Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
File: sQw889xTylScA-T19G2RzpC44HA.mft (raw, json)
Hash identifier: mr3/T8xlhrRhWajFRh8vjs9YfDu5zQckB+9RB+MvJlg=
Subject key identifier: 48:22:12:98:FD:CC:7C:6F:27:D0:15:F0:3C:97:65:03:BF:C1:00:65
Authority key identifier: B1:0C:3C:F3:DC:53:CA:54:9C:03:E4:F5:F4:6D:91:CE:90:B8:E0:70
Certificate issuer: /CN=b10c3cf3dc53ca549c03e4f5f46d91ce90b8e070
Certificate serial: 019923A0B17FC4FACAF5CF6CD05439D82B8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
Manifest number: 1687
Signing time: Sun 07 Sep 2025 10:02:37 +0000
Manifest this update: Sun 07 Sep 2025 10:02:37 +0000
Manifest next update: Mon 08 Sep 2025 10:02:37 +0000
Files and hashes: 1: FbIoob4iTw44eH-Dt8h61MoAIPY.roa (hash: 7Jgl5oeZbwQ2DvaEShI936iS6DHQaWaMAl7kfq1Du28=)
2: sQw889xTylScA-T19G2RzpC44HA.crl (hash: Mx2Zo7BJ3oxmTH0zVWDfMKmVeFVfV/k5Fl/8dop/u3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:b1:7f:c4:fa:ca:f5:cf:6c:d0:54:39:d8:2b:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b10c3cf3dc53ca549c03e4f5f46d91ce90b8e070
Validity
Not Before: Sep 7 10:02:37 2025 GMT
Not After : Sep 8 10:02:37 2025 GMT
Subject: CN=48221298fdcc7c6f27d015f03c976503bfc10065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0e:b5:c7:c4:69:05:a1:fd:be:35:fc:09:d8:
8b:da:ac:9d:2f:65:96:92:26:91:1e:c0:38:4d:09:
03:b1:b4:4d:e1:3d:2f:18:b7:5c:1d:dc:3e:f6:55:
27:99:73:bb:31:4b:91:c4:a0:af:f2:10:90:66:5f:
37:e7:3b:e9:de:c1:ce:42:e8:2f:2f:2c:da:65:a6:
72:4d:69:91:5c:a2:fa:92:e6:13:9a:7c:cc:f2:c0:
45:e1:d7:b8:a6:44:a0:d2:6b:4c:e1:48:87:8e:a4:
cf:9a:b7:3f:3e:21:e7:dc:72:02:4c:fc:f1:84:9d:
79:19:98:20:fd:9a:1d:b7:f2:ea:43:55:91:b4:1b:
0b:8d:fd:ba:e5:88:b0:eb:a1:91:67:8e:fa:d0:62:
bf:9c:6a:1f:e2:25:a7:dd:99:91:28:a1:fb:77:ca:
1e:00:1e:3b:cc:a9:29:bc:05:cc:b1:4b:0c:61:39:
bb:1f:75:2a:03:50:65:f3:ab:8d:0d:9a:b0:ca:84:
ca:31:69:8f:32:0f:9a:8a:49:a6:0b:41:1c:36:50:
b6:af:94:c6:14:a0:e5:ec:ae:a3:71:15:8c:29:8e:
df:7f:43:65:33:9f:f1:50:ff:97:c9:a8:e3:27:15:
bb:6b:20:66:8c:1e:fb:b6:1a:6a:52:1c:bc:40:fe:
e7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:22:12:98:FD:CC:7C:6F:27:D0:15:F0:3C:97:65:03:BF:C1:00:65
X509v3 Authority Key Identifier:
keyid:B1:0C:3C:F3:DC:53:CA:54:9C:03:E4:F5:F4:6D:91:CE:90:B8:E0:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ab:08:c1:a8:74:19:47:b3:1a:3c:62:ea:5b:df:d4:fb:6e:
a6:37:2c:6a:76:26:ed:1b:ac:bf:9b:db:06:f8:83:42:47:35:
d3:ad:17:f5:3d:d7:5d:cf:a7:8d:a6:8f:01:04:8a:ee:98:18:
d7:5d:f0:17:a7:24:95:21:4b:1d:48:69:98:fa:8e:b6:86:29:
77:f6:21:5f:02:e2:6c:11:ea:09:e5:f8:bf:16:47:e4:de:1b:
46:a8:55:b5:9b:a5:be:28:83:2d:88:f4:01:f3:c4:63:b6:86:
cc:fc:3f:c3:ad:d5:06:a4:ef:c8:50:9f:a3:9d:70:77:0e:31:
0c:dd:93:b2:a1:bb:5a:a4:c9:01:7c:c9:b2:f0:57:7c:4d:4b:
fc:02:b9:29:7f:e1:0e:0d:b1:10:65:9f:bd:a9:47:ed:8b:b6:
f3:6a:9b:91:65:6e:ad:94:2c:7d:10:cc:e8:26:b2:1a:33:33:
6e:4b:72:b2:1a:59:0a:e1:75:36:23:73:88:ec:9b:6a:8c:3a:
16:da:8f:82:6e:85:e0:a9:22:a2:d5:0f:2f:1e:8a:e2:a4:a8:
21:eb:12:41:ea:00:0f:97:13:f7:13:3e:b5:f4:81:5a:f6:7a:
f0:05:79:84:3d:07:a7:17:b1:7c:d5:b8:9f:43:6f:4e:81:ca:
7d:e0:9e:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjoLF/xPrK9c9s0FQ52CuNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxMGMzY2YzZGM1M2NhNTQ5YzAzZTRmNWY0NmQ5MWNlOTBi
OGUwNzAwHhcNMjUwOTA3MTAwMjM3WhcNMjUwOTA4MTAwMjM3WjAzMTEwLwYDVQQD
Eyg0ODIyMTI5OGZkY2M3YzZmMjdkMDE1ZjAzYzk3NjUwM2JmYzEwMDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Q61x8RpBaH9vjX8CdiL2qydL2WW
kiaRHsA4TQkDsbRN4T0vGLdcHdw+9lUnmXO7MUuRxKCv8hCQZl835zvp3sHOQugv
LyzaZaZyTWmRXKL6kuYTmnzM8sBF4de4pkSg0mtM4UiHjqTPmrc/PiHn3HICTPzx
hJ15GZgg/Zodt/LqQ1WRtBsLjf265Yiw66GRZ4760GK/nGof4iWn3ZmRKKH7d8oe
AB47zKkpvAXMsUsMYTm7H3UqA1Bl86uNDZqwyoTKMWmPMg+aikmmC0EcNlC2r5TG
FKDl7K6jcRWMKY7ff0NlM5/xUP+XyajjJxW7ayBmjB77thpqUhy8QP7nuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEgiEpj9zHxvJ9AV8DyXZQO/wQBlMB8GA1UdIwQY
MBaAFLEMPPPcU8pUnAPk9fRtkc6QuOBwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1F3ODg5eFR5bFNjQS1UMTlHMlJ6cEM0NEhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8yNWNkYjQtZTUwOC00YjM3LTgxYmMt
MzZmODJiZDM3OWJkLzEvc1F3ODg5eFR5bFNjQS1UMTlHMlJ6cEM0NEhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8yNWNkYjQtZTUwOC00YjM3LTgxYmMtMzZmODJiZDM3OWJk
LzEvc1F3ODg5eFR5bFNjQS1UMTlHMlJ6cEM0NEhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC6sIwah0
GUezGjxi6lvf1PtupjcsanYm7Rusv5vbBviDQkc1060X9T3XXc+njaaPAQSK7pgY
113wF6cklSFLHUhpmPqOtoYpd/YhXwLibBHqCeX4vxZH5N4bRqhVtZulviiDLYj0
AfPEY7aGzPw/w63VBqTvyFCfo51wdw4xDN2TsqG7WqTJAXzJsvBXfE1L/AK5KX/h
Dg2xEGWfvalH7Yu282qbkWVurZQsfRDM6CayGjMzbktyshpZCuF1NiNziOybaow6
FtqPgm6F4KkiotUPLx6K4qSoIesSQeoAD5cT9xM+tfSBWvZ68AV5hD0HpxexfNW4
n0NvToHKfeCeTw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:58 2025 by rpki-client