Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft
File: Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft (raw, json)
Hash identifier: QV/dONocWyRwyTzy4rctQNFV7j5gwjqGv21GDIrLcKs=
Subject key identifier: 53:37:36:40:63:70:FA:10:1E:47:1C:96:91:1E:BA:2C:4B:D2:02:07
Authority key identifier: 49:FE:8C:72:AA:32:DE:95:7B:24:CF:9F:73:F8:A7:FB:1A:CF:0B:71
Certificate issuer: /CN=49fe8c72aa32de957b24cf9f73f8a7fb1acf0b71
Certificate serial: 019A72935EAC235CAE271A446BE0E7F8B56E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft
Manifest number: 0F56
Signing time: Tue 11 Nov 2025 11:00:51 +0000
Manifest this update: Tue 11 Nov 2025 11:00:51 +0000
Manifest next update: Wed 12 Nov 2025 11:00:51 +0000
Files and hashes: 1: Mg03f5x9KEwTzrWMVXcY-DpbRQM.roa (hash: gHoeFO+xk1dFoFV2Z9UYHxVBDmrYCHhqpQCvP+8wkDE=)
2: Sf6Mcqoy3pV7JM-fc_in-xrPC3E.crl (hash: kMKiIapW3nLLQ6JJFuXF4zIr2dRDovnmPx+rXc0RhRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:5e:ac:23:5c:ae:27:1a:44:6b:e0:e7:f8:b5:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49fe8c72aa32de957b24cf9f73f8a7fb1acf0b71
Validity
Not Before: Nov 11 11:00:51 2025 GMT
Not After : Nov 12 11:00:51 2025 GMT
Subject: CN=533736406370fa101e471c96911eba2c4bd20207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0d:79:20:9f:1b:b1:16:db:e7:aa:b6:0b:b8:
4e:86:b2:69:73:d5:1a:3f:97:55:df:23:31:0d:7f:
4c:ea:6a:db:f2:e6:6c:e3:33:d8:fb:19:b5:d0:57:
6d:30:0d:3b:d3:3d:bc:b8:af:96:c5:4c:fa:ac:8d:
22:66:21:01:dd:d6:bd:4d:d0:1c:4f:87:cc:a8:ec:
1f:0f:c9:07:23:63:9f:1a:02:39:18:df:4a:4c:b9:
bb:35:e7:45:73:58:8d:1f:ed:f3:08:76:09:c0:0c:
c5:ce:3c:32:a7:75:1d:a6:d7:a6:27:56:ea:22:21:
48:7e:ed:06:77:9d:f8:be:4e:3a:0d:23:59:fe:9a:
97:17:f2:55:2d:79:ce:d6:56:5c:57:48:fc:a9:a4:
bd:6c:d0:70:43:a6:49:92:67:3a:61:39:21:b1:6f:
1f:df:a0:6d:fd:84:0b:42:09:d9:df:ae:20:2d:5a:
a8:ab:c1:3d:b3:1a:9b:83:93:5a:b1:e5:93:80:2f:
4e:1c:ad:e6:49:d6:53:a8:1b:a3:5f:f5:e8:91:b5:
2c:16:69:a7:94:64:23:d1:7b:a1:f2:ac:18:7c:0c:
cf:21:61:11:57:10:d1:35:92:35:26:06:7f:9e:2f:
34:ca:97:69:42:0b:03:ef:07:c1:d7:15:8c:aa:00:
d3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:37:36:40:63:70:FA:10:1E:47:1C:96:91:1E:BA:2C:4B:D2:02:07
X509v3 Authority Key Identifier:
keyid:49:FE:8C:72:AA:32:DE:95:7B:24:CF:9F:73:F8:A7:FB:1A:CF:0B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:97:da:01:6d:79:46:ae:05:86:98:27:49:ff:5b:2f:68:c2:
7b:f4:98:5a:07:32:bb:e0:48:70:ba:22:35:86:4d:11:80:97:
a1:d2:a8:34:9c:6c:b6:5e:66:35:28:ab:6d:df:85:a4:bc:7b:
8f:1b:e3:66:54:ca:05:95:cc:a3:8e:51:59:04:5e:37:58:34:
03:5d:e8:d1:c6:fb:b8:bb:46:24:76:0f:b6:ac:19:48:8e:bf:
25:c5:cb:fc:a8:e9:aa:9d:8c:d6:82:3b:f6:5f:23:f2:bb:f2:
df:18:cf:f2:d7:02:ec:2f:ac:0e:22:32:30:7f:bf:c9:76:7f:
95:57:42:f1:02:d6:76:9b:6d:2b:84:96:37:8c:bb:13:8e:1d:
be:a6:e3:c9:24:29:74:5a:3e:d5:50:b4:15:b0:7f:6d:de:75:
8a:6a:15:56:ad:ca:e7:6a:cc:2c:ab:ff:ae:8c:7c:94:87:44:
c4:e3:c6:07:3e:f1:0e:e6:c3:a7:ac:d9:b6:38:83:58:70:79:
e0:26:29:01:e7:63:50:6b:c8:6c:be:59:30:8d:ab:14:e4:0b:
fe:39:26:a0:3c:69:d7:4b:64:a7:e6:44:73:57:56:63:bc:2d:
18:0a:18:1a:02:2a:7b:53:d4:e7:71:98:7d:ec:79:4a:5a:08:
2c:4c:0b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:54 2025 by rpki-client