Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft
File: Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft (raw, json)
Hash identifier: +PrbZjYLNWufMzWy7PdmJ2UoKFU0KA8RVVSU0qlBa7Q=
Subject key identifier: 41:4F:11:A7:1E:3E:BC:5E:26:5C:5F:02:D1:77:33:17:10:16:2F:06
Authority key identifier: 49:FE:8C:72:AA:32:DE:95:7B:24:CF:9F:73:F8:A7:FB:1A:CF:0B:71
Certificate issuer: /CN=49fe8c72aa32de957b24cf9f73f8a7fb1acf0b71
Certificate serial: 019A4DE16A1F09C25E7F390F2FD957664C8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft
Manifest number: 0F43
Signing time: Tue 04 Nov 2025 08:00:09 +0000
Manifest this update: Tue 04 Nov 2025 08:00:09 +0000
Manifest next update: Wed 05 Nov 2025 08:00:09 +0000
Files and hashes: 1: Mg03f5x9KEwTzrWMVXcY-DpbRQM.roa (hash: gHoeFO+xk1dFoFV2Z9UYHxVBDmrYCHhqpQCvP+8wkDE=)
2: Sf6Mcqoy3pV7JM-fc_in-xrPC3E.crl (hash: 9B/TBcAtd1GgRvmbICTYl3HaTdSZbfYWx3hDmAyD+fI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:6a:1f:09:c2:5e:7f:39:0f:2f:d9:57:66:4c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49fe8c72aa32de957b24cf9f73f8a7fb1acf0b71
Validity
Not Before: Nov 4 08:00:09 2025 GMT
Not After : Nov 5 08:00:09 2025 GMT
Subject: CN=414f11a71e3ebc5e265c5f02d177331710162f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0c:90:4a:73:35:4a:21:10:24:c2:a7:25:b0:
ca:e3:04:1a:21:8b:67:db:21:89:9d:d6:cd:eb:cf:
1f:da:97:d7:8f:24:63:00:70:0d:c4:73:48:d5:fe:
a0:6d:19:4c:32:34:63:b2:d6:b0:e8:fc:c4:c6:72:
35:d0:03:db:31:6e:39:a1:95:93:06:16:45:dd:9b:
45:5c:43:c4:c1:10:77:bd:20:eb:37:bd:59:45:8c:
57:44:fc:34:b3:ae:27:ed:be:87:7a:ab:27:45:ec:
d7:49:be:bd:26:49:2d:f7:95:e3:c6:24:33:e3:0c:
38:f2:34:7e:73:ce:3e:a5:4a:dd:f5:3c:1a:09:3a:
49:61:1c:03:5f:35:01:2f:da:45:10:a8:22:5f:1d:
a8:b9:a0:57:2b:02:ab:77:1b:f9:89:e2:7f:da:59:
8e:8f:5f:30:2a:3d:b3:a4:3a:d8:6b:d8:03:a8:c5:
5d:dc:f0:c5:29:ae:bf:26:29:0f:6c:58:6c:07:d4:
a1:4d:25:1c:fa:ef:ce:8a:ce:46:5a:2f:13:19:f0:
6d:aa:79:36:93:2e:11:f7:b4:ac:e6:e8:61:ca:ff:
04:9d:4b:5c:13:0f:71:5a:84:57:10:02:c3:34:1e:
8a:68:f9:49:24:4e:96:ab:35:2f:8f:e5:08:88:d9:
de:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:4F:11:A7:1E:3E:BC:5E:26:5C:5F:02:D1:77:33:17:10:16:2F:06
X509v3 Authority Key Identifier:
keyid:49:FE:8C:72:AA:32:DE:95:7B:24:CF:9F:73:F8:A7:FB:1A:CF:0B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:12:20:80:7e:7a:54:35:83:91:65:01:0b:4b:46:1e:ff:c9:
