Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
File: sCQrfkMFPJE9Yr9duxaC_-a43-I.mft (raw, json)
Hash identifier: v8ppm7J9aFPo6dMkDZxpqxCG4WqnJ7ihDdtTJVa7xSU=
Subject key identifier: 22:49:88:A4:AE:98:EB:A0:22:0D:C4:00:0D:B1:F6:81:42:6E:60:42
Authority key identifier: B0:24:2B:7E:43:05:3C:91:3D:62:BF:5D:BB:16:82:FF:E6:B8:DF:E2
Certificate issuer: /CN=b0242b7e43053c913d62bf5dbb1682ffe6b8dfe2
Certificate serial: 019A4F2B1851035953DBCCB70184FAEB1D6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
Manifest number: 1073
Signing time: Tue 04 Nov 2025 14:00:15 +0000
Manifest this update: Tue 04 Nov 2025 14:00:15 +0000
Manifest next update: Wed 05 Nov 2025 14:00:15 +0000
Files and hashes: 1: VXSaoq70xTeN6W3C76eUA8OC5cU.roa (hash: vEwflplyRjS2mkClV+Bpny4Bw/QU3HBBti723DFTvj4=)
2: sCQrfkMFPJE9Yr9duxaC_-a43-I.crl (hash: RB3l9RZFf3IB3UnOFp+2Epw0zo+UoFwp/tCr7UVsiU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:18:51:03:59:53:db:cc:b7:01:84:fa:eb:1d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0242b7e43053c913d62bf5dbb1682ffe6b8dfe2
Validity
Not Before: Nov 4 14:00:15 2025 GMT
Not After : Nov 5 14:00:15 2025 GMT
Subject: CN=224988a4ae98eba0220dc4000db1f681426e6042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2c:e8:55:19:4a:9b:94:96:65:5d:a8:ae:da:
ca:54:bb:0a:3e:1d:aa:67:99:0d:82:74:09:a8:41:
a3:8d:dc:c3:31:82:0b:3f:b5:c6:b9:3e:e2:1a:ed:
63:72:74:44:2d:b8:54:f7:02:cb:35:b2:9f:fb:09:
33:d9:f4:fe:a7:56:af:4b:f8:74:4b:09:c2:36:1a:
34:2f:04:a7:13:7c:de:e2:57:bd:d3:c5:02:36:f2:
6f:4f:f3:58:28:a1:68:10:b0:00:8f:a9:b2:17:e2:
f2:88:3d:2c:08:1b:49:01:5f:18:90:14:16:27:61:
4c:91:72:e0:2d:fe:3e:5c:e9:2f:16:f2:12:02:39:
d7:0f:d7:cc:25:ad:4a:57:9d:83:56:d3:7a:77:28:
9e:8a:5d:69:53:03:52:17:59:dc:d7:b7:dd:eb:4d:
62:29:90:52:a8:86:de:cf:83:25:fb:87:29:97:c8:
8d:72:a6:e5:af:68:15:c3:63:bd:c3:fb:07:cc:11:
2f:91:22:27:47:bb:ca:81:69:a5:8a:a1:26:a4:52:
e4:91:36:76:a2:24:5a:74:89:60:90:d3:5b:5a:29:
3f:c5:fb:0f:e5:ca:f7:4a:a5:12:b9:1b:08:96:2f:
d4:f1:69:8e:11:73:1d:40:d1:36:9b:cb:c2:8c:6e:
d2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:49:88:A4:AE:98:EB:A0:22:0D:C4:00:0D:B1:F6:81:42:6E:60:42
X509v3 Authority Key Identifier:
keyid:B0:24:2B:7E:43:05:3C:91:3D:62:BF:5D:BB:16:82:FF:E6:B8:DF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:69:67:52:9a:6d:bf:c6:99:32:a8:ed:eb:58:2b:8a:3f:1e:
8a:2f:f7:5b:91:d4:ad:9d:84:dd:ec:1b:11:f8:d6:b1:5e:04:
40:19:98:32:5b:c9:b5:5e:b2:92:b2:e2:39:b3:1b:91:3f:da:
82:a4:14:50:51:52:92:a2:0b:e6:19:8b:4a:d7:64:65:56:70:
f1:41:1f:e3:80:2b:39:08:92:b0:77:51:c5:3a:a5:81:14:29:
b4:5f:5e:b9:d3:a1:9b:83:b4:2f:21:94:db:ba:34:71:fd:07:
e3:22:a0:df:9a:8e:13:18:28:60:51:54:2f:a5:17:ad:87:fa:
7f:e1:6d:75:62:b1:9a:7b:03:10:a8:f1:ae:82:6f:46:e4:7d:
de:68:f6:88:44:b4:e1:12:17:2b:89:fd:a5:9f:d5:31:19:a9:
76:dc:89:c9:b9:d8:88:9e:90:c8:3c:e4:e6:f4:69:ca:aa:d0:
22:87:36:4c:a6:34:2e:f9:af:94:e7:de:f4:2b:5f:ac:b6:bc:
3f:21:13:71:6c:c5:a1:fe:5d:92:81:99:34:d3:37:d3:ab:73:
2c:c3:73:b9:ee:de:2a:18:f1:e0:e9:3a:25:40:49:9f:80:a6:
b8:6b:b0:3d:7a:18:71:65:32:c8:c3:34:9b:41:51:5b:3f:8a:
15:80:9f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:24:53 2025 by rpki-client