Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
File: sCQrfkMFPJE9Yr9duxaC_-a43-I.mft (raw, json)
Hash identifier: DNA6WVE/+g/NBQ4cD5koi/r+FsI4+o3+MJflIcWDH7w=
Subject key identifier: 8E:E6:D5:DF:12:18:30:C6:B3:62:4B:56:F4:8E:E0:96:14:14:6F:9D
Authority key identifier: B0:24:2B:7E:43:05:3C:91:3D:62:BF:5D:BB:16:82:FF:E6:B8:DF:E2
Certificate issuer: /CN=b0242b7e43053c913d62bf5dbb1682ffe6b8dfe2
Certificate serial: 01992F6C49E80A8BA6F2FE78C0C03E42FE1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
Manifest number: 0FDE
Signing time: Tue 09 Sep 2025 17:00:49 +0000
Manifest this update: Tue 09 Sep 2025 17:00:49 +0000
Manifest next update: Wed 10 Sep 2025 17:00:49 +0000
Files and hashes: 1: VXSaoq70xTeN6W3C76eUA8OC5cU.roa (hash: vEwflplyRjS2mkClV+Bpny4Bw/QU3HBBti723DFTvj4=)
2: sCQrfkMFPJE9Yr9duxaC_-a43-I.crl (hash: zQNVSWQR5d5PQztSvktopL5tQYTDKTcrdUrWC6O4GKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 15:12:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:6c:49:e8:0a:8b:a6:f2:fe:78:c0:c0:3e:42:fe:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0242b7e43053c913d62bf5dbb1682ffe6b8dfe2
Validity
Not Before: Sep 9 17:00:49 2025 GMT
Not After : Sep 10 17:00:49 2025 GMT
Subject: CN=8ee6d5df121830c6b3624b56f48ee09614146f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:09:68:38:07:0e:ad:bc:54:03:ba:82:25:0f:
46:7b:87:ad:55:54:fb:b2:c7:51:d3:e3:bf:de:d4:
7a:1e:cd:08:ee:b7:4d:89:4a:23:aa:ed:83:5d:f8:
08:56:93:81:f2:58:50:b1:dc:82:76:eb:e7:54:5a:
0a:fd:06:e3:3d:c4:0d:3e:4c:7c:de:f9:07:ea:81:
c9:b2:1f:91:cd:6d:59:f2:04:2e:70:c5:4d:02:86:
8f:3c:78:0f:ca:4e:a8:a8:d3:72:72:d7:67:a1:40:
7c:2e:21:c2:8a:43:bb:03:94:20:e6:1d:3c:08:31:
dd:87:cc:81:14:be:04:e0:08:7d:5c:8d:d5:13:eb:
76:c8:28:e6:a2:70:3d:b1:a3:51:58:54:70:f2:a0:
c9:f4:d6:5c:2f:4f:2e:6f:fb:7b:8d:c2:2d:90:74:
eb:8a:4f:bf:82:5a:ab:cc:e1:e3:dc:9f:0d:ff:4a:
9f:80:9a:a3:4e:d5:eb:21:4b:f6:ac:fd:d3:52:61:
fb:d4:e6:f2:ae:38:39:33:f8:e4:42:53:73:cc:fa:
71:8e:e9:85:c8:73:95:c7:ac:99:bc:db:0a:86:0e:
08:24:90:2f:58:41:03:27:9b:dd:52:f7:cb:67:42:
ad:97:dd:56:99:8d:16:65:e8:0d:3f:43:4b:6c:82:
f5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E6:D5:DF:12:18:30:C6:B3:62:4B:56:F4:8E:E0:96:14:14:6F:9D
X509v3 Authority Key Identifier:
keyid:B0:24:2B:7E:43:05:3C:91:3D:62:BF:5D:BB:16:82:FF:E6:B8:DF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:c5:44:55:1f:0c:db:e8:82:b2:e7:bf:1e:cd:31:0d:f2:8e:
