Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft
File: Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft (raw, json)
Hash identifier: KUyeT/bpNsUlCjTF2jXFLjCwuU/PAqXCi5TnCkCYf6Q=
Subject key identifier: B7:62:2A:0D:D8:E1:FC:4E:49:B6:7F:21:9D:1D:37:E3:8A:E1:2A:8F
Authority key identifier: 49:CD:9E:C8:E5:3F:8F:C2:A3:5E:91:B7:70:14:F6:A7:3D:8B:5B:3D
Certificate issuer: /CN=49cd9ec8e53f8fc2a35e91b77014f6a73d8b5b3d
Certificate serial: 019A299E4D883ED6AE733C20F380EFB8F1C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft
Manifest number: 12DF
Signing time: Tue 28 Oct 2025 07:00:31 +0000
Manifest this update: Tue 28 Oct 2025 07:00:31 +0000
Manifest next update: Wed 29 Oct 2025 07:00:31 +0000
Files and hashes: 1: NSiBzROOhgmJ9ypJm8Za0IGQ3F0.roa (hash: o2v8vxJ4hYMUAZbmBnTv+Psah74MuG6cFMK+pUBuCMg=)
2: Sc2eyOU_j8KjXpG3cBT2pz2LWz0.crl (hash: jJI+C4H71j9bRb9b5GR7Bc6NzXuIk7FjZMvsxxI8esQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:9e:4d:88:3e:d6:ae:73:3c:20:f3:80:ef:b8:f1:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49cd9ec8e53f8fc2a35e91b77014f6a73d8b5b3d
Validity
Not Before: Oct 28 07:00:31 2025 GMT
Not After : Oct 29 07:00:31 2025 GMT
Subject: CN=b7622a0dd8e1fc4e49b67f219d1d37e38ae12a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:55:a5:45:1a:ee:2d:53:d6:ee:87:23:96:9e:
86:ac:1c:3e:94:be:d3:ff:4e:9a:a0:ff:f0:0f:ee:
8e:ba:73:1a:4e:13:70:1b:81:cd:7b:c4:dd:1f:df:
50:2d:31:72:66:e6:e5:d7:77:86:59:1b:39:86:85:
b9:0d:18:10:86:30:1d:bb:1c:b9:96:41:1b:eb:97:
d8:86:f7:73:fd:af:27:b6:16:a5:ab:a7:11:f8:b8:
41:31:9b:97:31:f8:9f:b3:cd:8c:3d:7b:e3:04:ac:
eb:3c:4b:99:cc:e9:ce:b1:87:63:be:1f:0b:7c:ca:
32:5a:6b:ad:a2:ba:ea:ac:d9:e1:ca:11:32:18:53:
4a:2e:9a:f7:3d:2a:01:de:ce:cb:ea:dd:72:de:d4:
5b:26:51:e0:aa:9c:05:54:34:4f:aa:f8:d2:2e:8c:
17:7d:af:36:d1:6f:2c:53:ee:68:ed:d7:fa:08:69:
6d:87:4d:aa:34:26:f1:f9:56:e2:67:59:1b:25:01:
65:67:e1:99:0e:6f:74:00:21:59:81:5d:5b:ad:4c:
a6:f7:aa:e2:5f:4f:c7:92:87:23:1f:2f:6f:1e:0d:
68:62:66:2a:3b:fb:ea:32:f7:25:b9:86:78:0b:d7:
45:98:f6:09:b4:45:e1:a6:bd:42:8c:b6:a6:e6:ff:
de:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:62:2A:0D:D8:E1:FC:4E:49:B6:7F:21:9D:1D:37:E3:8A:E1:2A:8F
X509v3 Authority Key Identifier:
keyid:49:CD:9E:C8:E5:3F:8F:C2:A3:5E:91:B7:70:14:F6:A7:3D:8B:5B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:43:0c:ba:32:58:95:3f:11:42:72:10:15:0c:a0:33:e0:4d:
f8:3e:10:c3:4b:53:86:7a:02:87:33:db:3a:ad:5e:70:42:61:
35:72:c2:52:b6:b5:90:f5:ac:92:a4:5d:56:5c:58:60:c9:09:
98:96:ac:c0:a4:38:2b:df:b2:9a:ed:aa:c5:05:06:af:8b:33:
53:d4:54:d7:15:7f:16:8b:63:98:ca:2e:21:99:ed:0d:24:fd:
9c:f4:a7:f3:38:e8:b2:cb:fa:e0:d0:4b:68:f6:c6:2c:52:08:
79:8f:2b:7e:41:8c:b3:fe:be:2c:07:da:8f:b2:47:37:45:fe:
02:3a:15:a5:31:54:7d:5c:32:ee:6e:fb:59:a0:05:38:46:d9:
9c:96:79:01:68:70:bf:ab:bd:de:06:82:fa:e5:7b:e5:07:9c:
71:1a:10:4f:1e:ad:ad:63:42:93:d4:8e:af:10:59:20:55:2b:
e2:de:14:51:d9:8f:47:7b:ba:fe:fe:35:8e:50:d3:26:e0:b8:
38:ba:7e:ef:52:07:88:b0:59:59:d4:52:c2:d4:f8:ee:ca:79:
72:ca:f4:8c:0f:51:ed:43:c4:0e:57:09:fe:82:b6:31:07:f8:
84:55:1c:8a:bd:f7:58:83:b7:3d:11:08:26:67:4b:91:65:08:
e8:2f:23:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 10:52:23 2025 by rpki-client