Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
File: scPsU58j7gMao5asXO1CVjiEt7M.mft (raw, json)
Hash identifier: 1K0+LKP7QEGtjn91BhAjgBhVknwhM2uGLkOp2s2y7a0=
Subject key identifier: AF:EA:EC:10:F8:23:18:EA:43:E0:C6:6A:76:E4:4A:4D:DF:26:32:8C
Authority key identifier: B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
Certificate issuer: /CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Certificate serial: 019A4E4F37A98DF50C61055811247AA9E14F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
Manifest number: 09C8
Signing time: Tue 04 Nov 2025 10:00:05 +0000
Manifest this update: Tue 04 Nov 2025 10:00:05 +0000
Manifest next update: Wed 05 Nov 2025 10:00:05 +0000
Files and hashes: 1: YggPTsSNi-M37lrKOeIMBOEQEh0.roa (hash: QqUu1L/3s6oQrDkvCSSy8nc3UlcW3BrRdN7rqT/pHRE=)
2: b4AGcn0hWNQHufubVLqGkpQqCJU.roa (hash: TffukrxORwRZt6LrZ4vP1Br2diZAMHQpSo83hi5snQM=)
3: scPsU58j7gMao5asXO1CVjiEt7M.crl (hash: UY2ITPbdKnuePtnx1xl6Ij6CRcTZ/J5A5cVs2tU72J0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:37:a9:8d:f5:0c:61:05:58:11:24:7a:a9:e1:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Validity
Not Before: Nov 4 10:00:05 2025 GMT
Not After : Nov 5 10:00:05 2025 GMT
Subject: CN=afeaec10f82318ea43e0c66a76e44a4ddf26328c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:35:44:5a:ce:58:30:b8:27:ac:93:aa:92:11:
ad:12:32:20:55:9e:f5:19:fe:61:46:22:b3:8e:b0:
f1:2d:3c:c6:33:4c:a5:fa:ad:64:5c:bc:2a:b4:f6:
d3:7b:a3:50:a9:68:4e:bb:d8:3f:e0:ae:2f:56:7b:
54:88:f0:75:27:65:a0:5a:e3:57:6f:d3:80:7f:ad:
13:b1:39:c4:07:3d:0d:2e:7d:41:f8:96:3a:e7:e4:
73:00:46:23:41:df:8c:7c:f6:f0:b3:b4:67:0e:01:
d2:db:90:f1:6b:aa:10:fc:46:91:b0:08:e5:2a:34:
f9:61:6d:e8:8c:e7:e3:d0:7a:48:d3:10:2a:97:50:
09:42:b9:2a:7d:38:25:ac:16:30:4b:fa:f5:46:1b:
8a:9a:30:99:57:e2:00:b2:bf:9b:34:58:a0:4d:48:
aa:87:25:06:72:5b:b8:08:86:98:67:56:e6:26:04:
d0:81:01:7c:8f:43:69:1d:0f:a4:b7:3b:ab:af:9e:
b7:9b:59:ba:ac:31:48:a5:b1:a2:57:e4:35:ac:c0:
3a:ef:13:ff:61:1b:13:cd:c1:cf:c5:1d:99:25:c0:
e1:df:9a:89:d7:fc:f5:d1:2b:eb:ac:ea:bb:10:40:
04:52:d9:1d:6a:9d:e4:33:ce:c4:f0:96:ca:84:de:
d0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:EA:EC:10:F8:23:18:EA:43:E0:C6:6A:76:E4:4A:4D:DF:26:32:8C
X509v3 Authority Key Identifier:
keyid:B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:85:36:e5:e2:d2:57:42:5c:d2:0b:24:a7:0a:2e:99:69:50:
