Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/5294b6-6a8a-4695-b291-582a972054fc/1/SCc0v_AaPOqzULy4SyX3O-gp328.mft
File: SCc0v_AaPOqzULy4SyX3O-gp328.mft (raw, json)
Hash identifier: 8JI+K33fWMdF66GH2VBuX9VizJ/fNHwvEK1DiTuXURA=
Subject key identifier: DD:64:68:64:C7:04:C4:FB:F0:21:93:1E:06:D8:9E:59:10:33:8E:F7
Authority key identifier: 48:27:34:BF:F0:1A:3C:EA:B3:50:BC:B8:4B:25:F7:3B:E8:29:DF:6F
Certificate issuer: /CN=482734bff01a3ceab350bcb84b25f73be829df6f
Certificate serial: 019A55D229C52D0339D85185859E2D7C9A5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SCc0v_AaPOqzULy4SyX3O-gp328.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/5294b6-6a8a-4695-b291-582a972054fc/1/SCc0v_AaPOqzULy4SyX3O-gp328.mft
Manifest number: 0158
Signing time: Wed 05 Nov 2025 21:00:27 +0000
Manifest this update: Wed 05 Nov 2025 21:00:27 +0000
Manifest next update: Thu 06 Nov 2025 21:00:27 +0000
Files and hashes: 1: FsbQ_xqqVCKA7JO_7TNtMcs5uDc.roa (hash: 8oLtr32VZblrtItn64+IZffUBFTx5wRyhUTx6ephSaw=)
2: SCc0v_AaPOqzULy4SyX3O-gp328.crl (hash: 1M+jMKCRNohzf06kLQ/hWbr8+5wP21XUimb5dVNfyt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/5294b6-6a8a-4695-b291-582a972054fc/1/SCc0v_AaPOqzULy4SyX3O-gp328.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/5294b6-6a8a-4695-b291-582a972054fc/1/SCc0v_AaPOqzULy4SyX3O-gp328.mft
rsync://rpki.ripe.net/repository/DEFAULT/SCc0v_AaPOqzULy4SyX3O-gp328.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:d2:29:c5:2d:03:39:d8:51:85:85:9e:2d:7c:9a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=482734bff01a3ceab350bcb84b25f73be829df6f
Validity
Not Before: Nov 5 21:00:27 2025 GMT
Not After : Nov 6 21:00:27 2025 GMT
Subject: CN=dd646864c704c4fbf021931e06d89e5910338ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7c:b8:13:3a:58:0d:31:d0:9d:5b:30:21:e2:
45:4d:f3:fd:68:85:99:12:c6:cf:b7:44:72:e6:c2:
34:f1:81:32:a3:76:9c:79:2a:b7:1e:46:e5:d1:8d:
b5:0a:0b:d5:be:10:aa:c0:c8:8a:5c:0b:ce:6d:92:
f6:a7:24:95:88:5b:a4:b6:53:9d:f9:36:df:ce:98:
19:c8:00:b9:14:8d:a5:43:19:30:45:ca:91:08:47:
53:99:0f:65:19:bb:43:08:76:d8:9f:21:79:d6:97:
97:85:a6:65:49:79:cf:65:9b:d5:90:79:76:85:68:
11:bd:75:e0:60:1e:f8:73:bf:b5:b0:10:45:79:73:
33:7a:29:28:84:d3:02:48:26:37:e8:34:8e:17:3c:
8a:cc:74:6b:f1:4a:da:16:aa:5c:89:98:dc:b9:0b:
0f:52:c2:c3:86:9b:ba:a9:be:98:07:4b:e2:3a:31:
01:07:d0:d4:6d:22:cf:0c:6b:57:46:c5:f9:15:b1:
33:f1:48:10:33:42:c6:fd:ff:c7:1e:6f:94:a3:7d:
47:14:95:40:29:0a:7c:1d:48:c0:6a:a7:98:aa:0d:
ea:42:70:c2:e9:d4:8e:cb:ad:8f:b0:56:b5:2d:7e:
cf:c3:56:e5:62:b9:aa:d1:cf:6d:b0:aa:23:8c:3b:
8e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:64:68:64:C7:04:C4:FB:F0:21:93:1E:06:D8:9E:59:10:33:8E:F7
X509v3 Authority Key Identifier:
keyid:48:27:34:BF:F0:1A:3C:EA:B3:50:BC:B8:4B:25:F7:3B:E8:29:DF:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SCc0v_AaPOqzULy4SyX3O-gp328.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5294b6-6a8a-4695-b291-582a972054fc/1/SCc0v_AaPOqzULy4SyX3O-gp328.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5294b6-6a8a-4695-b291-582a972054fc/1/SCc0v_AaPOqzULy4SyX3O-gp328.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:31:3b:36:a3:76:5e:d5:1d:49:b9:e4:70:be:eb:b9:4d:88:
7e:a9:83:68:37:75:e3:e0:e1:f7:fb:66:10:81:0b:1d:00:d6:
92:b9:01:0e:fe:57:16:0c:c2:1c:f9:ff:ea:4e:ea:62:0e:91:
b2:45:79:e1:f3:4a:8b:09:8b:98:ae:40:77:06:8c:2a:47:00:
c0:68:62:7a:8f:97:16:9b:fe:90:c5:d9:89:44:3a:70:ff:5c:
44:a2:0a:f4:39:47:60:3d:04:5c:b6:5f:ec:a5:1c:5b:2e:ff:
9b:ae:7f:42:3f:dc:d0:f2:6c:1a:03:65:cd:ca:54:02:87:70:
70:30:ce:d4:28:ed:b8:17:78:60:07:76:37:96:e1:f8:7b:e2:
a1:fb:d4:47:d2:bf:90:ef:de:12:ae:3f:80:ae:a6:7e:e7:13:
be:f4:2f:1a:62:1b:43:cc:f0:24:42:15:b1:f4:67:64:79:03:
23:6f:e1:89:bd:fc:7b:09:0c:14:06:c8:1c:ad:06:73:1d:d4:
e2:94:52:3d:e8:1b:d3:cc:41:52:3f:cf:c3:a3:3d:61:37:ca:
ee:ba:88:a2:1d:c5:a1:64:00:2a:fe:a4:7e:f0:88:a7:cc:b0:
b9:11:16:ac:94:2c:b9:5c:f7:15:2d:b7:72:01:ad:13:28:ce:
7f:1a:4b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:52:27 2025 by rpki-client