Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft
File: sCJf0DWnzmSnyIveca61YPNIOXQ.mft (raw, json)
Hash identifier: DRle2Ijq2Vn5KbVm9htbwxUxovFhdIRVxZCN8l9xoFM=
Subject key identifier: AB:6C:9B:E2:82:2B:7A:6F:62:AC:B5:FC:2B:00:A8:EE:C2:20:BF:53
Authority key identifier: B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74
Certificate issuer: /CN=b0225fd035a7ce64a7c88bde71aeb560f3483974
Certificate serial: 019A71B7B72A981E3494C33FA3454BE698EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft
Manifest number: 3F
Signing time: Tue 11 Nov 2025 07:00:56 +0000
Manifest this update: Tue 11 Nov 2025 07:00:56 +0000
Manifest next update: Wed 12 Nov 2025 07:00:56 +0000
Files and hashes: 1: sCJf0DWnzmSnyIveca61YPNIOXQ.crl (hash: 3grgzYVyfqQBHQXAHog1q0o8/o6LqIElBOiAe9dI2co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:b7:2a:98:1e:34:94:c3:3f:a3:45:4b:e6:98:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0225fd035a7ce64a7c88bde71aeb560f3483974
Validity
Not Before: Nov 11 07:00:56 2025 GMT
Not After : Nov 12 07:00:56 2025 GMT
Subject: CN=ab6c9be2822b7a6f62acb5fc2b00a8eec220bf53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4d:03:17:7b:8a:5b:d3:76:bb:1e:9e:a2:3e:
69:39:8e:04:c8:67:15:70:16:31:5e:ff:b2:0f:dc:
71:a2:c6:b4:4e:bf:82:64:94:be:ce:24:ed:66:f1:
0b:7e:e6:04:d1:c6:b2:60:1a:2b:14:dd:aa:cb:bd:
98:bf:36:82:55:02:65:d1:25:e2:a2:9c:22:88:06:
65:c5:2c:d3:42:41:1f:bf:ae:e5:60:cb:04:0b:f8:
48:3a:d9:4c:f0:73:e5:d2:cf:65:22:dd:46:a4:85:
a4:99:56:a3:e3:7c:33:7f:c8:28:8b:be:33:f5:3d:
ba:21:1f:72:c5:c3:66:65:44:be:da:d9:1f:16:14:
69:9f:21:00:b1:9c:c2:88:5e:70:29:a5:02:26:21:
71:2a:e6:f8:9e:b3:51:3a:51:96:5b:24:58:45:02:
95:47:f6:49:d4:54:22:39:68:fc:78:e8:a8:16:f2:
1f:28:c3:6d:5c:d2:7b:81:4d:7b:c8:43:2b:a2:14:
3e:06:c9:41:1d:61:f1:db:a9:47:a7:b3:d0:22:9c:
52:1b:4e:89:61:25:cb:b9:3b:22:cb:36:78:3c:f5:
f7:37:48:08:72:23:c9:85:4f:75:28:b0:e0:ef:73:
48:26:2c:67:2d:21:42:a1:a1:2d:91:b6:c5:e2:f9:
27:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:6C:9B:E2:82:2B:7A:6F:62:AC:B5:FC:2B:00:A8:EE:C2:20:BF:53
X509v3 Authority Key Identifier:
keyid:B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:0b:9e:45:1d:db:94:1e:50:68:a8:9c:a8:28:9b:d1:40:29:
6a:c5:56:fa:a9:57:78:fb:87:06:30:19:0f:81:6c:4a:ff:a6:
ca:57:1d:91:2d:41:d5:c6:84:d9:76:3f:6a:68:13:f6:ed:7a:
