Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e25874-715c-497f-8ee5-d41335f80dc9/1/SC5BYNmAj5L_7wk-mxuaBCG62jQ.mft
File: SC5BYNmAj5L_7wk-mxuaBCG62jQ.mft (raw, json)
Hash identifier: SfBhX3g5gsl5E17Qn12om/2DQ21/CmHlnf8y6vCEv7E=
Subject key identifier: DD:C6:12:01:B1:D9:99:53:59:7B:D5:3A:A4:D2:AD:2B:BA:4A:E1:A6
Authority key identifier: 48:2E:41:60:D9:80:8F:92:FF:EF:09:3E:9B:1B:9A:04:21:BA:DA:34
Certificate issuer: /CN=482e4160d9808f92ffef093e9b1b9a0421bada34
Certificate serial: 019A4EF50F95E09911FCD94CB249DEC7CF43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SC5BYNmAj5L_7wk-mxuaBCG62jQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e25874-715c-497f-8ee5-d41335f80dc9/1/SC5BYNmAj5L_7wk-mxuaBCG62jQ.mft
Manifest number: 0634
Signing time: Tue 04 Nov 2025 13:01:14 +0000
Manifest this update: Tue 04 Nov 2025 13:01:14 +0000
Manifest next update: Wed 05 Nov 2025 13:01:14 +0000
Files and hashes: 1: SC5BYNmAj5L_7wk-mxuaBCG62jQ.crl (hash: LG5WxtpVU2V/NahYTZB2942WF6aJs2RGEc1Fnz8pimM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/e25874-715c-497f-8ee5-d41335f80dc9/1/SC5BYNmAj5L_7wk-mxuaBCG62jQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/e25874-715c-497f-8ee5-d41335f80dc9/1/SC5BYNmAj5L_7wk-mxuaBCG62jQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SC5BYNmAj5L_7wk-mxuaBCG62jQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:0f:95:e0:99:11:fc:d9:4c:b2:49:de:c7:cf:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=482e4160d9808f92ffef093e9b1b9a0421bada34
Validity
Not Before: Nov 4 13:01:14 2025 GMT
Not After : Nov 5 13:01:14 2025 GMT
Subject: CN=ddc61201b1d99953597bd53aa4d2ad2bba4ae1a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:db:eb:a1:02:cf:a0:56:03:75:f1:fa:30:4b:
f5:a2:91:d1:4e:a2:05:7f:69:ea:60:83:a7:f1:91:
99:6c:0e:1a:03:38:b3:38:d9:fe:16:cd:56:c7:b1:
1e:b6:69:f5:7f:ce:69:5b:c6:41:25:16:44:67:1b:
7d:16:7d:42:fa:19:96:6d:d9:cd:c2:be:73:b8:85:
6a:9a:6a:92:4e:a4:bc:5e:77:84:02:c2:ee:66:3d:
b1:e3:49:80:4e:b2:90:00:bc:49:e3:6a:ae:f0:9b:
1d:f7:76:1c:8f:63:40:4d:f3:35:73:19:0a:36:39:
c8:48:88:71:9a:21:cb:93:a4:0f:e8:65:ae:c1:6f:
fa:0c:ab:49:a2:f6:0f:b9:bb:aa:17:e0:83:b4:80:
72:a0:ba:ee:17:bb:8e:54:ce:2d:f4:a4:21:8e:6e:
9e:3b:9b:4d:f9:ee:34:cd:4c:45:70:68:c7:04:1f:
e3:e3:7a:33:18:31:7d:6e:14:7b:61:99:2e:1c:28:
31:99:0b:9e:84:67:03:be:d1:e7:bf:0b:7b:b5:6f:
71:00:e4:6b:f5:00:a9:dd:e7:d6:a0:5f:dd:01:26:
4b:b8:80:7d:23:bd:78:10:7f:42:83:36:a9:b3:a9:
05:37:aa:f8:10:0e:ed:76:96:75:73:f7:61:ea:db:
47:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C6:12:01:B1:D9:99:53:59:7B:D5:3A:A4:D2:AD:2B:BA:4A:E1:A6
X509v3 Authority Key Identifier:
keyid:48:2E:41:60:D9:80:8F:92:FF:EF:09:3E:9B:1B:9A:04:21:BA:DA:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SC5BYNmAj5L_7wk-mxuaBCG62jQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e25874-715c-497f-8ee5-d41335f80dc9/1/SC5BYNmAj5L_7wk-mxuaBCG62jQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e25874-715c-497f-8ee5-d41335f80dc9/1/SC5BYNmAj5L_7wk-mxuaBCG62jQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:a2:61:86:f4:82:69:ba:4d:fa:be:f9:8b:4a:85:62:39:3c:
d7:a1:4c:41:b7:e2:e8:d4:42:e3:75:f7:79:7f:95:d7:6e:be:
b6:61:d3:22:8b:d9:29:a7:08:a1:2b:1d:60:e8:8e:1e:8b:e2:
31:05:49:5e:0f:90:2f:c7:6d:02:04:3b:b4:56:39:c4:3a:bc:
d4:0e:6e:be:e4:2c:b1:9d:dd:44:86:45:3d:46:5b:3b:15:38:
b5:6b:42:15:4a:98:46:4c:b7:1c:0f:89:72:8d:03:0c:ef:78:
29:bb:ed:63:67:74:8b:df:e2:2f:c5:47:8d:13:e0:19:a3:d8:
a4:45:f5:68:05:5a:83:89:73:1a:2d:b6:70:4d:16:df:63:31:
d0:8f:55:0f:62:32:74:e0:ab:81:3d:72:fc:43:d9:8a:47:3a:
b4:3c:5d:fa:31:15:0e:2c:07:af:02:7a:eb:4e:d8:cd:1c:75:
35:fe:16:56:31:ed:1f:05:1f:fc:12:d8:dd:31:3d:fb:7f:5f:
5f:23:f0:c3:c9:d9:48:23:77:2e:db:23:0c:c8:c0:40:62:14:
72:b7:54:e4:30:8f:a8:e3:db:bd:d1:d9:34:e3:cf:0e:33:93:
81:bc:af:0e:08:04:42:eb:7d:92:88:ff:72:06:b1:27:5a:7a:
c6:5e:85:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:36 2025 by rpki-client