Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
File: sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft (raw, json)
Hash identifier: VVzxtwRx8hmKMmoQs8UYnZQSz3S+rEjN4ktgf4Mka8s=
Subject key identifier: 90:44:96:38:11:E0:F2:7F:5B:9B:42:ED:52:FA:D3:B6:BF:6E:1A:D0
Authority key identifier: B0:25:BA:C1:32:E4:79:A2:8D:F3:35:73:DD:10:96:A9:B7:B7:8D:32
Certificate issuer: /CN=b025bac132e479a28df33573dd1096a9b7b78d32
Certificate serial: 019A72CA1AB06C626E1E08B80CD151228BDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCW6wTLkeaKN8zVz3RCWqbe3jTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
Manifest number: 1724
Signing time: Tue 11 Nov 2025 12:00:38 +0000
Manifest this update: Tue 11 Nov 2025 12:00:38 +0000
Manifest next update: Wed 12 Nov 2025 12:00:38 +0000
Files and hashes: 1: 2nyXOUnq8HwO4oLCvfJ-Ox7H8mw.roa (hash: NuZHCaEAk+qkjfN7phn7HKdi7yOnn+ng8AEUE8vglQE=)
2: GKEiCiXD51YV54o_AXW0cf5rHVo.roa (hash: /4UzjNRUyHHeTjZCH+5v/WfPwcjPfXkUUwUC0eRZ12c=)
3: sCW6wTLkeaKN8zVz3RCWqbe3jTI.crl (hash: VD/DrPerNgym1SjW5pIfWXnzozSA2ywkwNC01OvR2Zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCW6wTLkeaKN8zVz3RCWqbe3jTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:1a:b0:6c:62:6e:1e:08:b8:0c:d1:51:22:8b:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b025bac132e479a28df33573dd1096a9b7b78d32
Validity
Not Before: Nov 11 12:00:38 2025 GMT
Not After : Nov 12 12:00:38 2025 GMT
Subject: CN=9044963811e0f27f5b9b42ed52fad3b6bf6e1ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8b:78:90:b4:6d:7e:26:67:07:4d:a7:2d:8b:
43:32:6d:66:32:44:66:b6:0a:7f:95:77:7c:71:2a:
6b:bf:54:fa:b3:69:31:42:58:f2:9e:02:1e:04:15:
de:ca:4d:57:4a:61:a3:6a:9a:af:92:8a:ee:86:29:
60:dc:d8:40:9a:27:5b:2c:4e:f5:16:14:0a:4b:81:
8a:d5:a1:55:fe:4c:14:69:e5:f5:f6:52:aa:75:c8:
c3:bf:48:a0:a9:a5:00:9c:39:8f:a5:f8:7e:88:21:
31:0f:03:40:b1:9d:c3:6b:ad:70:19:95:6e:a6:80:
f8:52:96:ce:7a:23:5c:05:d4:28:46:35:d2:a5:5f:
da:5a:23:80:f0:16:46:ae:ab:21:24:84:c5:cb:2d:
d2:ca:fc:f3:a4:69:a3:ee:a7:76:43:84:32:55:b1:
fb:c2:38:7a:2b:a3:b0:24:85:00:a4:50:91:19:da:
91:21:ee:a8:d9:81:e2:fd:c1:06:33:de:2d:39:b8:
7f:bc:a2:3f:40:3b:c7:73:c4:b3:d5:51:b5:11:20:
54:cc:c1:9f:9b:fa:25:75:c8:1c:bf:1b:30:25:59:
59:bf:78:ad:77:6a:04:d6:99:17:d2:e5:97:40:fb:
a8:f3:02:e2:ba:3f:7e:ea:ac:c9:b6:ae:46:f9:a3:
34:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:44:96:38:11:E0:F2:7F:5B:9B:42:ED:52:FA:D3:B6:BF:6E:1A:D0
X509v3 Authority Key Identifier:
keyid:B0:25:BA:C1:32:E4:79:A2:8D:F3:35:73:DD:10:96:A9:B7:B7:8D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCW6wTLkeaKN8zVz3RCWqbe3jTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:e6:9d:3d:e0:fc:40:80:a0:26:9f:f8:af:dd:9c:34:86:f9:
fd:f5:6d:76:b9:e6:08:57:ec:8e:0f:c4:3c:ee:08:7e:44:57:
3e:ff:12:38:ea:d8:7f:1f:b4:79:c7:43:16:7b:2f:2f:8b:13:
26:1c:28:ec:49:62:b8:94:46:db:6e:3c:ad:13:9c:af:bb:59:
3c:df:a7:9b:91:ce:b2:ee:18:5c:d9:67:4a:6e:50:ba:0b:da:
4f:88:63:66:ee:80:62:33:00:fd:15:ac:8e:d4:40:e1:a9:72:
b4:7b:8d:c4:b0:13:4e:a0:b6:00:1b:0c:ce:b8:f9:dd:38:5b:
1d:2b:45:61:54:0d:4a:eb:73:47:f3:4d:02:95:be:30:7e:21:
1b:6d:ed:ed:f4:52:86:62:a3:bb:c8:d6:ec:98:26:eb:52:6b:
b6:18:c7:79:5d:1f:20:c1:bd:d3:ec:96:6b:72:7f:66:a4:d0:
7e:40:a0:2f:1a:01:79:bf:9e:13:c3:f0:0f:f9:ed:18:96:1b:
7a:96:64:b4:25:3c:7e:04:dc:c0:5c:05:f4:72:72:7a:25:85:
5e:14:a8:32:8f:05:4e:a2:1d:6c:aa:91:fc:0f:63:43:45:2a:
be:35:76:82:b1:c6:8e:49:9c:55:d7:50:2c:c1:0f:43:d2:dd:
a2:10:b0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:22:30 2025 by rpki-client