Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.mft
File: sCqa8vxf6TxDFIqssTxRvpBMjkw.mft (raw, json)
Hash identifier: IYFXlwRiv/jKDkB5sMP5d7MTFNMBMzzpBDgItt7+zCs=
Subject key identifier: 3D:59:23:64:59:7A:FF:82:8A:DA:AE:98:3F:E5:20:4B:98:30:51:84
Authority key identifier: B0:2A:9A:F2:FC:5F:E9:3C:43:14:8A:AC:B1:3C:51:BE:90:4C:8E:4C
Certificate issuer: /CN=b02a9af2fc5fe93c43148aacb13c51be904c8e4c
Certificate serial: 019A522C6346BA258F22413E882174F3A11F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCqa8vxf6TxDFIqssTxRvpBMjkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.mft
Manifest number: 0549
Signing time: Wed 05 Nov 2025 04:00:31 +0000
Manifest this update: Wed 05 Nov 2025 04:00:31 +0000
Manifest next update: Thu 06 Nov 2025 04:00:31 +0000
Files and hashes: 1: RLYBpjQJ_nWnvtQxzs5jpfZ53LI.roa (hash: WydSL9s2ghSAkXvNPUv+LZJE2s3aihvIV2UvrS6hIBw=)
2: sCqa8vxf6TxDFIqssTxRvpBMjkw.crl (hash: 4ok2PfFX1OxImL7MiyQwByp5KsvQ0M2E0dfd7dvrqGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCqa8vxf6TxDFIqssTxRvpBMjkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:63:46:ba:25:8f:22:41:3e:88:21:74:f3:a1:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02a9af2fc5fe93c43148aacb13c51be904c8e4c
Validity
Not Before: Nov 5 04:00:31 2025 GMT
Not After : Nov 6 04:00:31 2025 GMT
Subject: CN=3d592364597aff828adaae983fe5204b98305184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b9:15:e4:0b:eb:61:c8:31:4e:b4:c1:68:e8:
7e:1d:04:e5:78:50:7e:aa:f2:46:33:c1:09:81:3d:
88:79:6e:d5:43:7c:8f:7b:a8:72:4c:51:ce:ec:5b:
d0:14:2b:53:98:a2:ff:d4:54:0d:be:db:0a:29:37:
49:26:40:a9:83:da:bd:25:bb:71:0c:cc:1c:c3:e2:
d3:6d:b3:3d:49:d3:64:1f:56:dc:99:ec:2e:f6:67:
dc:8e:90:25:4c:23:da:35:d6:34:00:db:d1:54:03:
ca:b0:c5:a0:78:c1:0d:e7:24:b6:22:c3:67:8e:08:
ec:4c:0f:7e:0e:20:df:d9:fc:46:70:c3:d1:71:61:
e0:48:fe:e9:4e:83:13:44:97:d0:d1:73:e5:e3:e2:
81:71:0c:c9:ab:85:6a:91:81:4f:7f:a6:1a:95:c6:
31:63:ea:db:7d:a5:e3:bd:06:15:69:27:dd:96:14:
ee:bc:29:56:9b:aa:16:fd:2a:15:ce:0a:38:ee:88:
78:fd:22:9d:bf:0c:30:44:5d:5e:7d:72:68:2b:a5:
5d:61:86:73:a8:33:43:b8:d6:5b:d9:ea:86:ec:6a:
33:5e:12:36:02:08:b6:f5:02:b3:41:90:04:5d:af:
eb:bb:1b:36:c1:3d:e1:d1:b7:a3:0d:20:0f:7d:85:
c7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:59:23:64:59:7A:FF:82:8A:DA:AE:98:3F:E5:20:4B:98:30:51:84
X509v3 Authority Key Identifier:
keyid:B0:2A:9A:F2:FC:5F:E9:3C:43:14:8A:AC:B1:3C:51:BE:90:4C:8E:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCqa8vxf6TxDFIqssTxRvpBMjkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:c3:5f:6d:2f:39:0b:ac:40:94:44:49:95:ac:80:52:a8:fd:
d7:47:86:c0:ed:61:ec:5f:2b:78:db:38:c7:22:c5:05:b9:d5:
ef:f0:1e:c6:08:02:fa:c1:76:a4:b7:e3:ce:73:4c:b1:c7:f8:
5c:37:ba:ec:46:55:64:f3:96:b1:7a:a5:32:e4:57:b1:25:62:
52:70:e3:1b:2e:f6:47:7b:1c:96:01:6a:0b:e4:48:27:bc:cf:
ad:9c:88:02:c6:75:06:82:4e:e7:7d:d0:a4:61:6f:15:43:6f:
fd:71:c2:6e:a8:ef:3c:a8:5b:b6:c7:46:97:fd:d8:36:5f:e8:
75:90:90:60:ca:07:6f:db:d8:d8:d6:a5:ab:09:05:dd:78:f0:
65:4f:9f:aa:f4:11:23:6e:f2:f5:35:f9:9d:22:99:e6:d2:90:
f1:58:b6:ba:29:b6:3f:dd:3c:44:93:30:c2:af:83:61:b8:e3:
e8:54:c2:ea:b8:68:ab:ec:bd:85:bf:4f:28:a7:4d:c4:14:5a:
84:7e:17:f5:dc:fa:15:a1:b8:d7:c3:23:3f:f9:56:72:fb:93:
29:fb:2f:41:fc:ce:fd:e1:68:55:ba:60:31:f4:99:31:67:b7:
26:64:4d:e6:36:ca:e6:3a:79:8e:89:1e:61:0c:b4:d5:7d:78:
e5:96:5d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:25:08 2025 by rpki-client