Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
File: SScSTZgDp95UiDFko3bqcuPGPq8.mft (raw, json)
Hash identifier: 4KBQxo5mAWgBDVBMS1ozaTCNfL0GYrHW8WHqlfgWIZA=
Subject key identifier: 61:77:0C:75:52:55:37:14:21:8D:0D:5E:8F:41:10:96:73:9E:85:58
Authority key identifier: 49:27:12:4D:98:03:A7:DE:54:88:31:64:A3:76:EA:72:E3:C6:3E:AF
Certificate issuer: /CN=4927124d9803a7de54883164a376ea72e3c63eaf
Certificate serial: 019A4EF58D41325D52DD117B0E3098222B84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 13:01:46 +0000
Manifest this update: Tue 04 Nov 2025 13:01:46 +0000
Manifest next update: Wed 05 Nov 2025 13:01:46 +0000
Files and hashes: 1: J8OgK6YIDY4_wow6LOJWl2UwPMw.roa (hash: ehaTtO6bdlhf0UUT+6tJJXKQ0CyD4JoJHUd/4QXn6/c=)
2: OJmLUcdGyKqyreRJA04sZVowZg0.roa (hash: ZPcGNQNPGXt7sqvYIqkF3ZoSuhuiF050QsXqHbGtgGo=)
3: SScSTZgDp95UiDFko3bqcuPGPq8.crl (hash: agErG6YhkHGDvF4uHf68bHb7Dtxyf208T/OQ8uZS4GU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:8d:41:32:5d:52:dd:11:7b:0e:30:98:22:2b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4927124d9803a7de54883164a376ea72e3c63eaf
Validity
Not Before: Nov 4 13:01:46 2025 GMT
Not After : Nov 5 13:01:46 2025 GMT
Subject: CN=61770c7552553714218d0d5e8f411096739e8558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ce:50:0a:dd:bf:e7:c2:81:21:5c:2e:ad:2e:
2a:59:fe:e8:02:b8:69:5c:92:8b:a4:f6:0e:da:7a:
d4:66:4d:c4:f6:dd:84:27:b8:a9:c1:82:00:c5:a8:
be:19:30:ef:e8:2f:86:a6:4d:3a:bc:d6:79:a4:24:
f8:14:0f:67:37:b4:75:66:6d:97:2c:9c:b4:eb:61:
93:5f:3c:72:0d:57:9e:0f:19:28:1f:58:9e:79:f4:
e5:63:d1:eb:2e:4c:13:f0:e9:16:45:a5:5f:3c:31:
95:51:4e:28:7a:af:ac:c4:3d:0a:24:22:8d:23:f3:
ff:c7:04:a6:1f:b9:cc:bf:1e:31:84:67:fd:ac:bf:
00:f8:d4:b4:20:3d:11:ba:df:ee:56:e4:7e:f2:4d:
87:c4:39:1c:01:26:48:85:1e:77:6a:34:ac:21:1e:
59:e7:d0:47:c1:e9:cf:cf:77:85:40:e5:b8:28:43:
3d:bf:d9:ee:db:cc:e0:bf:9f:84:56:c6:6b:86:d6:
22:be:9d:e2:95:ac:be:db:c4:0b:aa:47:e1:20:04:
8d:e0:fd:c9:4c:2c:88:c4:ef:fd:78:46:ea:f4:f1:
57:3a:90:63:80:5b:a0:f6:b8:70:53:8d:bd:dc:82:
de:e5:59:f0:33:1f:5a:f7:e1:6a:b9:9d:1f:85:00:
bf:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:77:0C:75:52:55:37:14:21:8D:0D:5E:8F:41:10:96:73:9E:85:58
X509v3 Authority Key Identifier:
keyid:49:27:12:4D:98:03:A7:DE:54:88:31:64:A3:76:EA:72:E3:C6:3E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:0b:54:9f:f0:23:4d:74:27:69:8f:f8:59:52:93:a9:45:9b:
fd:05:5d:62:88:6a:de:11:a0:69:e8:14:60:5f:f7:63:da:50:
23:40:b1:6b:59:76:96:e2:39:69:65:c2:51:8f:e9:06:5d:07:
2e:23:f9:14:e5:ac:6a:97:ef:fa:3d:f5:bf:8f:30:53:3e:f7:
d9:d3:99:4a:49:64:26:00:c9:bf:ce:b0:e6:d8:b8:22:81:8c:
4f:d6:5b:c2:49:a4:b9:34:7b:6f:f8:c3:63:11:a8:d0:d6:8a:
74:fb:12:a9:0c:ba:3d:af:46:2f:a0:b0:a8:54:36:c2:b0:f8:
e0:a0:f3:78:9a:51:29:af:ad:5a:60:31:20:95:e7:b3:59:de:
85:d0:fb:8c:7e:30:dc:00:5b:a7:80:d2:2b:29:f5:85:72:88:
f6:23:e2:f1:91:30:1c:a9:55:94:18:22:ef:3d:b8:8f:11:42:
ec:08:0e:3e:a6:db:84:3e:32:9c:8d:9d:55:2b:94:a2:ff:15:
13:cf:71:20:c9:23:17:7e:52:57:30:f7:cf:3e:ff:4c:d3:42:
60:5d:97:6a:fa:22:ec:64:f0:5c:0e:5e:48:f8:70:b1:c8:49:
8e:f8:41:58:53:37:bc:9d:fd:3f:83:91:32:0d:ba:39:48:b0:
ca:c4:7d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:58:08 2025 by rpki-client