
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft
File: Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft (raw, json)
Hash identifier: TAiYqvZKM7OrLqfu0aZri4FKaxW6H+zRL5wNQIdLVYQ=
Subject key identifier: AB:8D:39:B9:81:A8:3E:54:DB:60:C1:86:C8:43:B2:3A:93:58:EC:AD
Authority key identifier: 49:CD:9E:C8:E5:3F:8F:C2:A3:5E:91:B7:70:14:F6:A7:3D:8B:5B:3D
Certificate issuer: /CN=49cd9ec8e53f8fc2a35e91b77014f6a73d8b5b3d
Certificate serial: 0199FB462A0480E5482E343B5FB30B02B140
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft
Manifest number: 12C7
Signing time: Sun 19 Oct 2025 07:01:43 +0000
Manifest this update: Sun 19 Oct 2025 07:01:43 +0000
Manifest next update: Mon 20 Oct 2025 07:01:43 +0000
Files and hashes: 1: NSiBzROOhgmJ9ypJm8Za0IGQ3F0.roa (hash: o2v8vxJ4hYMUAZbmBnTv+Psah74MuG6cFMK+pUBuCMg=)
2: Sc2eyOU_j8KjXpG3cBT2pz2LWz0.crl (hash: Efud+4xJjJ/Fa2IZoGRyjLx7GKyaspyoT4Wlt1worLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:2a:04:80:e5:48:2e:34:3b:5f:b3:0b:02:b1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49cd9ec8e53f8fc2a35e91b77014f6a73d8b5b3d
Validity
Not Before: Oct 19 07:01:43 2025 GMT
Not After : Oct 20 07:01:43 2025 GMT
Subject: CN=ab8d39b981a83e54db60c186c843b23a9358ecad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:13:15:6f:e3:f2:3d:24:5f:6b:7a:02:41:c9:
e7:31:69:91:6c:9a:b9:6b:b9:82:76:dc:94:97:c8:
b8:54:d6:7a:51:cb:8f:a5:88:6b:1d:19:a9:54:f0:
52:e1:d1:a1:ad:ca:24:86:99:07:b2:c6:74:95:00:
72:a2:f3:19:f7:7e:01:b8:1f:ba:56:17:be:78:7d:
21:f6:9e:12:f1:db:e6:5d:38:aa:28:40:f6:f0:4e:
b8:b8:f2:3a:3b:fd:0c:de:b7:48:36:6a:ac:14:d2:
89:00:13:43:11:c4:87:43:24:cd:b3:48:52:64:a2:
a1:3a:c2:df:74:ea:20:cf:ee:10:a5:6c:c7:f3:ca:
44:86:4f:9f:d1:93:dc:91:45:82:fe:95:4e:f8:74:
a2:c6:a6:9c:05:f3:8f:d1:d5:f3:a9:e6:89:f9:6d:
4d:50:69:4a:79:bd:ea:98:67:72:53:9b:c3:29:40:
21:61:6f:ef:a2:e0:8b:17:54:83:d5:c8:75:43:ef:
a9:5a:8f:fb:4f:41:44:51:42:f5:48:ad:da:1e:3d:
de:3a:d8:e6:07:7b:26:68:17:fe:d7:c2:dc:5a:5f:
10:3f:d6:90:95:bd:d9:59:cb:1e:ec:09:cd:f8:26:
ec:52:e2:14:6a:45:11:64:a0:97:0b:93:25:63:a6:
7b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:8D:39:B9:81:A8:3E:54:DB:60:C1:86:C8:43:B2:3A:93:58:EC:AD
X509v3 Authority Key Identifier:
keyid:49:CD:9E:C8:E5:3F:8F:C2:A3:5E:91:B7:70:14:F6:A7:3D:8B:5B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ce:7b:45:78:12:a5:41:65:af:ef:0b:2e:c9:6d:ba:ec:39:
9c:a0:f1:46:91:7a:97:21:3a:0f:4a:a5:a3:54:b1:f8:f2:77:
1a:49:7d:50:7f:85:b7:69:bd:fc:c1:af:e4:bd:a9:39:a9:ee:
c7:fe:93:51:1b:da:ce:41:c1:cd:c6:bb:c0:db:c8:46:3b:e2:
5c:16:75:e5:8f:86:fb:b1:c9:72:ac:64:63:a5:3d:27:51:d8:
6b:c9:80:df:3d:a3:ae:24:75:f4:d1:6c:e6:2f:f3:64:c4:b8:
c9:00:08:dd:cb:ea:44:2a:05:49:c0:f3:82:7e:1c:16:f3:a4:
eb:78:0f:f4:ff:ea:3d:fa:15:ea:00:0e:04:08:ed:b3:39:7c:
84:76:79:08:a3:af:dd:8d:fd:38:ea:10:8e:f0:7e:8f:88:54:
0b:5e:91:a9:49:a8:21:66:9c:e2:aa:3d:57:9f:31:3c:35:09:
89:d6:85:96:59:a0:fa:4e:1f:30:71:a4:23:51:dc:90:3e:8d:
56:6e:11:3c:44:1c:86:29:88:2f:13:97:72:e8:84:a5:3d:9f:
8d:d5:ef:91:8b:76:58:2b:80:b3:e8:d6:b5:62:fa:61:60:d3:
94:4b:cf:2e:cc:43:e7:27:9a:42:14:95:89:93:76:e7:b7:62:
49:f6:24:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:56 2025 by rpki-client