a4:70:b8:57:e8:5c:3b:de:8f:d0:fb:a6:80:a4:69:f8:e8:9d:
09:60:a2:db:48:7b:f7:f1:7e:26:c3:d1:46:ec:bf:75:b8:fa:
5a:00:6f:c1:eb:da:54:dc:ba:b9:74:51:66:41:46:2d:f7:99:
87:f1:b0:6a:09:1b:12:51:50:81:77:84:49:b5:71:66:98:7c:
95:0a:51:05:93:b4:fb:18:a8:dc:66:8a:07:ff:3d:a9:dc:d1:
56:47:06:3c:d7:45:6b:e8:28:d1:9f:4f:de:18:32:d7:1c:4e:
86:a1:3f:03:27:f5:ea:e6:40:36:b7:2c:80:4e:ad:a7:e3:af:
7c:e7:15:ab:99:9c:12:01:ec:a8:ae:e6:5c:f1:f4:e5:09:be:
14:43:b0:84:52:d8:05:14:40:ac:21:01:e9:92:bc:92:53:45:
8c:ba:33:d9:a4:ce:b3:de:a9:19:90:cd:93:c7:15:66:3f:59:
4c:c6:dc:fd:09:3d:1e:c7:8d:18:de:c0:b6:7d:6c:c8:51:2c:
af:aa:47:d5:de:62:8f:1b:07:2c:8e:d6:42:9f:83:69:0b:99:
4b:f0:1f:fa:6e:5e:2e:c6:9a:a2:f2:00:78:2b:0b:a8:1f:f8:
79:58:18:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkvbEnoCoum8v54wMA+Qv4bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMjQyYjdlNDMwNTNjOTEzZDYyYmY1ZGJiMTY4MmZmZTZi
OGRmZTIwHhcNMjUwOTA5MTcwMDQ5WhcNMjUwOTEwMTcwMDQ5WjAzMTEwLwYDVQQD
Eyg4ZWU2ZDVkZjEyMTgzMGM2YjM2MjRiNTZmNDhlZTA5NjE0MTQ2ZjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwloOAcOrbxUA7qCJQ9Ge4etVVT7
ssdR0+O/3tR6Hs0I7rdNiUojqu2DXfgIVpOB8lhQsdyCduvnVFoK/QbjPcQNPkx8
3vkH6oHJsh+RzW1Z8gQucMVNAoaPPHgPyk6oqNNyctdnoUB8LiHCikO7A5Qg5h08
CDHdh8yBFL4E4Ah9XI3VE+t2yCjmonA9saNRWFRw8qDJ9NZcL08ub/t7jcItkHTr
ik+/glqrzOHj3J8N/0qfgJqjTtXrIUv2rP3TUmH71Obyrjg5M/jkQlNzzPpxjumF
yHOVx6yZvNsKhg4IJJAvWEEDJ5vdUvfLZ0Ktl91WmY0WZegNP0NLbIL1pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI7m1d8SGDDGs2JLVvSO4JYUFG+dMB8GA1UdIwQY
MBaAFLAkK35DBTyRPWK/XbsWgv/muN/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0NRcmZrTUZQSkU5WXI5ZHV4YUNfLWE0My1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82MzhmMjgtMDBkNS00NjNiLWIxNmMt
Zjg0NWJmYzQyZjZkLzEvc0NRcmZrTUZQSkU5WXI5ZHV4YUNfLWE0My1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS82MzhmMjgtMDBkNS00NjNiLWIxNmMtZjg0NWJmYzQyZjZk
LzEvc0NRcmZrTUZQSkU5WXI5ZHV4YUNfLWE0My1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAssVEVR8M
2+iCsue/Hs0xDfKOpHC4V+hcO96P0PumgKRp+OidCWCi20h79/F+JsPRRuy/dbj6
WgBvwevaVNy6uXRRZkFGLfeZh/GwagkbElFQgXeESbVxZph8lQpRBZO0+xio3GaK
B/89qdzRVkcGPNdFa+go0Z9P3hgy1xxOhqE/Ayf16uZANrcsgE6tp+OvfOcVq5mc
EgHsqK7mXPH05Qm+FEOwhFLYBRRArCEB6ZK8klNFjLoz2aTOs96pGZDNk8cVZj9Z
TMbc/Qk9HseNGN7Atn1syFEsr6pH1d5ijxsHLI7WQp+DaQuZS/Af+m5eLsaaovIA
eCsLqB/4eVgYNw==
-----END CERTIFICATE-----
Generated at Tue Sep 9 18:59:57 2025 by rpki-client