Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
File: ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft (raw, json)
Hash identifier: /9oQbJjxw+2Smh9q3toU3xy2TjnxVvkBmfSM1dToMw0=
Subject key identifier: 83:6A:96:2F:01:7C:35:15:72:F2:F4:68:17:84:D3:FA:7D:A6:38:7D
Authority key identifier: 49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71
Certificate issuer: /CN=49c403d43b5f38fca2119cd1409a92763edefe71
Certificate serial: 019A51196E62358CF83403A3D12DEF21647D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
Manifest number: 1713
Signing time: Tue 04 Nov 2025 23:00:12 +0000
Manifest this update: Tue 04 Nov 2025 23:00:12 +0000
Manifest next update: Wed 05 Nov 2025 23:00:12 +0000
Files and hashes: 1: 6ZwG_Y60Ty5PTqTrDlKsyphblXQ.roa (hash: vR97+OeUXCCOXRpSdGW1/Y4Sp/FefDWwnMJQ9Jni4rk=)
2: BGdD8LDEAedO7LkZulNO0on6BtA.roa (hash: 5JKMac3WduBMBCnJzqk90kK6WJ4PSh8kMPbmsKHD+wc=)
3: Bs46C8G9Xvlaiic-U_vabhAJhco.roa (hash: 3sJguMlQk0GQr3vKdqIN2WvzrXMmi6x68HlsMnn5UuM=)
4: D5iZPHtIHYKSLlUoRqhHam3z4fw.roa (hash: iQxb5JVe2tNY+bNton8d20CXKpbqyN/eHLh+5EoqEaI=)
5: Rl9152Qvb_u7j8K6moXvloqlxuw.roa (hash: 7VxgCsm28hyqe3FM8bfzznGaU0K/XnvaJIfEnQlGvZI=)
6: ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl (hash: JE9vt0xaM6hVg3Wru1t9/DvJm4p2eeAY8Yjz+O66DDY=)
7: bkbeFY-foKd3saHxL2Ms4IvaWZI.roa (hash: Pb5Tubkcy9LxO6t4tf4Rf3p3iIfsYoVtUzwvSZ29zs0=)
8: h13V4d_ekYYA6uv0-jBvE7ljXgg.roa (hash: 64VEKJzZ2W6+uSgCoWExxMNGZCghiQUddh02slxkwlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:6e:62:35:8c:f8:34:03:a3:d1:2d:ef:21:64:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49c403d43b5f38fca2119cd1409a92763edefe71
Validity
Not Before: Nov 4 23:00:12 2025 GMT
Not After : Nov 5 23:00:12 2025 GMT
Subject: CN=836a962f017c351572f2f4681784d3fa7da6387d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d2:62:f7:7b:88:93:f8:ca:06:b4:7b:ed:0b:
f0:3c:d6:15:ee:86:a0:84:63:fc:51:13:11:df:de:
64:c1:23:a1:fa:9a:ec:02:28:92:ed:4f:5c:cf:f7:
0b:aa:ab:f3:ed:4e:59:10:59:fc:76:34:b1:ab:8f:
b2:5d:74:24:c8:47:b6:a9:43:fd:f5:52:35:5a:76:
ce:f3:14:30:33:ca:81:78:33:8a:77:72:c5:53:95:
52:ef:95:3c:31:11:3f:a1:d9:d6:d4:46:ca:10:78:
09:56:f4:1f:57:0d:98:c8:bd:54:80:0a:45:6d:8f:
e8:de:24:64:ae:4c:a0:8c:1a:97:e9:35:72:7d:80:
53:9d:3e:d6:60:49:69:29:af:41:09:2c:6d:e9:c3:
ab:7c:35:20:da:1f:f4:f8:7a:78:28:c4:51:be:85:
9e:cc:ae:bc:7d:e8:83:28:5f:67:6d:43:59:5e:22:
74:b6:9e:fc:98:fe:b6:c6:06:3d:64:8b:a2:b0:a8:
0e:c9:7d:09:25:0c:c9:0d:ae:81:cd:5e:26:c5:92:
c5:a0:85:8e:b0:83:50:f6:34:4e:bd:5a:e3:df:7e:
a1:3f:90:b9:f8:c1:da:c4:91:9b:af:d7:0a:45:10:
7c:13:6c:f6:7b:5f:30:a8:28:2f:e6:9e:11:e5:29:
7f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:6A:96:2F:01:7C:35:15:72:F2:F4:68:17:84:D3:FA:7D:A6:38:7D
X509v3 Authority Key Identifier:
keyid:49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:65:57:89:fd:65:c0:73:9a:41:93:8c:fc:f9:96:dc:b0:51:
68:bb:31:68:3f:5d:a0:72:04:6f:87:28:ec:8e:ac:57:6f:d9:
9e:99:d1:aa:2b:58:5a:a9:63:f9:83:b9:4e:a7:02:71:ec:11:
6a:04:98:3c:2f:ab:5e:4d:59:06:5b:77:60:67:d3:e8:18:4a:
71:71:73:23:72:b4:0a:a0:60:dc:9f:1b:28:af:fe:96:2e:d7:
55:34:b7:1a:bb:16:f4:40:45:fa:71:e8:fd:0c:75:b8:75:e8:
74:75:11:91:2a:4b:4e:fe:d6:c4:6c:b1:f8:c2:b5:6f:9f:3a:
0d:f3:62:f7:ff:10:e9:f5:67:be:6a:d1:72:7c:08:15:f8:d2:
c2:a0:96:30:b0:36:08:22:ad:c9:2d:85:0f:c1:a2:50:df:9e:
11:c2:47:7c:cf:1d:c6:0e:26:ed:d6:d7:da:eb:bc:37:3e:3f:
5a:ec:e1:25:c2:2b:ce:da:7c:07:a8:1c:31:01:0e:74:3f:ea:
0d:fe:66:35:4b:50:09:61:c5:82:24:ba:fb:88:ce:20:c5:2b:
87:ca:2f:d7:62:bf:ff:1a:e4:be:eb:76:01:14:e7:cf:36:c7:
05:2f:31:12:7c:f4:84:fa:a0:53:dd:96:8c:9c:f4:7e:80:73:
8c:90:1b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:55:59 2025 by rpki-client