Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.mft
File: scIIojstTYe-k_idUyvG9EkIgZs.mft (raw, json)
Hash identifier: HoQHN3zhN2MY6XwEvpd9G7MJfsoUYEgcg1BzNB2EOKc=
Subject key identifier: 2C:07:8D:79:C5:80:2F:BC:4C:6F:2B:75:9A:BA:34:26:5E:26:B9:16
Authority key identifier: B1:C2:08:A2:3B:2D:4D:87:BE:93:F8:9D:53:2B:C6:F4:49:08:81:9B
Certificate issuer: /CN=b1c208a23b2d4d87be93f89d532bc6f44908819b
Certificate serial: 019A70DBFFAE3B5EA6E673F2CDCEEE339F6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scIIojstTYe-k_idUyvG9EkIgZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.mft
Manifest number: 0B82
Signing time: Tue 11 Nov 2025 03:00:57 +0000
Manifest this update: Tue 11 Nov 2025 03:00:57 +0000
Manifest next update: Wed 12 Nov 2025 03:00:57 +0000
Files and hashes: 1: St1eW7huW5NWmrTlCcZNOVav4YY.roa (hash: L1r59p9it1NHOb7n3iknNAhhpFyt7umgYxP2fwKVRnQ=)
2: scIIojstTYe-k_idUyvG9EkIgZs.crl (hash: YZxbxI0XcZ3y+HGqFSpb2NyoqMVWgkIEr2CfsGerNnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/scIIojstTYe-k_idUyvG9EkIgZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:ff:ae:3b:5e:a6:e6:73:f2:cd:ce:ee:33:9f:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c208a23b2d4d87be93f89d532bc6f44908819b
Validity
Not Before: Nov 11 03:00:57 2025 GMT
Not After : Nov 12 03:00:57 2025 GMT
Subject: CN=2c078d79c5802fbc4c6f2b759aba34265e26b916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:06:c7:d0:23:d1:a1:27:b9:40:74:ec:b4:fa:
c8:9e:5f:c8:02:fc:74:b5:81:56:6e:21:1c:ae:31:
42:80:d1:25:63:ae:79:fa:71:45:8d:ea:5a:d6:ba:
74:d4:55:a6:3b:99:d0:3a:41:82:53:9e:77:94:c7:
53:64:68:8d:d1:7a:6e:58:a3:9f:e9:89:c4:61:97:
58:2a:92:71:21:88:07:18:0e:21:d0:93:5c:d3:15:
f9:80:6d:ec:98:02:a6:e1:77:4b:27:36:5f:33:8d:
08:0d:b5:be:b3:f9:5b:ca:8a:ca:0f:7f:d1:8a:2b:
d8:56:4b:cf:5c:6f:63:3d:97:de:14:08:90:dd:98:
b9:5a:34:3d:9c:de:55:78:41:a8:13:66:06:c2:fc:
69:e8:9e:f6:18:df:c5:29:29:b5:fb:ce:ab:7a:dc:
2e:b8:53:2c:16:69:31:29:81:7b:7a:04:fc:f9:83:
76:70:67:28:3e:ec:62:48:87:cc:11:65:30:45:da:
87:12:cc:44:29:a4:75:d5:7f:eb:b3:52:06:23:b6:
55:30:04:5e:f4:60:37:a5:0f:43:89:20:7a:bc:ba:
49:f4:f7:7a:ee:e6:09:d1:7b:ea:a4:a7:a4:db:0a:
62:15:50:7f:7e:88:2e:c3:32:2e:2e:a0:8b:c9:86:
dd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:07:8D:79:C5:80:2F:BC:4C:6F:2B:75:9A:BA:34:26:5E:26:B9:16
X509v3 Authority Key Identifier:
keyid:B1:C2:08:A2:3B:2D:4D:87:BE:93:F8:9D:53:2B:C6:F4:49:08:81:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scIIojstTYe-k_idUyvG9EkIgZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:3b:27:fd:97:06:98:e0:e9:7a:1a:82:78:2c:f2:3d:65:40:
ab:91:bf:93:ca:b0:eb:70:57:49:8d:56:e8:6c:eb:26:14:f1:
03:a3:89:ac:c1:b1:75:51:88:c7:99:29:c9:ad:d8:88:c7:14:
4b:6b:9b:b7:b8:e5:3d:b6:28:0e:71:24:0e:ed:7d:08:54:62:
02:97:89:1c:83:e5:db:25:2a:83:3b:07:0a:f1:10:fc:d2:3b:
f1:49:3a:62:6f:62:76:6a:4e:9a:53:70:82:b3:36:aa:c3:51:
55:01:e6:3b:3a:c9:5a:4f:f0:de:28:f3:6b:21:ca:c3:b3:e1:
3c:a5:b2:22:25:53:eb:d8:97:24:4a:fb:7c:7d:e3:53:60:f8:
ae:50:5a:8a:1a:c4:16:59:70:75:76:7f:c5:5a:f8:b5:8d:c8:
76:7e:13:12:26:94:f6:d6:45:60:b6:18:1a:2d:99:4d:33:21:
bc:71:a9:57:3a:75:3e:ef:de:6d:96:6c:fb:b9:03:bc:67:4c:
eb:32:bf:98:15:bd:27:52:0b:60:e3:a6:69:b7:a5:d7:39:29:
2c:cd:8a:f7:ba:4c:7a:d5:16:cc:ba:7a:54:99:9f:bc:0d:97:
75:76:0f:97:85:5c:b5:c7:1d:71:ab:bc:08:4a:de:08:09:23:
ae:e5:2b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:06 2025 by rpki-client