4c:40:de:de:c6:13:d9:f5:62:82:67:41:c3:77:5b:db:6b:70:
a4:f8:04:6f:be:2e:83:60:c5:53:70:4b:2e:26:f0:74:f8:69:
f9:3a:4c:8f:af:93:13:76:af:cc:a7:ba:47:dd:38:f6:91:ab:
85:9a:28:46:34:ee:96:69:e2:ea:fa:a5:82:d8:e5:50:c0:c2:
48:05:1f:38:e0:54:ed:f2:6c:13:1f:dc:fe:24:41:3a:32:32:
2f:c7:d9:69:58:87:02:1a:1c:fd:c2:92:38:57:73:0e:d2:dc:
16:bc:7e:51:1d:ea:80:f3:44:4d:44:c6:45:5b:ca:e2:06:40:
7f:87:46:f7:91:45:ec:5a:55:d7:e2:48:fa:a1:b4:b2:15:68:
0f:5d:a9:00:87:8d:84:9b:b0:23:70:85:51:82:64:ed:78:33:
32:96:84:71:bb:08:e5:07:0e:2c:02:e7:ea:73:77:10:38:86:
3a:e5:ec:e2:d5:5d:83:fc:d9:88:19:58:fb:c3:e5:2d:33:11:
c2:a8:f1:76:63:82:43:e1:16:a2:d1:29:92:1a:58:9f:f3:d2:
13:11:27:5b:bb:d1:a1:b2:e8:ca:84:0c:0a:56:fe:31:c5:0e:
a5:b3:ce:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOTzepjfUMYQVYESR6qeFPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYzNlYzUzOWYyM2VlMDMxYWEzOTZhYzVjZWQ0MjU2Mzg4
NGI3YjMwHhcNMjUxMTA0MTAwMDA1WhcNMjUxMTA1MTAwMDA1WjAzMTEwLwYDVQQD
EyhhZmVhZWMxMGY4MjMxOGVhNDNlMGM2NmE3NmU0NGE0ZGRmMjYzMjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozVEWs5YMLgnrJOqkhGtEjIgVZ71
Gf5hRiKzjrDxLTzGM0yl+q1kXLwqtPbTe6NQqWhOu9g/4K4vVntUiPB1J2WgWuNX
b9OAf60TsTnEBz0NLn1B+JY65+RzAEYjQd+MfPbws7RnDgHS25Dxa6oQ/EaRsAjl
KjT5YW3ojOfj0HpI0xAql1AJQrkqfTglrBYwS/r1RhuKmjCZV+IAsr+bNFigTUiq
hyUGclu4CIaYZ1bmJgTQgQF8j0NpHQ+ktzurr563m1m6rDFIpbGiV+Q1rMA67xP/
YRsTzcHPxR2ZJcDh35qJ1/z10SvrrOq7EEAEUtkdap3kM87E8JbKhN7QxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK/q7BD4IxjqQ+DGanbkSk3fJjKMMB8GA1UdIwQY
MBaAFLHD7FOfI+4DGqOWrFztQlY4hLezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2NQc1U1OGo3Z01hbzVhc1hPMUNWamlFdDdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8wMGRjZGYtZWM5ZC00NDQ2LTkwNWUt
NTU2MzQ3YTVmMDU2LzEvc2NQc1U1OGo3Z01hbzVhc1hPMUNWamlFdDdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8wMGRjZGYtZWM5ZC00NDQ2LTkwNWUtNTU2MzQ3YTVmMDU2
LzEvc2NQc1U1OGo3Z01hbzVhc1hPMUNWamlFdDdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuYU25eLS
V0Jc0gskpwoumWlQTEDe3sYT2fVigmdBw3db22twpPgEb74ug2DFU3BLLibwdPhp
+TpMj6+TE3avzKe6R9049pGrhZooRjTulmni6vqlgtjlUMDCSAUfOOBU7fJsEx/c
/iRBOjIyL8fZaViHAhoc/cKSOFdzDtLcFrx+UR3qgPNETUTGRVvK4gZAf4dG95FF
7FpV1+JI+qG0shVoD12pAIeNhJuwI3CFUYJk7XgzMpaEcbsI5QcOLALn6nN3EDiG
OuXs4tVdg/zZiBlY+8PlLTMRwqjxdmOCQ+EWotEpkhpYn/PSExEnW7vRobLoyoQM
Clb+McUOpbPOkA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:05 2025 by rpki-client