Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft
File: Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft (raw, json)
Hash identifier: Y0IkGalD2v8262GTPobwJpbibUwkcm/3wBWjmyTI/io=
Subject key identifier: 4B:D2:8B:EA:83:73:AE:0A:33:BA:63:AC:13:36:7F:5F:03:43:E5:33
Authority key identifier: 49:CD:9E:C8:E5:3F:8F:C2:A3:5E:91:B7:70:14:F6:A7:3D:8B:5B:3D
Certificate issuer: /CN=49cd9ec8e53f8fc2a35e91b77014f6a73d8b5b3d
Certificate serial: 019A541A8EB3A82B1352A09878DF192BE1C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft
Manifest number: 12F5
Signing time: Wed 05 Nov 2025 13:00:17 +0000
Manifest this update: Wed 05 Nov 2025 13:00:17 +0000
Manifest next update: Thu 06 Nov 2025 13:00:17 +0000
Files and hashes: 1: NSiBzROOhgmJ9ypJm8Za0IGQ3F0.roa (hash: o2v8vxJ4hYMUAZbmBnTv+Psah74MuG6cFMK+pUBuCMg=)
2: Sc2eyOU_j8KjXpG3cBT2pz2LWz0.crl (hash: i8BpG/loyZ933NrFKsUsTA+x2h+moHfAHMu5yydadNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1a:8e:b3:a8:2b:13:52:a0:98:78:df:19:2b:e1:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49cd9ec8e53f8fc2a35e91b77014f6a73d8b5b3d
Validity
Not Before: Nov 5 13:00:17 2025 GMT
Not After : Nov 6 13:00:17 2025 GMT
Subject: CN=4bd28bea8373ae0a33ba63ac13367f5f0343e533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e1:99:e6:73:d8:4b:54:07:a1:b5:df:bb:5d:
4d:6d:25:29:54:af:9d:83:55:ae:b2:ec:a1:b6:4b:
54:50:27:9a:58:50:30:d4:44:7b:0f:1b:e8:eb:db:
a4:91:d7:f0:d6:14:b0:d2:95:0d:8a:81:44:28:26:
15:00:9a:ff:91:b1:54:34:63:bd:0e:5a:0b:8a:71:
8f:e3:97:04:37:e8:97:f8:8d:b5:be:7d:2f:72:8d:
cd:53:1f:68:2b:06:75:65:4c:0f:dc:ad:d5:57:fa:
ef:e3:2e:f2:6f:3c:63:ef:8f:1c:f8:14:39:2f:1e:
9c:23:71:e9:8d:8a:bb:af:c7:00:10:1d:93:75:34:
b2:ec:7c:de:ca:c5:af:23:57:03:6e:ba:04:3f:67:
87:50:64:d2:25:cd:09:d3:e7:53:5a:97:ee:2b:71:
91:d9:fa:bc:d6:9f:71:a4:ab:c7:30:e2:0e:07:5a:
01:37:cf:cb:d8:5d:cd:96:1d:38:29:0a:e0:d7:82:
63:40:76:55:67:4d:8a:10:0d:b0:fa:38:89:41:40:
53:3a:09:f4:76:f6:cd:ee:e5:3a:c1:3c:dc:03:4b:
49:a5:38:ef:e6:a3:56:7e:99:ab:0d:99:c1:6f:f7:
f6:d6:da:be:20:41:b1:d0:ea:db:be:e0:4d:13:87:
31:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D2:8B:EA:83:73:AE:0A:33:BA:63:AC:13:36:7F:5F:03:43:E5:33
X509v3 Authority Key Identifier:
keyid:49:CD:9E:C8:E5:3F:8F:C2:A3:5E:91:B7:70:14:F6:A7:3D:8B:5B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:d5:37:6e:35:33:41:40:cb:d2:23:b4:e3:32:7b:7b:f3:78:
cb:e1:cf:6c:8e:1d:07:69:47:7d:09:5f:f6:fb:14:27:e6:61:
bb:22:a5:24:df:a3:06:81:f9:93:90:c7:08:1d:e1:dd:e8:45:
50:9f:40:32:22:91:64:53:5c:04:8b:05:8c:5d:6e:55:b2:a3:
80:3f:45:ef:00:f6:5a:23:7d:4e:16:18:54:96:cf:97:f7:79:
73:43:24:50:e1:38:45:75:08:98:95:9f:d3:aa:66:4d:76:a2:
6a:3f:72:37:fc:7e:b9:9f:31:0a:bd:41:13:ba:75:3c:fa:6b:
ad:f4:fc:2c:ea:78:99:11:c4:47:fd:3a:68:24:ac:65:1b:10:
dc:08:12:07:59:5a:45:35:a2:7d:17:2e:c2:94:5c:3c:a3:81:
2c:28:24:d4:d8:79:46:2d:ea:97:1e:5f:95:1b:6e:ce:78:56:
94:f6:ac:c0:d9:bd:60:f6:9e:21:72:43:99:05:1a:f6:a6:ce:
98:3b:a5:32:96:36:4d:c1:cf:b1:40:2d:15:c7:f5:5f:28:30:
a1:ff:84:3d:ad:f9:16:0c:cc:5b:30:7c:4b:a7:a9:a4:eb:9d:
a5:0a:1b:40:60:fa:dc:bf:d9:0e:e5:45:86:93:e9:8a:89:c7:
18:5f:dc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:14:54 2025 by rpki-client