Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
File: SScSTZgDp95UiDFko3bqcuPGPq8.mft (raw, json)
Hash identifier: 9VPRob0gZkgGKDI86WWaTE9e0eFAhhFC2L1WJJPB77o=
Subject key identifier: BB:DF:40:D5:27:19:CD:A4:36:3C:55:76:53:C3:15:C8:C1:37:26:FE
Authority key identifier: 49:27:12:4D:98:03:A7:DE:54:88:31:64:A3:76:EA:72:E3:C6:3E:AF
Certificate issuer: /CN=4927124d9803a7de54883164a376ea72e3c63eaf
Certificate serial: 0199FBEBC7C19314A7E7655E8D64552DCF64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 10:02:37 +0000
Manifest this update: Sun 19 Oct 2025 10:02:37 +0000
Manifest next update: Mon 20 Oct 2025 10:02:37 +0000
Files and hashes: 1: J8OgK6YIDY4_wow6LOJWl2UwPMw.roa (hash: ehaTtO6bdlhf0UUT+6tJJXKQ0CyD4JoJHUd/4QXn6/c=)
2: OJmLUcdGyKqyreRJA04sZVowZg0.roa (hash: ZPcGNQNPGXt7sqvYIqkF3ZoSuhuiF050QsXqHbGtgGo=)
3: SScSTZgDp95UiDFko3bqcuPGPq8.crl (hash: XtocvPcKnuU3VKahdMi5inMKsPcjeBp5fqTc+0dZVd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:c7:c1:93:14:a7:e7:65:5e:8d:64:55:2d:cf:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4927124d9803a7de54883164a376ea72e3c63eaf
Validity
Not Before: Oct 19 10:02:37 2025 GMT
Not After : Oct 20 10:02:37 2025 GMT
Subject: CN=bbdf40d52719cda4363c557653c315c8c13726fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d7:5e:45:04:0b:32:87:f1:2b:47:e2:75:0a:
95:5a:81:9c:61:c2:18:e6:79:74:fc:97:e8:b0:dc:
e5:af:b6:9d:46:83:40:93:f4:d8:d0:fc:26:c8:29:
74:48:46:e8:27:c5:36:fa:55:63:32:1a:67:31:1e:
85:57:0f:6f:c1:41:fd:11:e1:1a:de:53:04:f2:b1:
f5:0e:67:95:86:ca:6f:f1:e0:36:f8:ba:01:7d:a7:
13:ee:85:a1:93:61:16:2d:f9:11:60:61:e9:6d:f1:
29:93:2c:4f:75:6e:f5:8b:f2:3b:01:cc:88:3d:8c:
80:79:0f:ed:fe:17:de:a1:49:e3:f3:e1:a9:5b:36:
9d:dd:90:17:72:6a:0a:e1:a5:ab:45:6d:e4:22:3e:
52:73:1d:3b:93:a9:cb:34:74:da:14:aa:a4:f2:7d:
13:56:be:38:a7:aa:4b:4a:b9:9c:b7:4c:84:c6:69:
87:44:fd:e5:56:fb:a7:b1:53:c8:48:ff:31:af:9c:
92:0f:e3:52:a9:65:62:38:6d:b1:2d:b0:1b:2a:ab:
c9:78:8e:b3:e0:82:c5:43:10:a5:01:2e:f9:eb:99:
64:cc:0a:2e:4c:79:d6:68:4c:de:a2:86:96:eb:38:
22:a4:fb:9e:14:b3:90:55:e7:74:d9:ff:6b:dc:59:
c5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DF:40:D5:27:19:CD:A4:36:3C:55:76:53:C3:15:C8:C1:37:26:FE
X509v3 Authority Key Identifier:
keyid:49:27:12:4D:98:03:A7:DE:54:88:31:64:A3:76:EA:72:E3:C6:3E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:2c:9e:69:36:d9:34:9e:7c:00:d7:aa:6d:ef:7e:1f:7f:6c:
ac:95:c8:64:61:0f:9d:b4:9a:eb:32:8d:af:f4:97:91:8f:fa:
30:44:b4:76:48:8f:80:80:ca:1b:ad:87:9f:a3:a7:4f:c4:1c:
2b:db:d2:0a:45:48:89:87:4a:1d:c0:be:b1:62:f3:47:96:59:
10:2d:f8:e4:31:67:29:35:8a:2a:ce:ce:88:5a:7b:1f:5d:aa:
f8:e0:3d:b3:ac:b6:2f:0d:cf:33:99:25:30:d0:fc:2c:e0:28:
cc:c0:81:0e:d0:be:d5:23:5a:4d:ce:74:93:a7:8a:65:57:32:
d7:5b:ea:34:2c:a1:72:43:88:6c:5b:b7:d5:06:af:f2:51:58:
b9:22:e1:be:00:6a:04:26:46:f1:7f:33:56:f3:c5:00:0a:5f:
7f:4c:b2:25:2f:a3:62:ad:8f:59:53:73:a6:28:f4:cb:f4:dc:
5c:ce:cd:23:46:3f:b1:b4:1b:fe:80:26:89:08:2b:df:f0:91:
03:74:e2:2e:94:cb:dc:ed:3d:ed:91:2e:81:a8:2c:fc:1b:0f:
b5:e5:61:18:58:ae:a8:59:6e:0f:4c:23:d0:23:90:fc:3a:fc:
66:02:46:a3:b8:e4:52:c7:38:32:ad:eb:16:d8:4c:5d:b4:dd:
5f:ad:53:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:51 2025 by rpki-client