Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft
File: sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft (raw, json)
Hash identifier: 1wvDw3vcPT/AXcTxxe+uG/beNFR5NpD/4mUN69lziBg=
Subject key identifier: BC:19:47:25:8B:C9:6E:CB:E3:BB:CB:97:6C:FB:F5:29:27:B6:94:9C
Authority key identifier: B0:2B:1F:76:E8:C2:BA:49:28:AC:28:0B:27:AA:84:D5:96:7A:35:04
Certificate issuer: /CN=b02b1f76e8c2ba4928ac280b27aa84d5967a3504
Certificate serial: 019A533F9DFB2EE3B5AF90F9DED64045AEFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft
Manifest number: 098A
Signing time: Wed 05 Nov 2025 09:01:09 +0000
Manifest this update: Wed 05 Nov 2025 09:01:09 +0000
Manifest next update: Thu 06 Nov 2025 09:01:09 +0000
Files and hashes: 1: hyhfndoa_Z24zyoZ7ygYaeGIqPw.roa (hash: 08nYzAa42CtGg2k7nkGWsd8V/SDqafxamCeCjRVW6Yw=)
2: sCsfdujCukkorCgLJ6qE1ZZ6NQQ.crl (hash: v5CNqyN1MH0vRWVqZzx9Qtpk/axSSerEwo28enASMFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:9d:fb:2e:e3:b5:af:90:f9:de:d6:40:45:ae:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02b1f76e8c2ba4928ac280b27aa84d5967a3504
Validity
Not Before: Nov 5 09:01:09 2025 GMT
Not After : Nov 6 09:01:09 2025 GMT
Subject: CN=bc1947258bc96ecbe3bbcb976cfbf52927b6949c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:43:c8:db:2d:c2:a6:e3:dd:3f:e0:6d:22:80:
d4:6c:93:31:ae:70:d4:a8:c3:10:ed:4e:fd:33:ab:
09:7f:f7:b6:6c:39:6e:f4:68:28:a6:5a:6e:c4:63:
c2:d4:ca:d6:8f:4c:ba:7c:56:f2:51:49:eb:5c:c4:
82:8d:32:92:30:b3:9c:af:58:17:44:31:39:40:09:
41:c9:a3:bb:d0:d7:9d:db:b2:01:63:e7:6f:06:71:
9c:55:0a:07:f1:a6:aa:4a:6b:5e:72:d9:42:2c:1d:
13:b4:c3:87:ea:d5:0c:9f:8c:1f:24:5a:dc:c4:55:
bc:8d:63:7d:99:3c:08:a0:64:a6:6f:fb:6e:8e:79:
b4:6d:d6:f2:14:af:7a:cb:94:a2:38:31:59:28:a5:
bb:17:ee:c4:cb:aa:55:93:ff:27:b4:66:0d:37:b3:
da:6e:f2:01:66:74:f4:7e:a7:d7:d5:94:70:10:93:
50:0d:4f:94:84:20:be:c0:13:77:43:b1:06:e3:6d:
a1:6e:a3:a5:0f:38:79:54:9b:01:5a:e5:cb:87:8f:
dd:7f:cf:ba:18:8d:4f:b5:5b:f4:98:55:37:75:a1:
b1:62:17:06:e4:c9:e9:a0:b9:27:5c:89:f8:d1:c2:
2e:08:d3:5d:75:3e:e1:0e:20:cc:ac:c3:c5:6c:67:
12:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:19:47:25:8B:C9:6E:CB:E3:BB:CB:97:6C:FB:F5:29:27:B6:94:9C
X509v3 Authority Key Identifier:
keyid:B0:2B:1F:76:E8:C2:BA:49:28:AC:28:0B:27:AA:84:D5:96:7A:35:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:d3:63:b9:c7:10:fb:01:13:c0:9e:2d:8d:14:28:13:33:dc:
