Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft
File: sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft (raw, json)
Hash identifier: Yk8k6PKgEASYsLe9HLuEphdIO1IybrisAFR3n/ImgcY=
Subject key identifier: 44:5C:2F:BE:0F:25:15:33:48:27:E5:CC:3D:BB:13:02:47:B0:26:6A
Authority key identifier: B1:CD:C2:6D:44:EA:F8:56:54:48:1E:95:81:04:3E:14:88:77:65:B4
Certificate issuer: /CN=b1cdc26d44eaf85654481e9581043e14887765b4
Certificate serial: 019A4CCECD97EF259A50658985800FDE4DA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft
Manifest number: 1267
Signing time: Tue 04 Nov 2025 03:00:12 +0000
Manifest this update: Tue 04 Nov 2025 03:00:12 +0000
Manifest next update: Wed 05 Nov 2025 03:00:12 +0000
Files and hashes: 1: 1yRED3DLRuGHiDRGq2BJfqb4Zqo.roa (hash: A0EcYSNMbodN6e0h1ex8R5EJse986btPlyr9ZhoJg/Q=)
2: H01ntKK0r8APxCOVN-CK85R5ZWE.roa (hash: oVsMYFAHfuRHFJ8dBLy1BmqZhlpZjkZZOD+7Y4uxLr4=)
3: nzP88bjh-XEZ2kCW3oiiu2uSEHc.roa (hash: Kf5r0P3IvTLCYpsr+vk6c4IGLFB/DHZsFGgImWavBWE=)
4: sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl (hash: 77mETB4KZ+emTxq8PEgXdBVdxzSXRL/ubPCRGyggbvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 03:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:ce:cd:97:ef:25:9a:50:65:89:85:80:0f:de:4d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1cdc26d44eaf85654481e9581043e14887765b4
Validity
Not Before: Nov 4 03:00:12 2025 GMT
Not After : Nov 5 03:00:12 2025 GMT
Subject: CN=445c2fbe0f2515334827e5cc3dbb130247b0266a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a3:f9:07:cd:e0:aa:85:5d:b3:d2:06:76:3d:
6b:bb:99:a2:57:f7:04:a0:2c:0f:5d:05:fa:1a:5f:
2f:84:5c:92:b7:74:ce:13:b0:cc:60:fb:d2:68:55:
75:22:9e:7c:22:3c:5e:10:75:66:65:da:5d:38:af:
86:b3:5f:36:20:86:2d:b0:2a:dd:2d:4a:bd:d9:de:
ba:5d:a5:00:35:cc:5e:0d:2b:d6:dc:f6:05:51:36:
1e:b3:96:ae:15:b4:09:6a:28:4b:1e:d6:cf:ba:1a:
6b:5d:eb:6e:0e:54:05:43:cf:97:cb:20:42:8e:2f:
15:c2:c1:4c:c8:5a:23:75:50:e4:ab:97:60:3c:7d:
75:c5:bb:eb:d8:76:bb:52:c8:aa:af:71:21:e4:1a:
d1:6b:23:3e:1a:ca:2b:0a:88:f1:b9:89:ea:f0:f2:
77:ef:39:34:16:65:19:b9:3a:c2:1d:26:d5:d0:4b:
24:7d:28:e2:56:90:73:30:6a:5e:39:03:31:97:d4:
6c:f4:16:27:e4:b5:af:c4:b7:22:ab:75:44:4b:b3:
fc:93:02:33:75:93:07:cc:bd:6f:a4:81:d2:c1:3d:
db:f2:cd:32:df:78:6b:1a:d2:f7:84:29:0b:66:c3:
c5:1e:f6:b0:ea:8e:dc:cb:52:c8:ea:00:a2:03:f8:
f3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:5C:2F:BE:0F:25:15:33:48:27:E5:CC:3D:BB:13:02:47:B0:26:6A
X509v3 Authority Key Identifier:
keyid:B1:CD:C2:6D:44:EA:F8:56:54:48:1E:95:81:04:3E:14:88:77:65:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:b3:9b:fb:a4:34:bd:d2:fc:d0:53:42:1b:87:4e:85:72:84:
87:44:40:cb:94:c4:32:f4:6f:ab:e9:b9:bb:26:c0:5d:e4:5b:
c0:76:9f:34:d4:96:af:9d:84:e7:08:30:42:1d:11:43:0f:bc:
0e:3e:ce:ad:f1:bc:a0:e3:1b:07:2c:55:eb:b1:54:db:78:bf:
f5:36:cb:f5:fe:a3:7a:61:f1:55:55:c6:a6:32:5d:e9:8c:ef:
fc:01:c9:c7:a2:83:19:9d:0c:40:bd:f5:84:50:df:4e:24:9b:
f5:73:ad:ae:79:29:d6:1a:95:9a:a1:cd:ae:7c:72:3f:e8:e8:
04:e0:62:05:5a:32:14:72:97:d9:55:97:ca:50:a5:e3:c5:62:
0c:f9:56:36:2b:5e:04:44:3e:b9:dc:6a:e4:da:2c:a1:62:b6:
a8:58:62:02:b3:01:25:d8:a6:23:25:a0:f7:33:a7:ee:7d:6d:
fa:3c:a0:db:eb:9b:d9:d7:97:8f:81:2f:1a:81:3d:9c:23:23:
c3:9a:7a:e3:48:6f:95:35:92:e5:9b:ca:1f:11:a0:f4:4b:28:
88:d1:0b:3a:4a:d7:f6:5d:57:a0:dc:32:5f:98:85:ef:24:02:
c3:62:92:77:85:f1:85:0d:bc:79:69:69:fc:18:b9:dd:d6:a8:
de:b5:5a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:38 2025 by rpki-client