Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft
File: sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft (raw, json)
Hash identifier: KZ8h6RF/dlOu/Hud8J5/STzjaGtCBlHNOwmgWw0k3rs=
Subject key identifier: BF:5F:E5:AB:70:AD:AB:C6:94:C5:96:3D:D4:5B:78:00:88:ED:FB:22
Authority key identifier: B1:CD:C2:6D:44:EA:F8:56:54:48:1E:95:81:04:3E:14:88:77:65:B4
Certificate issuer: /CN=b1cdc26d44eaf85654481e9581043e14887765b4
Certificate serial: 0199FBB3689095ADDEBBC6B4117043FA4A62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft
Manifest number: 123D
Signing time: Sun 19 Oct 2025 09:01:02 +0000
Manifest this update: Sun 19 Oct 2025 09:01:02 +0000
Manifest next update: Mon 20 Oct 2025 09:01:02 +0000
Files and hashes: 1: 1yRED3DLRuGHiDRGq2BJfqb4Zqo.roa (hash: A0EcYSNMbodN6e0h1ex8R5EJse986btPlyr9ZhoJg/Q=)
2: H01ntKK0r8APxCOVN-CK85R5ZWE.roa (hash: oVsMYFAHfuRHFJ8dBLy1BmqZhlpZjkZZOD+7Y4uxLr4=)
3: nzP88bjh-XEZ2kCW3oiiu2uSEHc.roa (hash: Kf5r0P3IvTLCYpsr+vk6c4IGLFB/DHZsFGgImWavBWE=)
4: sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl (hash: 5QAvZE5U2QNg1V+FSTru49OekQzo3Ka62Xz/tZbK7hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 09:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:68:90:95:ad:de:bb:c6:b4:11:70:43:fa:4a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1cdc26d44eaf85654481e9581043e14887765b4
Validity
Not Before: Oct 19 09:01:02 2025 GMT
Not After : Oct 20 09:01:02 2025 GMT
Subject: CN=bf5fe5ab70adabc694c5963dd45b780088edfb22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:10:ae:b7:cd:a2:2a:5a:25:ed:4d:13:52:13:
76:d4:f3:92:d8:1b:14:26:67:77:d2:82:3f:fc:b9:
52:db:b2:90:1c:c0:fa:b8:96:ee:64:29:70:d0:83:
01:b7:35:1f:4f:20:2c:70:e4:5a:67:35:6c:c1:03:
62:e7:fe:fb:fd:73:f1:60:91:76:34:19:67:85:85:
c3:05:9c:05:83:8d:d6:7f:e2:1c:2e:23:7b:89:12:
ba:e4:12:4b:10:bf:41:0b:f5:1f:52:45:80:3e:c3:
9c:35:3f:20:3d:65:3f:28:a9:f1:5b:af:bd:3f:d6:
37:3c:37:5b:97:5d:c3:11:75:34:0d:44:79:92:c4:
11:8f:60:b8:56:92:4c:b9:b9:4a:fc:d2:92:65:b8:
1b:18:37:64:d3:b4:f2:a4:08:c0:4e:cd:a0:ff:28:
4a:f9:80:8c:a6:03:ee:fe:aa:9c:8d:31:90:ab:09:
d6:bf:33:e1:7b:9b:e2:c0:86:b3:22:e7:8c:5b:a6:
6a:16:c2:b3:22:88:23:79:46:62:7e:fa:9d:cd:de:
a1:06:10:c3:39:00:1e:1e:9e:a5:15:2f:b6:65:d0:
fe:b7:30:31:be:94:eb:53:82:22:f1:fc:18:84:d0:
0c:fb:c3:d6:0f:5f:1a:c1:55:06:e9:25:e9:93:fb:
f0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:5F:E5:AB:70:AD:AB:C6:94:C5:96:3D:D4:5B:78:00:88:ED:FB:22
X509v3 Authority Key Identifier:
keyid:B1:CD:C2:6D:44:EA:F8:56:54:48:1E:95:81:04:3E:14:88:77:65:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:e2:a9:8e:6c:53:ba:73:79:1a:2c:91:29:2b:3d:bb:56:d9:
c0:31:6f:17:00:83:fb:4c:ee:4a:0b:bd:99:78:75:1d:3e:18:
d6:b6:de:63:34:d9:2b:59:ba:52:5f:d4:43:78:fa:7e:1b:b8:
b9:ef:78:84:5b:6e:4d:8b:0a:8e:91:21:19:6e:9a:7c:b2:e0:
e3:5b:aa:16:48:60:7c:0c:9e:b4:2c:d8:de:79:2f:d6:ee:5c:
c2:4b:0f:f6:c3:6a:84:36:2b:1a:b4:fe:a5:c9:74:a1:76:dd:
2e:97:1a:97:4d:39:fe:82:86:3b:59:da:0f:08:fa:3a:b7:61:
39:f4:fb:56:9b:90:6c:c9:85:87:75:dc:8a:c5:4f:64:d2:58:
f7:2e:96:32:d3:1c:fd:96:56:ca:3a:91:11:e6:7f:83:43:be:
91:ff:f4:3c:bd:de:19:ab:ba:b7:56:b6:91:bb:85:7e:e7:e4:
28:14:e9:ca:31:8a:cd:71:05:89:5d:3d:0f:f4:a0:db:b0:b1:
d9:3b:51:4d:69:7c:ad:e4:1e:3b:f5:12:5a:48:a8:bc:44:4a:
d7:b7:5e:ff:76:cc:1a:43:f3:19:18:b7:cf:76:73:06:b9:d6:
88:57:8c:1f:ce:fd:78:9e:af:08:f5:be:0a:9a:26:01:f2:ff:
d2:b6:2d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:55:19 2025 by rpki-client