Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
File: sQw889xTylScA-T19G2RzpC44HA.mft (raw, json)
Hash identifier: E2oeeSs1YXLhvGf5QU3UlG61rv/EgQKzWtgMwJ6fl1U=
Subject key identifier: 71:6A:B6:82:76:33:99:C2:59:32:7B:44:E8:6D:0C:7C:E9:E2:2C:91
Authority key identifier: B1:0C:3C:F3:DC:53:CA:54:9C:03:E4:F5:F4:6D:91:CE:90:B8:E0:70
Certificate issuer: /CN=b10c3cf3dc53ca549c03e4f5f46d91ce90b8e070
Certificate serial: 019A71B8C6D8A23A73EF2351C3978885C4D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
Manifest number: 1734
Signing time: Tue 11 Nov 2025 07:02:06 +0000
Manifest this update: Tue 11 Nov 2025 07:02:06 +0000
Manifest next update: Wed 12 Nov 2025 07:02:06 +0000
Files and hashes: 1: FbIoob4iTw44eH-Dt8h61MoAIPY.roa (hash: 7Jgl5oeZbwQ2DvaEShI936iS6DHQaWaMAl7kfq1Du28=)
2: sQw889xTylScA-T19G2RzpC44HA.crl (hash: luIXJ2oS13ZYFudloaJyeXD023ZONjKHhSWhVXVHwFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:c6:d8:a2:3a:73:ef:23:51:c3:97:88:85:c4:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b10c3cf3dc53ca549c03e4f5f46d91ce90b8e070
Validity
Not Before: Nov 11 07:02:06 2025 GMT
Not After : Nov 12 07:02:06 2025 GMT
Subject: CN=716ab682763399c259327b44e86d0c7ce9e22c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:81:58:cf:53:3a:7a:36:73:25:7b:9e:73:a3:
3f:7c:e1:97:52:6f:b6:cc:b9:78:88:a5:80:e1:10:
75:3f:ea:f1:a1:14:a9:c2:0b:4c:c0:f2:2f:cc:fb:
a3:bd:0f:8b:1c:ba:0c:5e:85:a2:a8:28:1e:66:49:
4f:b0:7c:21:d0:e5:81:53:1b:fd:f1:e6:e2:e3:09:
44:fd:78:5e:6b:7d:53:8b:d4:d5:e1:96:fd:a4:cb:
48:26:89:12:5b:92:ba:4b:1b:d2:ce:d8:20:ce:e1:
6e:0c:d6:c6:c0:77:e5:44:cb:7d:1a:cf:ec:d8:5a:
02:2c:e8:10:f0:59:12:c2:c5:ce:fa:a8:7c:2e:74:
56:60:f1:ec:50:58:1e:3f:5b:32:7e:51:bd:52:a0:
09:0d:16:7d:2c:89:2c:df:eb:37:cd:93:a4:50:ab:
fc:34:7c:d1:52:bc:34:7a:57:e6:2b:c8:d9:a6:f5:
e6:a2:49:be:ec:46:75:09:02:3b:fe:f5:d3:ab:14:
a1:1c:d4:95:06:fb:8d:c8:95:aa:cc:e1:b6:2d:92:
b9:56:97:e7:b2:da:13:87:77:dc:21:e4:93:7d:85:
72:10:8d:5e:3c:11:8d:b0:f6:9e:0f:81:07:82:0d:
fd:b1:c4:24:ac:a3:87:06:60:21:e8:4d:07:57:2a:
9a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:6A:B6:82:76:33:99:C2:59:32:7B:44:E8:6D:0C:7C:E9:E2:2C:91
X509v3 Authority Key Identifier:
keyid:B1:0C:3C:F3:DC:53:CA:54:9C:03:E4:F5:F4:6D:91:CE:90:B8:E0:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:9d:f8:f8:30:b7:72:b6:ac:d5:d6:c6:19:51:5a:2a:dc:04:
5e:86:c6:af:42:f9:aa:5a:68:8e:73:43:86:14:8c:1c:04:04:
d4:14:22:a6:0d:f0:f3:bf:35:a2:56:42:e8:bd:c9:77:82:39:
f6:e9:b6:0d:92:ea:80:7d:e6:a8:98:ba:81:d6:29:0f:23:3d:
69:6e:9f:39:b9:ed:cd:5e:e4:8e:68:39:44:89:7c:a3:f9:b7:
85:73:12:da:ba:98:33:44:2a:51:89:a7:65:29:f1:95:f3:a9:
60:a2:62:8f:93:f1:11:33:53:46:e4:52:f9:f4:57:68:d6:36:
7d:1f:8d:70:ab:ad:f3:76:a7:e7:39:42:74:5e:0e:88:7b:3a:
e8:0f:59:b7:71:26:35:9f:57:92:70:41:d0:00:c3:77:e1:b6:
4a:43:a7:5c:04:e9:1e:87:66:43:48:d2:ae:ea:4b:d1:98:e2:
99:2a:fa:60:15:8b:85:be:15:eb:0b:7c:bb:85:91:69:f0:be:
43:35:67:d2:8a:bf:c3:cc:6e:34:39:04:51:04:f0:05:f3:93:
58:aa:95:07:e3:7f:3d:fa:97:a2:7a:e8:43:a5:41:7a:7e:84:
78:95:97:9e:08:d7:31:dc:51:cf:30:5e:27:cb:14:e1:72:d9:
1b:25:aa:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuMbYojpz7yNRw5eIhcTYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxMGMzY2YzZGM1M2NhNTQ5YzAzZTRmNWY0NmQ5MWNlOTBi
OGUwNzAwHhcNMjUxMTExMDcwMjA2WhcNMjUxMTEyMDcwMjA2WjAzMTEwLwYDVQQD
Eyg3MTZhYjY4Mjc2MzM5OWMyNTkzMjdiNDRlODZkMGM3Y2U5ZTIyYzkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5YFYz1M6ejZzJXuec6M/fOGXUm+2
zLl4iKWA4RB1P+rxoRSpwgtMwPIvzPujvQ+LHLoMXoWiqCgeZklPsHwh0OWBUxv9
8ebi4wlE/Xhea31Ti9TV4Zb9pMtIJokSW5K6SxvSztggzuFuDNbGwHflRMt9Gs/s
2FoCLOgQ8FkSwsXO+qh8LnRWYPHsUFgeP1syflG9UqAJDRZ9LIks3+s3zZOkUKv8
NHzRUrw0elfmK8jZpvXmokm+7EZ1CQI7/vXTqxShHNSVBvuNyJWqzOG2LZK5Vpfn
stoTh3fcIeSTfYVyEI1ePBGNsPaeD4EHgg39scQkrKOHBmAh6E0HVyqaWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHFqtoJ2M5nCWTJ7ROhtDHzp4iyRMB8GA1UdIwQY
MBaAFLEMPPPcU8pUnAPk9fRtkc6QuOBwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1F3ODg5eFR5bFNjQS1UMTlHMlJ6cEM0NEhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8yNWNkYjQtZTUwOC00YjM3LTgxYmMt
MzZmODJiZDM3OWJkLzEvc1F3ODg5eFR5bFNjQS1UMTlHMlJ6cEM0NEhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8yNWNkYjQtZTUwOC00YjM3LTgxYmMtMzZmODJiZDM3OWJk
LzEvc1F3ODg5eFR5bFNjQS1UMTlHMlJ6cEM0NEhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEp34+DC3
cras1dbGGVFaKtwEXobGr0L5qlpojnNDhhSMHAQE1BQipg3w8781olZC6L3Jd4I5
9um2DZLqgH3mqJi6gdYpDyM9aW6fObntzV7kjmg5RIl8o/m3hXMS2rqYM0QqUYmn
ZSnxlfOpYKJij5PxETNTRuRS+fRXaNY2fR+NcKut83an5zlCdF4OiHs66A9Zt3Em
NZ9XknBB0ADDd+G2SkOnXATpHodmQ0jSrupL0ZjimSr6YBWLhb4V6wt8u4WRafC+
QzVn0oq/w8xuNDkEUQTwBfOTWKqVB+N/PfqXonroQ6VBen6EeJWXngjXMdxRzzBe
J8sU4XLZGyWqiw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:58 2025 by rpki-client