Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.mft
File: sCqpYbR31UI9hbfUPz76JjJtcJA.mft (raw, json)
Hash identifier: nsSSY5QmbgppsbH71oShi/NXucwIxi6qjLmhchwcsy4=
Subject key identifier: 21:20:5D:90:34:9B:1C:54:FE:DA:12:5F:3A:21:9C:F9:D7:0A:74:0B
Authority key identifier: B0:2A:A9:61:B4:77:D5:42:3D:85:B7:D4:3F:3E:FA:26:32:6D:70:90
Certificate issuer: /CN=b02aa961b477d5423d85b7d43f3efa26326d7090
Certificate serial: 019A4E86CC89F4C0C6082446F0F33FA853E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.mft
Manifest number: 1713
Signing time: Tue 04 Nov 2025 11:00:48 +0000
Manifest this update: Tue 04 Nov 2025 11:00:48 +0000
Manifest next update: Wed 05 Nov 2025 11:00:48 +0000
Files and hashes: 1: 3WE6dfLNxFsfmDokXfTCR3HDgJA.roa (hash: 4x45ICmKpG8qOpEIix9N+xHqWEezDEIU9A+oBlF8GPM=)
2: Wb3lkfWf6ka0qstTNr3DHQk98Io.roa (hash: GA6ShDwKxVTanoCjEQltZxPOXFGDZucgrHs4qUUB0mE=)
3: gftrqq2xNPQCOHxaCTBevS63_R0.roa (hash: BBnqHSnGOHFEg3w/aAg1dxePTY9R+tg1C4jtSLBPpAc=)
4: hzxPD1tTltD0QDura1MxJWigUBE.roa (hash: 5nYVXUDsX4+3FWl3JaINgnQyrUXh4rqzUTE7RBqyFqA=)
5: s0olpFJOyt15T_pyM--2CmUb0gk.roa (hash: ngdLwlq+fDO5qvE2dRL5JDPZUtcX3P2i8ij4BiH5dks=)
6: sCqpYbR31UI9hbfUPz76JjJtcJA.crl (hash: gPDXG4nI7fHKTeQEhZ6WYbdxw/qQ992ACWHVpGzAH3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:cc:89:f4:c0:c6:08:24:46:f0:f3:3f:a8:53:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02aa961b477d5423d85b7d43f3efa26326d7090
Validity
Not Before: Nov 4 11:00:48 2025 GMT
Not After : Nov 5 11:00:48 2025 GMT
Subject: CN=21205d90349b1c54feda125f3a219cf9d70a740b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f4:e5:11:ba:61:0c:41:76:68:5f:53:c3:86:
0e:5f:f1:b6:5d:f5:5a:07:2a:ae:0a:bc:62:cc:97:
4d:87:10:07:74:e9:67:c8:a2:f9:d7:e4:01:6b:28:
7a:6c:3b:a1:d4:bf:2c:d2:cd:93:f6:7b:83:97:f9:
90:7e:db:25:1c:d9:6f:00:b7:89:61:70:81:6c:b8:
33:b3:0e:f0:e1:02:7f:86:ba:4f:96:55:83:ea:b7:
dc:59:b1:74:68:47:e7:62:4f:f6:40:27:2f:66:45:
7a:13:40:b0:95:17:65:da:75:95:68:50:e9:ed:4d:
cd:02:a3:f2:bf:c6:d6:f4:bf:47:04:8c:cd:4c:0e:
19:ac:eb:5c:40:c7:42:71:5b:4c:58:a8:63:42:49:
fc:3b:a8:ae:f1:11:1a:aa:b5:96:cc:85:9e:2f:0d:
f6:df:ef:11:b9:46:b3:eb:04:c2:5d:f1:24:c5:a1:
73:91:9a:80:6e:2f:b7:8a:b9:64:43:9f:0a:2a:68:
93:e7:a0:cc:35:c9:ec:db:d3:e1:ba:6b:2a:46:78:
7e:92:6d:25:fd:79:7b:24:4a:82:2e:ea:c3:1a:4d:
c6:31:7f:40:59:60:b0:03:19:2b:86:15:68:8a:0f:
86:25:65:a7:38:c0:54:50:56:6a:0f:ad:ed:18:b8:
a1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:20:5D:90:34:9B:1C:54:FE:DA:12:5F:3A:21:9C:F9:D7:0A:74:0B
X509v3 Authority Key Identifier:
keyid:B0:2A:A9:61:B4:77:D5:42:3D:85:B7:D4:3F:3E:FA:26:32:6D:70:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:43:36:42:dd:3c:8e:4c:6e:f7:21:21:9e:3b:1e:77:85:45:
3d:bf:46:46:a7:97:39:32:14:91:d7:dc:ce:5d:b9:bf:13:a8:
8e:4b:2c:a4:c1:bc:dd:8d:aa:cb:98:94:b9:c8:80:38:c7:f8:
80:57:9c:bc:c4:e0:e5:c0:fe:cc:54:72:8e:cd:22:26:1a:92:
39:fa:bb:87:a3:b2:e0:b7:cb:c6:7f:91:bf:51:f1:58:ab:3e:
1e:e2:97:54:c7:cb:58:74:5b:d3:f6:14:d5:78:ed:54:2b:ff:
59:2b:c9:1e:84:f6:6a:91:f6:9a:b8:fb:cb:15:0c:91:4a:15:
d7:07:68:60:4b:39:40:9e:e4:d9:79:78:c1:02:d9:f0:cf:42:
9e:da:8c:1b:fe:6c:64:d7:16:b1:33:84:b2:a2:81:fd:e9:94:
a6:0b:68:70:12:5b:8a:0f:a2:64:66:5d:f1:ac:ea:1e:a4:73:
c8:64:5a:93:ea:8f:4e:91:0a:5d:c0:6b:e9:b0:b3:02:63:42:
c8:03:02:52:6f:f6:24:e4:d1:2c:89:c6:06:9a:8f:80:8c:93:
65:9c:9e:ab:10:32:4d:96:79:56:c7:5d:15:1d:59:53:40:08:
ac:49:4d:f5:8f:11:0c:85:e3:82:89:86:d9:0e:e3:d8:1e:08:
62:40:4f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:36:52 2025 by rpki-client