Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.mft
File: sCBx_ye9CehFJRchNknb9nvK1dE.mft (raw, json)
Hash identifier: +Nm4/XaFXxVPaXKRH6Df1Qe1ddyjVBQ9isiAnDiH8s4=
Subject key identifier: CF:35:81:14:D7:9A:B0:F2:42:98:D1:3A:D7:3A:89:04:C0:BC:5F:D5
Authority key identifier: B0:20:71:FF:27:BD:09:E8:45:25:17:21:36:49:DB:F6:7B:CA:D5:D1
Certificate issuer: /CN=b02071ff27bd09e8452517213649dbf67bcad5d1
Certificate serial: 019A71B925EEBA15EE21E15C82E5FEF24B30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCBx_ye9CehFJRchNknb9nvK1dE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.mft
Manifest number: 03AB
Signing time: Tue 11 Nov 2025 07:02:30 +0000
Manifest this update: Tue 11 Nov 2025 07:02:30 +0000
Manifest next update: Wed 12 Nov 2025 07:02:30 +0000
Files and hashes: 1: sCBx_ye9CehFJRchNknb9nvK1dE.crl (hash: bb3iT0emUO68yPV9Ij2hXshRq/3jBewO6kBBfJBPty0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCBx_ye9CehFJRchNknb9nvK1dE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:25:ee:ba:15:ee:21:e1:5c:82:e5:fe:f2:4b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02071ff27bd09e8452517213649dbf67bcad5d1
Validity
Not Before: Nov 11 07:02:30 2025 GMT
Not After : Nov 12 07:02:30 2025 GMT
Subject: CN=cf358114d79ab0f24298d13ad73a8904c0bc5fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:70:38:6e:4b:b8:ec:80:0a:9a:82:61:7e:3a:
66:21:ce:d4:fd:2f:52:70:c6:05:81:ca:65:e3:28:
fe:4f:3c:bd:d7:e5:cc:3a:bf:a4:27:a9:d1:35:31:
91:88:2e:1d:eb:b4:1e:70:a5:55:16:ab:04:60:24:
e1:d2:16:3b:14:58:e3:11:f6:3f:11:a4:39:58:da:
a2:10:8d:64:59:a1:3b:22:65:01:22:7a:f5:86:8f:
64:0c:b3:40:7a:23:e0:3a:2e:50:90:8d:c5:98:79:
e7:2f:07:73:7d:aa:f1:10:65:2b:30:e5:19:0f:8a:
1c:1c:c0:d5:97:66:d8:f9:64:9b:3b:a9:d7:dd:ca:
08:fd:92:87:13:9c:72:53:8f:3c:1c:88:a5:00:2f:
c3:82:99:ee:40:d4:e0:96:f9:f4:ff:16:e9:da:17:
8e:82:b7:45:c8:b3:4f:c7:93:32:73:f7:d2:3e:38:
86:e6:26:62:2c:14:0c:b1:81:96:e5:5a:50:41:c6:
89:e5:3a:05:00:c4:c9:e8:75:00:46:31:5d:b2:e2:
e2:c2:c0:13:ed:d6:f3:87:dc:39:9b:af:cc:d5:0f:
9e:4c:22:a7:8a:64:bc:dd:04:9b:7a:88:52:9f:28:
29:5f:e2:e6:ff:06:ec:8a:9f:64:fc:d2:81:49:a8:
89:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:35:81:14:D7:9A:B0:F2:42:98:D1:3A:D7:3A:89:04:C0:BC:5F:D5
X509v3 Authority Key Identifier:
keyid:B0:20:71:FF:27:BD:09:E8:45:25:17:21:36:49:DB:F6:7B:CA:D5:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCBx_ye9CehFJRchNknb9nvK1dE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:e1:d9:bc:88:f8:c1:e3:e8:4d:53:d4:8b:89:78:c4:d5:9a:
e8:b9:c7:50:70:cc:0e:46:b9:46:0e:36:7a:fa:8f:b5:8b:8e:
16:bc:81:8b:ce:fa:dc:42:9d:af:b6:31:12:30:83:50:67:9c:
42:49:60:d4:4e:51:58:8e:96:d4:e4:a1:b1:95:87:3d:2d:cd:
15:d5:15:ef:67:30:8e:6a:9c:59:27:4e:92:de:61:f7:20:0e:
e1:85:98:80:e1:19:0b:4c:9e:c6:47:81:34:2d:22:3b:eb:26:
d4:7a:09:80:56:85:8c:c8:79:ec:18:37:56:e5:90:43:25:36:
73:e4:5a:e7:81:c1:87:90:4d:13:ff:c6:e9:72:01:6d:80:94:
88:b7:19:8a:31:04:a5:ee:ab:f8:9e:f4:b1:f9:f7:36:2c:b1:
e0:ee:6d:6c:bc:2a:32:7c:cb:18:1f:48:87:a7:f0:b7:a5:87:
8e:85:be:78:d4:51:31:8c:66:67:1e:5f:7c:14:13:da:75:60:
f2:5c:01:d0:c0:31:88:6b:94:e5:ce:a5:4f:d4:88:dc:d7:0c:
1b:bd:fc:8c:68:d9:98:14:ca:5f:b8:c5:f9:6d:47:4e:d3:d8:
88:8c:be:54:e1:0b:1c:dd:a1:6a:5a:14:b2:c3:0d:82:09:5e:
8d:93:75:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuSXuuhXuIeFcguX+8kswMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMjA3MWZmMjdiZDA5ZTg0NTI1MTcyMTM2NDlkYmY2N2Jj
YWQ1ZDEwHhcNMjUxMTExMDcwMjMwWhcNMjUxMTEyMDcwMjMwWjAzMTEwLwYDVQQD
EyhjZjM1ODExNGQ3OWFiMGYyNDI5OGQxM2FkNzNhODkwNGMwYmM1ZmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynA4bku47IAKmoJhfjpmIc7U/S9S
cMYFgcpl4yj+Tzy91+XMOr+kJ6nRNTGRiC4d67QecKVVFqsEYCTh0hY7FFjjEfY/
EaQ5WNqiEI1kWaE7ImUBInr1ho9kDLNAeiPgOi5QkI3FmHnnLwdzfarxEGUrMOUZ
D4ocHMDVl2bY+WSbO6nX3coI/ZKHE5xyU488HIilAC/DgpnuQNTglvn0/xbp2heO
grdFyLNPx5Myc/fSPjiG5iZiLBQMsYGW5VpQQcaJ5ToFAMTJ6HUARjFdsuLiwsAT
7dbzh9w5m6/M1Q+eTCKnimS83QSbeohSnygpX+Lm/wbsip9k/NKBSaiJvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM81gRTXmrDyQpjROtc6iQTAvF/VMB8GA1UdIwQY
MBaAFLAgcf8nvQnoRSUXITZJ2/Z7ytXRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0NCeF95ZTlDZWhGSlJjaE5rbmI5bnZLMWRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC81NjZkYmEtODE3OS00YzEzLTlkM2Yt
YmM4OTVmNzMxNjk1LzEvc0NCeF95ZTlDZWhGSlJjaE5rbmI5bnZLMWRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC81NjZkYmEtODE3OS00YzEzLTlkM2YtYmM4OTVmNzMxNjk1
LzEvc0NCeF95ZTlDZWhGSlJjaE5rbmI5bnZLMWRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjuHZvIj4
wePoTVPUi4l4xNWa6LnHUHDMDka5Rg42evqPtYuOFryBi8763EKdr7YxEjCDUGec
Qklg1E5RWI6W1OShsZWHPS3NFdUV72cwjmqcWSdOkt5h9yAO4YWYgOEZC0yexkeB
NC0iO+sm1HoJgFaFjMh57Bg3VuWQQyU2c+Ra54HBh5BNE//G6XIBbYCUiLcZijEE
pe6r+J70sfn3Niyx4O5tbLwqMnzLGB9Ih6fwt6WHjoW+eNRRMYxmZx5ffBQT2nVg
8lwB0MAxiGuU5c6lT9SI3NcMG738jGjZmBTKX7jF+W1HTtPYiIy+VOELHN2haloU
ssMNgglejZN1qg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:38:19 2025 by rpki-client