Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/10a99c-1025-4da4-aef1-0251ae65aded/1/scl7vq9wVQohl7zw4nY0NapJcIo.mft
File: scl7vq9wVQohl7zw4nY0NapJcIo.mft (raw, json)
Hash identifier: y6CCgg/FDid9zncHJaYDdC7QAnUR1+90UD8U13lBuqY=
Subject key identifier: B7:5B:47:E4:C5:01:68:B2:A0:C4:05:F0:B0:34:4C:68:BB:05:BC:E9
Authority key identifier: B1:C9:7B:BE:AF:70:55:0A:21:97:BC:F0:E2:76:34:35:AA:49:70:8A
Certificate issuer: /CN=b1c97bbeaf70550a2197bcf0e2763435aa49708a
Certificate serial: 019A71B7BD3EC4A1076140969A00E8980AFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scl7vq9wVQohl7zw4nY0NapJcIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/10a99c-1025-4da4-aef1-0251ae65aded/1/scl7vq9wVQohl7zw4nY0NapJcIo.mft
Manifest number: 98
Signing time: Tue 11 Nov 2025 07:00:58 +0000
Manifest this update: Tue 11 Nov 2025 07:00:58 +0000
Manifest next update: Wed 12 Nov 2025 07:00:58 +0000
Files and hashes: 1: scl7vq9wVQohl7zw4nY0NapJcIo.crl (hash: nbcS+nQtUklQsXM+PlmLYXBcpTk/A61M7ET5bTzqEBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/10a99c-1025-4da4-aef1-0251ae65aded/1/scl7vq9wVQohl7zw4nY0NapJcIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/10a99c-1025-4da4-aef1-0251ae65aded/1/scl7vq9wVQohl7zw4nY0NapJcIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/scl7vq9wVQohl7zw4nY0NapJcIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:bd:3e:c4:a1:07:61:40:96:9a:00:e8:98:0a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c97bbeaf70550a2197bcf0e2763435aa49708a
Validity
Not Before: Nov 11 07:00:58 2025 GMT
Not After : Nov 12 07:00:58 2025 GMT
Subject: CN=b75b47e4c50168b2a0c405f0b0344c68bb05bce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6b:74:19:61:62:28:c0:19:fa:a7:c5:40:26:
a8:de:d7:ab:51:57:69:e2:0a:ba:d3:3a:56:66:8f:
53:6b:25:a4:af:a8:1d:65:d1:09:93:68:f7:fa:a7:
31:68:c0:d6:a9:db:09:97:d7:ae:a8:33:8a:36:61:
50:d2:c7:54:66:ab:f7:e9:a0:14:61:07:06:a8:e2:
6e:19:9b:17:03:1a:84:58:ed:a4:5f:de:e4:86:0e:
9b:b4:ec:3a:76:e6:b8:b5:9e:85:9c:f7:f6:5e:18:
21:ca:cc:c1:b2:03:43:92:84:c8:93:4d:e2:ef:a6:
ec:f1:a3:f3:35:db:39:c9:36:45:4b:7e:53:34:a2:
ae:9b:cd:47:be:1e:a6:0b:29:48:29:bb:77:c7:59:
29:b0:15:c5:0d:04:5f:59:c4:97:f4:ce:fc:65:bb:
54:e0:d8:b5:8a:b0:de:62:f9:3c:d3:63:c9:f8:92:
30:c3:85:09:da:d0:5e:d8:77:5e:df:f3:bb:61:8d:
24:39:bd:ee:08:9a:0b:6d:db:4a:10:9d:fa:45:4b:
5f:f2:f4:c9:13:ab:91:14:9a:4b:03:67:4c:37:ec:
eb:95:26:09:ea:2d:f2:4c:05:40:55:f9:a2:d8:53:
97:fd:4f:97:23:a5:64:7a:6b:66:a2:2b:eb:89:f3:
49:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:5B:47:E4:C5:01:68:B2:A0:C4:05:F0:B0:34:4C:68:BB:05:BC:E9
X509v3 Authority Key Identifier:
keyid:B1:C9:7B:BE:AF:70:55:0A:21:97:BC:F0:E2:76:34:35:AA:49:70:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scl7vq9wVQohl7zw4nY0NapJcIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/10a99c-1025-4da4-aef1-0251ae65aded/1/scl7vq9wVQohl7zw4nY0NapJcIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/10a99c-1025-4da4-aef1-0251ae65aded/1/scl7vq9wVQohl7zw4nY0NapJcIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:82:77:87:b8:1a:7a:5a:40:9f:00:1e:87:65:fa:d9:f3:2e:
7c:0b:16:2d:f1:ca:d4:18:21:6d:e2:a2:1a:17:96:c1:b0:97:
4b:31:6b:52:db:c0:d7:5e:29:27:ad:06:69:04:27:aa:0f:5c:
9d:f6:86:a2:8a:49:ab:d8:1c:df:f0:f8:7c:d2:82:f7:61:f8:
54:ec:fc:20:94:66:31:2b:28:1f:11:7e:84:6f:59:1e:24:f1:
ac:cb:00:e6:e3:b7:0b:2e:ed:d7:05:aa:13:1c:30:87:19:77:
af:ec:08:2f:35:86:f8:f2:05:12:7e:88:9b:9e:3d:5f:c2:94:
2d:09:da:ca:da:ca:4d:3c:bb:4a:52:f9:fb:a4:66:d8:72:4b:
70:d7:cb:f5:3c:a5:38:3d:65:24:e0:9e:80:cd:94:f5:cd:6e:
24:d0:2a:cd:96:bf:c9:bd:33:5b:04:3b:b0:ca:2c:49:1a:f4:
f8:e7:66:45:5c:89:8c:b9:56:45:10:ae:01:cf:30:7f:fc:bd:
39:ca:be:53:9c:54:93:51:78:17:d1:72:53:fc:3d:24:c5:98:
2f:9c:fb:e9:8a:74:90:ab:45:b1:75:af:52:da:1a:32:28:4b:
eb:2c:4c:1c:0a:3d:47:4e:9e:5c:d2:d4:e8:53:d0:65:ac:82:
94:99:0d:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt70+xKEHYUCWmgDomAr9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYzk3YmJlYWY3MDU1MGEyMTk3YmNmMGUyNzYzNDM1YWE0
OTcwOGEwHhcNMjUxMTExMDcwMDU4WhcNMjUxMTEyMDcwMDU4WjAzMTEwLwYDVQQD
EyhiNzViNDdlNGM1MDE2OGIyYTBjNDA1ZjBiMDM0NGM2OGJiMDViY2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGt0GWFiKMAZ+qfFQCao3terUVdp
4gq60zpWZo9TayWkr6gdZdEJk2j3+qcxaMDWqdsJl9euqDOKNmFQ0sdUZqv36aAU
YQcGqOJuGZsXAxqEWO2kX97khg6btOw6dua4tZ6FnPf2XhghyszBsgNDkoTIk03i
76bs8aPzNds5yTZFS35TNKKum81Hvh6mCylIKbt3x1kpsBXFDQRfWcSX9M78ZbtU
4Ni1irDeYvk802PJ+JIww4UJ2tBe2Hde3/O7YY0kOb3uCJoLbdtKEJ36RUtf8vTJ
E6uRFJpLA2dMN+zrlSYJ6i3yTAVAVfmi2FOX/U+XI6VkemtmoivrifNJowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLdbR+TFAWiyoMQF8LA0TGi7BbzpMB8GA1UdIwQY
MBaAFLHJe76vcFUKIZe88OJ2NDWqSXCKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2NsN3ZxOXdWUW9obDd6dzRuWTBOYXBKY0lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8xMGE5OWMtMTAyNS00ZGE0LWFlZjEt
MDI1MWFlNjVhZGVkLzEvc2NsN3ZxOXdWUW9obDd6dzRuWTBOYXBKY0lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8xMGE5OWMtMTAyNS00ZGE0LWFlZjEtMDI1MWFlNjVhZGVk
LzEvc2NsN3ZxOXdWUW9obDd6dzRuWTBOYXBKY0lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc4J3h7ga
elpAnwAeh2X62fMufAsWLfHK1BghbeKiGheWwbCXSzFrUtvA114pJ60GaQQnqg9c
nfaGoopJq9gc3/D4fNKC92H4VOz8IJRmMSsoHxF+hG9ZHiTxrMsA5uO3Cy7t1wWq
Exwwhxl3r+wILzWG+PIFEn6Im549X8KULQnaytrKTTy7SlL5+6Rm2HJLcNfL9Tyl
OD1lJOCegM2U9c1uJNAqzZa/yb0zWwQ7sMosSRr0+OdmRVyJjLlWRRCuAc8wf/y9
Ocq+U5xUk1F4F9FyU/w9JMWYL5z76Yp0kKtFsXWvUtoaMihL6yxMHAo9R06eXNLU
6FPQZayClJkN6g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:29 2025 by rpki-client