Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
File: ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft (raw, json)
Hash identifier: AbKidMsb6axOHeqtl7unwaE8a89m/9jcA0NEyCpPeHg=
Subject key identifier: 6D:95:F1:8C:42:97:9D:56:78:03:15:9C:0F:06:20:8C:79:9E:5C:C9
Authority key identifier: 49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71
Certificate issuer: /CN=49c403d43b5f38fca2119cd1409a92763edefe71
Certificate serial: 019A20D1F00FF4457D6D05D721BB64264FF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
Manifest number: 16FA
Signing time: Sun 26 Oct 2025 14:00:20 +0000
Manifest this update: Sun 26 Oct 2025 14:00:20 +0000
Manifest next update: Mon 27 Oct 2025 14:00:20 +0000
Files and hashes: 1: 6ZwG_Y60Ty5PTqTrDlKsyphblXQ.roa (hash: vR97+OeUXCCOXRpSdGW1/Y4Sp/FefDWwnMJQ9Jni4rk=)
2: BGdD8LDEAedO7LkZulNO0on6BtA.roa (hash: 5JKMac3WduBMBCnJzqk90kK6WJ4PSh8kMPbmsKHD+wc=)
3: Bs46C8G9Xvlaiic-U_vabhAJhco.roa (hash: 3sJguMlQk0GQr3vKdqIN2WvzrXMmi6x68HlsMnn5UuM=)
4: D5iZPHtIHYKSLlUoRqhHam3z4fw.roa (hash: iQxb5JVe2tNY+bNton8d20CXKpbqyN/eHLh+5EoqEaI=)
5: Rl9152Qvb_u7j8K6moXvloqlxuw.roa (hash: 7VxgCsm28hyqe3FM8bfzznGaU0K/XnvaJIfEnQlGvZI=)
6: ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl (hash: AKtfBv2B6GwY0MoUtb0v8g8zdoZjPYCLq+5hL4cF4pc=)
7: bkbeFY-foKd3saHxL2Ms4IvaWZI.roa (hash: Pb5Tubkcy9LxO6t4tf4Rf3p3iIfsYoVtUzwvSZ29zs0=)
8: h13V4d_ekYYA6uv0-jBvE7ljXgg.roa (hash: 64VEKJzZ2W6+uSgCoWExxMNGZCghiQUddh02slxkwlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:d1:f0:0f:f4:45:7d:6d:05:d7:21:bb:64:26:4f:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49c403d43b5f38fca2119cd1409a92763edefe71
Validity
Not Before: Oct 26 14:00:20 2025 GMT
Not After : Oct 27 14:00:20 2025 GMT
Subject: CN=6d95f18c42979d567803159c0f06208c799e5cc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:07:8e:45:33:1f:fb:e1:1e:55:d1:fc:14:e3:
76:86:78:5a:4b:97:49:19:6c:07:9b:f6:0a:8e:44:
25:d1:b7:db:6e:70:ad:17:53:e5:64:f5:31:4c:23:
cd:e5:25:0c:e2:b9:27:d2:13:67:a8:d9:cc:b5:04:
d0:2a:07:e0:fd:a9:f6:06:3f:ef:4c:45:5d:b5:9d:
86:1d:d8:f6:38:21:b8:05:4e:62:71:42:d5:98:c8:
82:64:90:ef:d6:6f:7d:27:27:14:42:e6:05:64:68:
be:80:95:cb:7f:be:30:47:9d:30:fa:87:93:10:7e:
01:66:07:d8:b5:16:fd:21:9d:58:4e:d7:36:95:8d:
b7:32:2c:d3:8e:2d:94:36:af:3a:9e:4d:5d:58:13:
17:10:89:5c:22:d0:1f:3c:e2:67:88:09:0c:fb:67:
9f:56:c2:5e:1a:8a:ad:f1:f6:75:75:d9:0e:9e:bc:
e7:36:77:92:f4:74:ec:bc:fe:51:ea:e3:98:e7:a8:
5d:94:af:7d:09:d1:7e:55:f5:0f:a4:76:86:cc:21:
76:66:77:bf:43:76:f4:48:94:69:2d:45:46:13:33:
04:44:9b:bb:55:8a:b0:8a:cc:66:54:52:9f:ab:dc:
f8:01:ab:be:b3:c3:84:21:a8:bd:f0:ca:82:c8:f2:
37:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:95:F1:8C:42:97:9D:56:78:03:15:9C:0F:06:20:8C:79:9E:5C:C9
X509v3 Authority Key Identifier:
keyid:49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:8a:50:14:25:56:b9:e9:12:27:c7:04:b5:75:28:d0:dc:94:
61:cb:6c:37:ca:c7:bc:06:52:2c:f9:61:02:a6:43:79:20:37:
47:25:eb:a1:06:78:88:1d:68:b8:f8:90:32:dd:d1:83:58:f4:
ff:2c:03:10:ac:59:83:09:db:0b:2f:a8:62:04:fe:a1:c9:ee:
4d:58:6c:92:78:de:04:64:83:f4:3b:7f:79:f3:fa:5e:12:c9:
71:28:65:1b:54:1d:ae:46:77:b3:9d:26:f2:77:33:28:41:32:
38:3e:92:90:f9:9b:3c:57:20:c4:93:8c:00:1d:e6:f1:05:e5:
5b:1b:20:31:09:54:31:37:58:94:ed:16:0c:8b:67:23:8d:da:
07:a5:8d:26:0d:bc:1d:e8:b7:83:7a:f2:0f:c1:77:18:02:03:
98:b7:cb:7c:2b:2b:d3:b3:db:68:57:70:bc:34:db:21:60:35:
74:86:de:64:34:2c:e4:4a:92:c6:5a:1d:a0:f1:f3:da:54:f3:
56:5f:1a:59:58:a7:41:22:d6:eb:ab:79:47:5f:1f:2a:99:bd:
55:03:fd:bf:c1:62:19:fe:54:cd:2e:6a:0c:b2:6c:4f:e6:7c:
d2:77:7b:f8:2b:70:fa:f2:16:57:52:01:4f:e1:73:83:55:ad:
46:1b:eb:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:53:57 2025 by rpki-client