67:94:d3:61:4f:08:69:e8:87:6e:50:75:f4:26:9d:01:ee:2c:
dd:07:2f:77:66:02:3e:be:9b:4d:d1:d2:5c:df:65:59:f1:d9:
17:42:62:41:ad:21:cd:80:ac:f8:c4:4b:a2:84:93:02:db:42:
35:e0:57:6c:00:8d:6c:b2:09:35:3f:15:b6:f9:27:cd:7f:ee:
c1:34:40:8c:7c:af:07:69:31:ec:32:38:6f:25:dc:b5:fb:d7:
f2:e3:b8:43:27:38:50:08:ea:de:84:86:a6:d7:fd:4a:78:db:
d0:89:0a:a0:ab:6c:e1:44:98:a0:62:b2:43:a5:38:23:92:c2:
e7:3e:36:39:2e:c7:66:50:10:83:75:30:26:ad:f1:8a:87:6c:
cb:42:9f:1e:5f:c5:0d:12:3c:7b:4c:ed:23:8b:fb:db:0e:a4:
51:77:89:b7:a1:c1:f4:d6:ec:88:c8:39:a6:61:95:e1:24:f7:
ce:08:99:c1:0a:67:90:31:52:b8:ec:b3:c5:0a:f0:6b:2c:2f:
2c:9e:cf:f6:a2:8c:70:01:1f:ff:a2:ac:03:5c:4a:cf:e5:15:
8e:8a:49:1e:38:30:e7:a9:99:1e:63:d4:08:f8:66:55:cb:a3:
35:fa:64:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTP537LuO1r5D53tZARa79MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMmIxZjc2ZThjMmJhNDkyOGFjMjgwYjI3YWE4NGQ1OTY3
YTM1MDQwHhcNMjUxMTA1MDkwMTA5WhcNMjUxMTA2MDkwMTA5WjAzMTEwLwYDVQQD
EyhiYzE5NDcyNThiYzk2ZWNiZTNiYmNiOTc2Y2ZiZjUyOTI3YjY5NDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEPI2y3CpuPdP+BtIoDUbJMxrnDU
qMMQ7U79M6sJf/e2bDlu9GgoplpuxGPC1MrWj0y6fFbyUUnrXMSCjTKSMLOcr1gX
RDE5QAlByaO70Ned27IBY+dvBnGcVQoH8aaqSmtectlCLB0TtMOH6tUMn4wfJFrc
xFW8jWN9mTwIoGSmb/tujnm0bdbyFK96y5SiODFZKKW7F+7Ey6pVk/8ntGYNN7Pa
bvIBZnT0fqfX1ZRwEJNQDU+UhCC+wBN3Q7EG422hbqOlDzh5VJsBWuXLh4/df8+6
GI1PtVv0mFU3daGxYhcG5MnpoLknXIn40cIuCNNddT7hDiDMrMPFbGcSVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLwZRyWLyW7L47vLl2z79SkntpScMB8GA1UdIwQY
MBaAFLArH3bowrpJKKwoCyeqhNWWejUEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0NzZmR1akN1a2tvckNnTEo2cUUxWlo2TlFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8wOGNkNDYtMTAxOS00ZjdkLTg2N2It
Mjk3ZTAzMDY2ZjdkLzEvc0NzZmR1akN1a2tvckNnTEo2cUUxWlo2TlFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8wOGNkNDYtMTAxOS00ZjdkLTg2N2ItMjk3ZTAzMDY2Zjdk
LzEvc0NzZmR1akN1a2tvckNnTEo2cUUxWlo2TlFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlNNjuccQ
+wETwJ4tjRQoEzPcZ5TTYU8IaeiHblB19CadAe4s3Qcvd2YCPr6bTdHSXN9lWfHZ
F0JiQa0hzYCs+MRLooSTAttCNeBXbACNbLIJNT8VtvknzX/uwTRAjHyvB2kx7DI4
byXctfvX8uO4Qyc4UAjq3oSGptf9Snjb0IkKoKts4USYoGKyQ6U4I5LC5z42OS7H
ZlAQg3UwJq3xiodsy0KfHl/FDRI8e0ztI4v72w6kUXeJt6HB9NbsiMg5pmGV4ST3
zgiZwQpnkDFSuOyzxQrwaywvLJ7P9qKMcAEf/6KsA1xKz+UVjopJHjgw56mZHmPU
CPhmVcujNfpkLQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 14:43:22 2025 by rpki-client