
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
File: sCQrfkMFPJE9Yr9duxaC_-a43-I.mft (raw, json)
Hash identifier: 5kBAn+YZEqAD9Fgzox/lSLoPB1In3O1399cUHCsjfuc=
Subject key identifier: AA:BF:5A:B9:8F:27:2D:60:D2:18:F7:19:8D:E7:10:FA:D8:89:AD:D9
Authority key identifier: B0:24:2B:7E:43:05:3C:91:3D:62:BF:5D:BB:16:82:FF:E6:B8:DF:E2
Certificate issuer: /CN=b0242b7e43053c913d62bf5dbb1682ffe6b8dfe2
Certificate serial: 0199FC2174A34B13F54FDE3F6BCD0AABE08B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
Manifest number: 1048
Signing time: Sun 19 Oct 2025 11:01:14 +0000
Manifest this update: Sun 19 Oct 2025 11:01:14 +0000
Manifest next update: Mon 20 Oct 2025 11:01:14 +0000
Files and hashes: 1: VXSaoq70xTeN6W3C76eUA8OC5cU.roa (hash: vEwflplyRjS2mkClV+Bpny4Bw/QU3HBBti723DFTvj4=)
2: sCQrfkMFPJE9Yr9duxaC_-a43-I.crl (hash: fXWLcJtqswR25dqVWzvR15uxH0lPBOEzXl0LsA6apkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:74:a3:4b:13:f5:4f:de:3f:6b:cd:0a:ab:e0:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0242b7e43053c913d62bf5dbb1682ffe6b8dfe2
Validity
Not Before: Oct 19 11:01:14 2025 GMT
Not After : Oct 20 11:01:14 2025 GMT
Subject: CN=aabf5ab98f272d60d218f7198de710fad889add9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8e:da:b6:14:72:7d:33:33:24:d8:da:96:0e:
1a:53:34:99:63:6c:67:56:b8:38:13:03:57:39:de:
9e:85:68:10:b1:07:98:a2:90:f0:6b:0f:ea:7e:f1:
b2:4c:d4:00:d8:97:cf:c0:0c:26:43:39:82:d0:af:
6e:19:ac:3d:b0:85:d3:ff:0f:8c:fe:6f:73:e1:de:
87:2d:2e:83:ce:73:9e:80:fc:21:c6:72:33:d8:d8:
29:da:ce:2f:4a:ab:46:04:60:29:c0:e9:88:04:a4:
fa:a1:0f:cb:6f:93:1c:e8:7d:7b:1e:2a:55:fa:a7:
00:a5:54:88:85:c7:35:97:2b:3a:88:60:89:38:6f:
27:49:7e:36:7f:b0:12:48:5e:da:30:f7:c7:5b:d1:
ee:d1:da:ef:0c:b3:6a:e1:94:8b:5b:9b:32:7b:78:
76:39:e2:47:43:d1:40:9b:c4:7c:1f:51:b4:47:96:
2c:02:a8:36:c2:50:fa:96:de:49:f9:be:bd:cc:c5:
4d:c4:ed:7d:8e:cf:7a:10:89:8c:73:54:9d:a3:e0:
60:f3:d5:40:0f:70:a3:cd:ef:b5:1f:02:c4:38:76:
f3:30:93:ab:5c:96:7c:a9:53:c1:a9:a1:6c:8e:0f:
19:a5:90:f0:ca:d2:90:5f:e0:c9:6d:8b:d0:ba:f8:
ed:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BF:5A:B9:8F:27:2D:60:D2:18:F7:19:8D:E7:10:FA:D8:89:AD:D9
X509v3 Authority Key Identifier:
keyid:B0:24:2B:7E:43:05:3C:91:3D:62:BF:5D:BB:16:82:FF:E6:B8:DF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:42:67:e5:9c:80:18:eb:76:7d:df:e3:d7:ff:56:6d:48:82:
d7:62:f2:75:98:a7:72:54:57:24:5f:53:4f:1f:f6:1a:de:d1:
7f:db:c7:d6:2e:2d:c4:3b:d4:42:7b:48:ca:c1:b0:a0:0d:5e:
65:12:c6:e8:54:e6:43:a5:51:bc:2c:76:90:af:7e:d6:53:40:
c2:e4:50:9e:91:a8:f5:91:65:cd:4d:4e:a0:bd:de:d5:db:80:
f2:99:3f:b1:d7:3f:ae:07:3b:f2:c6:14:62:7a:1a:6a:e8:f9:
d3:21:3f:9f:86:c2:89:03:38:48:5f:d3:2a:0e:08:0c:62:ff:
d4:a3:63:a7:d9:51:92:3f:dc:ff:fc:f2:13:16:9c:49:0e:10:
77:ac:d7:d9:56:1f:84:9e:56:da:d2:02:50:c1:2e:91:17:40:
4c:86:f4:ce:a7:5c:ea:95:04:37:6e:7a:79:61:fc:6f:43:a8:
9d:9d:40:f0:a4:23:13:ce:73:63:38:64:49:f5:47:26:c0:0e:
f5:12:a2:5c:fe:c9:96:ba:1c:76:37:4a:b2:f8:99:00:8d:90:
3b:61:f8:55:05:c2:d2:48:96:13:6c:5b:c2:ea:f1:54:61:8f:
c9:f0:5f:78:92:84:40:00:db:05:af:19:0a:08:df:a5:72:42:
b5:e3:7a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:11:29 2025 by rpki-client