b1:52:2e:cf:e5:
77:79:6d:68:d8:5a:79:65:59:84:e9:4a:28:fc:d7:dc:df:45:
bf:52:d7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:32 2025 by rpki-client