9f:65:01:e1:0e:be:e2:17:81:f6:81:c1:f5:7b:3c:3b:7d:5a:
5a:a6:9f:6b:96:0d:a0:73:a5:90:d3:3d:61:97:13:86:17:83:
60:e3:84:de:aa:2c:71:65:ca:d9:b0:f6:fc:e4:4d:74:f6:3f:
83:13:4e:10:3a:07:b7:ee:3e:f5:cc:d9:cd:30:33:1a:90:ba:
2c:da:78:57:2b:25:ae:06:c8:7a:ca:c4:7f:6f:e0:37:c8:16:
7a:5f:b4:d7:1b:29:5c:11:7c:17:a9:51:83:61:a8:5d:0c:bb:
2c:e5:48:5c:a4:3e:07:66:86:82:d0:d3:74:68:aa:d9:9e:d6:
7d:ca:a1:d5:c5:ea:f8:33:8f:db:82:d0:25:db:5b:2e:41:1c:
2f:66:8e:3a:d3:85:07:0e:cf:08:3a:54:b4:02:0c:75:6a:71:
8a:3c:de:9d:f2:80:ed:aa:a4:08:c5:65:eb:2c:0f:f4:cd:43:
e2:1c:28:8d:3c:ca:9d:8a:bd:e6:72:f4:2c:e3:c6:42:d2:aa:
8a:f0:40:a6:9c:a6:35:a1:6c:2d:db:9f:72:96:1b:fa:55:e7:
d4:23:94:a8:2e:1c:5f:8a:95:99:ef:91:f9:45:db:6e:e7:c3:
ed:79:87:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4WofCcJefzkPL9lXZkyOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZmU4YzcyYWEzMmRlOTU3YjI0Y2Y5ZjczZjhhN2ZiMWFj
ZjBiNzEwHhcNMjUxMTA0MDgwMDA5WhcNMjUxMTA1MDgwMDA5WjAzMTEwLwYDVQQD
Eyg0MTRmMTFhNzFlM2ViYzVlMjY1YzVmMDJkMTc3MzMxNzEwMTYyZjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wyQSnM1SiEQJMKnJbDK4wQaIYtn
2yGJndbN688f2pfXjyRjAHANxHNI1f6gbRlMMjRjstaw6PzExnI10APbMW45oZWT
BhZF3ZtFXEPEwRB3vSDrN71ZRYxXRPw0s64n7b6HeqsnRezXSb69Jkkt95XjxiQz
4ww48jR+c84+pUrd9TwaCTpJYRwDXzUBL9pFEKgiXx2ouaBXKwKrdxv5ieJ/2lmO
j18wKj2zpDrYa9gDqMVd3PDFKa6/JikPbFhsB9ShTSUc+u/Ois5GWi8TGfBtqnk2
ky4R97Ss5uhhyv8EnUtcEw9xWoRXEALDNB6KaPlJJE6WqzUvj+UIiNne/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEFPEacePrxeJlxfAtF3MxcQFi8GMB8GA1UdIwQY
MBaAFEn+jHKqMt6VeyTPn3P4p/sazwtxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2Y2TWNxb3kzcFY3Sk0tZmNfaW4teHJQQzNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy80MTE0YTctMzEyMi00ODY0LTg1YWUt
NDI5N2U1NzI2MTdlLzEvU2Y2TWNxb3kzcFY3Sk0tZmNfaW4teHJQQzNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy80MTE0YTctMzEyMi00ODY0LTg1YWUtNDI5N2U1NzI2MTdl
LzEvU2Y2TWNxb3kzcFY3Sk0tZmNfaW4teHJQQzNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoRIggH56
VDWDkWUBC0tGHv/Jn2UB4Q6+4heB9oHB9Xs8O31aWqafa5YNoHOlkNM9YZcThheD
YOOE3qoscWXK2bD2/ORNdPY/gxNOEDoHt+4+9czZzTAzGpC6LNp4VyslrgbIesrE
f2/gN8gWel+01xspXBF8F6lRg2GoXQy7LOVIXKQ+B2aGgtDTdGiq2Z7Wfcqh1cXq
+DOP24LQJdtbLkEcL2aOOtOFBw7PCDpUtAIMdWpxijzenfKA7aqkCMVl6ywP9M1D
4hwojTzKnYq95nL0LOPGQtKqivBAppymNaFsLdufcpYb+lXn1COUqC4cX4qVme+R
+UXbbufD7XmHVg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:06 2025 by rpki-client