Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.mft
File: sCBx_ye9CehFJRchNknb9nvK1dE.mft (raw, json)
Hash identifier: NmBqYx8KoESkMNR6eJZrcJn4mxMh19ZT2biSTcFtiBE=
Subject key identifier: 03:51:AD:75:23:87:E5:E4:E6:9E:A2:EB:14:94:83:7A:74:2A:30:1E
Authority key identifier: B0:20:71:FF:27:BD:09:E8:45:25:17:21:36:49:DB:F6:7B:CA:D5:D1
Certificate issuer: /CN=b02071ff27bd09e8452517213649dbf67bcad5d1
Certificate serial: 0199FFC8391B2FB3518586B75026571E6B50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCBx_ye9CehFJRchNknb9nvK1dE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.mft
Manifest number: 0370
Signing time: Mon 20 Oct 2025 04:02:15 +0000
Manifest this update: Mon 20 Oct 2025 04:02:15 +0000
Manifest next update: Tue 21 Oct 2025 04:02:15 +0000
Files and hashes: 1: sCBx_ye9CehFJRchNknb9nvK1dE.crl (hash: qr4T/AnmJMxRQO/kf0+VVA+gyeQKy4Ep7xp49B8vSmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCBx_ye9CehFJRchNknb9nvK1dE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:39:1b:2f:b3:51:85:86:b7:50:26:57:1e:6b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02071ff27bd09e8452517213649dbf67bcad5d1
Validity
Not Before: Oct 20 04:02:15 2025 GMT
Not After : Oct 21 04:02:15 2025 GMT
Subject: CN=0351ad752387e5e4e69ea2eb1494837a742a301e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:58:c2:ef:6b:ad:80:cf:f8:ec:81:df:b5:86:
b6:e5:28:41:c2:b7:a9:36:e5:be:d1:e4:b2:c3:f2:
b1:33:55:a4:fd:f5:b8:cc:5d:1a:3f:5b:ce:bb:71:
3e:1e:fb:ef:20:f7:74:36:8d:79:20:97:06:44:95:
09:1f:1f:a2:ab:12:7f:d2:57:4d:8d:cb:86:9e:9e:
43:d5:57:3c:4c:49:8f:f9:1e:ed:a1:70:a1:45:55:
23:5f:59:9b:ab:26:19:59:95:d2:2c:28:57:eb:1c:
17:1c:0c:5c:c5:a6:1c:70:da:f7:7e:3b:a8:f3:a2:
62:48:e0:4d:ed:3f:89:50:40:5f:57:c1:ba:74:7a:
23:90:bc:b7:b9:d5:c7:b8:d3:24:4f:26:e5:72:a3:
a8:30:f8:4f:c5:d0:0c:3a:ad:a8:da:16:f8:b6:74:
d8:c7:90:11:0b:6c:c4:c7:f4:63:51:45:49:71:87:
39:13:2a:5c:3a:7c:6d:65:3c:d7:95:27:71:0d:9f:
63:51:08:98:b6:b6:a8:2d:47:9d:35:90:8c:e8:8f:
65:95:0e:1b:ec:57:86:96:00:9c:fa:de:76:c9:27:
6e:e0:53:71:38:06:42:4f:28:12:4a:ad:9a:c1:3a:
1a:8c:60:90:ab:91:16:ee:ec:59:2d:cb:85:8d:ec:
40:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:51:AD:75:23:87:E5:E4:E6:9E:A2:EB:14:94:83:7A:74:2A:30:1E
X509v3 Authority Key Identifier:
keyid:B0:20:71:FF:27:BD:09:E8:45:25:17:21:36:49:DB:F6:7B:CA:D5:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCBx_ye9CehFJRchNknb9nvK1dE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:9e:25:21:96:96:73:8a:34:5f:68:d5:02:ea:c6:01:67:0d:
9c:c5:85:9c:c2:33:89:dd:92:be:e2:38:dd:17:c2:82:fa:60:
39:ba:dd:95:74:5f:17:69:47:15:96:da:c5:50:d9:4d:6e:32:
02:a7:02:8f:3a:c8:1b:0e:00:59:9d:54:83:32:6c:cf:f7:10:
cc:15:03:98:a3:b7:81:a1:38:cd:ed:83:2e:9b:93:0c:9b:aa:
5e:10:1a:90:f6:6e:13:a4:60:4e:b5:79:4e:75:f3:92:ce:7b:
96:17:91:24:dd:09:21:41:88:04:42:30:2f:fd:9d:d2:57:fe:
e4:1b:ec:6a:5a:fa:9c:08:23:4f:ca:b8:9e:0f:91:d6:b9:d0:
2d:90:68:6a:e6:8a:60:b5:0c:c8:be:41:36:bb:0e:0d:36:44:
be:53:87:8f:7b:05:fa:0a:49:eb:3f:97:39:e9:21:03:ef:0f:
37:bf:c1:7f:02:b0:13:a8:db:6d:9d:cd:8c:f9:7c:a8:0f:68:
ba:fe:2f:80:a2:c8:cf:5d:1e:e2:95:db:62:a4:a2:59:ca:cb:
4c:f1:17:88:2f:67:78:d3:82:f8:4d:63:55:21:ed:59:be:97:
f6:fa:ee:2c:f0:6c:6e:90:df:99:b2:55:e8:c3:aa:b9:9e:86:
17:47:29:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:07:17 2025 by rpki-client