3d:ef:06:69:8a:cf:55:27:29:5c:69:cd:5b:1f:14:15:42:99:
34:7b:79:c8:6c:be:a8:2c:b1:fc:79:04:f8:0a:b1:83:47:f5:
7a:ba:19:52:8e:00:42:5d:34:16:d5:70:e5:88:95:47:e0:dd:
e7:5b:3b:a7:4d:e3:a8:a8:ae:6c:e8:96:7f:7a:a5:94:43:b5:
b4:c5:54:b5:bf:69:f3:8c:4c:91:d5:bb:2b:d4:32:e7:a5:f1:
4b:83:0b:8c:a2:f2:2d:a2:db:42:f5:71:38:16:29:68:6b:e6:
e9:c0:1f:7d:21:75:98:0e:82:09:49:b9:69:2e:2e:25:99:1d:
4c:f6:bf:7d:cb:da:67:f4:9d:f7:04:42:a7:e0:7b:96:5f:b8:
2d:f3:a2:8e:ec:d9:e5:89:24:7e:bd:34:20:fa:65:10:e1:6f:
d6:6b:4f:59:d1:02:3e:5f:8b:ec:d5:cd:16:e4:fb:43:d3:a7:
c0:81:27:2e:05:7b:ed:8a:3a:93:ab:78:ed:32:86:7d:3a:22:
fc:3c:26:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt7cqmB40lMM/o0VL5pjsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMjI1ZmQwMzVhN2NlNjRhN2M4OGJkZTcxYWViNTYwZjM0
ODM5NzQwHhcNMjUxMTExMDcwMDU2WhcNMjUxMTEyMDcwMDU2WjAzMTEwLwYDVQQD
EyhhYjZjOWJlMjgyMmI3YTZmNjJhY2I1ZmMyYjAwYThlZWMyMjBiZjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjk0DF3uKW9N2ux6eoj5pOY4EyGcV
cBYxXv+yD9xxosa0Tr+CZJS+ziTtZvELfuYE0cayYBorFN2qy72YvzaCVQJl0SXi
opwiiAZlxSzTQkEfv67lYMsEC/hIOtlM8HPl0s9lIt1GpIWkmVaj43wzf8goi74z
9T26IR9yxcNmZUS+2tkfFhRpnyEAsZzCiF5wKaUCJiFxKub4nrNROlGWWyRYRQKV
R/ZJ1FQiOWj8eOioFvIfKMNtXNJ7gU17yEMrohQ+BslBHWHx26lHp7PQIpxSG06J
YSXLuTsiyzZ4PPX3N0gIciPJhU91KLDg73NIJixnLSFCoaEtkbbF4vknGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKtsm+KCK3pvYqy1/CsAqO7CIL9TMB8GA1UdIwQY
MBaAFLAiX9A1p85kp8iL3nGutWDzSDl0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0NKZjBEV256bVNueUl2ZWNhNjFZUE5JT1hRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jNDYyNzgtZTFkMC00ZGM3LTk4Yzct
NDQzZTRiYWI3ZGU2LzEvc0NKZjBEV256bVNueUl2ZWNhNjFZUE5JT1hRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9jNDYyNzgtZTFkMC00ZGM3LTk4YzctNDQzZTRiYWI3ZGU2
LzEvc0NKZjBEV256bVNueUl2ZWNhNjFZUE5JT1hRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALQueRR3b
lB5QaKicqCib0UApasVW+qlXePuHBjAZD4FsSv+mylcdkS1B1caE2XY/amgT9u16
Pe8GaYrPVScpXGnNWx8UFUKZNHt5yGy+qCyx/HkE+Aqxg0f1eroZUo4AQl00FtVw
5YiVR+Dd51s7p03jqKiubOiWf3qllEO1tMVUtb9p84xMkdW7K9Qy56XxS4MLjKLy
LaLbQvVxOBYpaGvm6cAffSF1mA6CCUm5aS4uJZkdTPa/fcvaZ/Sd9wRCp+B7ll+4
LfOijuzZ5Ykkfr00IPplEOFv1mtPWdECPl+L7NXNFuT7Q9OnwIEnLgV77Yo6k6t4
7TKGfToi/Dwmrw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:25 2025 by rpki-client