
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a57a63-a6b4-4165-9e5e-9c2d044dd4af/1/ScKchYIxItOsfH9IBdWyQocNLeI.mft
File: ScKchYIxItOsfH9IBdWyQocNLeI.mft (raw, json)
Hash identifier: eVBlQLKp3Vq+Zi5AkvAvNg4SfflpO4BswrBtQTeF/Qk=
Subject key identifier: 39:47:F3:55:A4:F4:BA:96:83:EC:00:F9:76:EE:4E:25:1B:12:E1:B4
Authority key identifier: 49:C2:9C:85:82:31:22:D3:AC:7C:7F:48:05:D5:B2:42:87:0D:2D:E2
Certificate issuer: /CN=49c29c85823122d3ac7c7f4805d5b242870d2de2
Certificate serial: 0199FBB370B0A932EC6CC65DBC39D51ED6DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ScKchYIxItOsfH9IBdWyQocNLeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a57a63-a6b4-4165-9e5e-9c2d044dd4af/1/ScKchYIxItOsfH9IBdWyQocNLeI.mft
Manifest number: 1477
Signing time: Sun 19 Oct 2025 09:01:04 +0000
Manifest this update: Sun 19 Oct 2025 09:01:04 +0000
Manifest next update: Mon 20 Oct 2025 09:01:04 +0000
Files and hashes: 1: ScKchYIxItOsfH9IBdWyQocNLeI.crl (hash: 6OrmFC9Crnud45Zl3HdDVjjX+NTvYhjGuxOtfJRptGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a57a63-a6b4-4165-9e5e-9c2d044dd4af/1/ScKchYIxItOsfH9IBdWyQocNLeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a57a63-a6b4-4165-9e5e-9c2d044dd4af/1/ScKchYIxItOsfH9IBdWyQocNLeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ScKchYIxItOsfH9IBdWyQocNLeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:70:b0:a9:32:ec:6c:c6:5d:bc:39:d5:1e:d6:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49c29c85823122d3ac7c7f4805d5b242870d2de2
Validity
Not Before: Oct 19 09:01:04 2025 GMT
Not After : Oct 20 09:01:04 2025 GMT
Subject: CN=3947f355a4f4ba9683ec00f976ee4e251b12e1b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f3:f5:83:c5:eb:7f:85:9b:2e:94:4e:8b:1f:
36:6d:fe:81:18:6a:07:56:2b:79:4d:83:23:19:5c:
67:d3:b3:b9:7d:83:76:8f:d2:48:13:fe:61:9e:4c:
d7:5e:40:f4:65:b3:cc:31:f4:8a:c8:06:ba:f9:ba:
d3:27:57:6d:0e:b6:76:03:6b:b2:b3:72:9c:25:41:
d6:bc:36:5f:9f:99:c1:ae:ac:c2:07:1c:f0:80:6e:
42:4b:93:9c:cd:10:7d:a1:24:a0:64:ab:55:7a:4f:
48:c2:21:94:2e:63:1f:c6:65:bc:8b:44:23:21:4b:
9c:4d:1e:33:ef:40:47:fc:2b:cf:0d:8e:77:8f:02:
ab:fd:3c:64:70:57:60:1c:58:59:75:f4:e1:4e:79:
e1:b6:af:ee:b5:0f:c1:93:3f:07:aa:81:93:bf:7c:
93:1f:78:f9:0b:2d:4e:ba:96:3b:62:81:85:28:a0:
2b:44:38:1c:d3:cb:f9:17:f3:d9:f8:0e:9f:7f:ed:
d6:2c:b4:7b:6e:eb:5b:c0:2f:80:e8:b7:8c:35:c8:
a9:5a:fc:ad:88:f5:6d:42:fc:b1:22:fe:d5:fb:b2:
71:45:24:d4:48:64:db:3e:69:f4:81:1c:9d:14:e8:
85:98:2f:fb:96:ed:ee:d9:d2:2c:62:c9:9b:b9:a1:
0f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:47:F3:55:A4:F4:BA:96:83:EC:00:F9:76:EE:4E:25:1B:12:E1:B4
X509v3 Authority Key Identifier:
keyid:49:C2:9C:85:82:31:22:D3:AC:7C:7F:48:05:D5:B2:42:87:0D:2D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ScKchYIxItOsfH9IBdWyQocNLeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a57a63-a6b4-4165-9e5e-9c2d044dd4af/1/ScKchYIxItOsfH9IBdWyQocNLeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a57a63-a6b4-4165-9e5e-9c2d044dd4af/1/ScKchYIxItOsfH9IBdWyQocNLeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:6b:cb:60:3b:86:d6:f3:6d:c2:27:a4:09:39:e4:11:b4:28:
7f:6f:c1:30:9d:ef:4b:0c:0e:d5:b9:61:1b:95:9c:9d:11:39:
51:27:5c:61:ba:34:48:bf:e3:e3:36:92:0a:16:3a:f5:22:1d:
c7:0a:28:67:08:94:64:19:be:46:dd:ec:e5:b5:cd:6c:95:c4:
a8:ca:67:24:a6:e9:78:83:9f:29:46:df:91:ac:64:2b:ab:d1:
90:79:20:82:a5:4a:87:94:3e:dc:4f:ec:4a:46:1f:59:aa:02:
cb:e0:da:8d:6f:ef:e4:67:80:48:1a:84:03:17:69:74:49:d7:
82:79:74:dd:00:59:af:a0:ed:9f:b0:92:3b:0d:ae:c0:70:01:
62:d1:be:07:32:57:2f:c1:60:e2:93:b0:18:78:71:6f:b4:2a:
a2:ba:6c:78:c3:db:bc:22:54:dd:43:34:f9:04:de:b5:ad:cc:
b5:c3:e0:ef:15:21:fb:bf:e1:dc:a7:61:67:d6:ad:00:ab:53:
c0:87:a8:a9:b6:c8:e9:98:c9:a8:1b:e1:22:f0:da:bf:85:68:
2c:9b:47:e2:23:9d:4e:9c:f1:7b:6d:a1:20:b9:9e:1e:fb:b9:
03:4a:27:25:38:cf:7f:91:ed:ef:40:8a:46:ff:54:a3:9d:ce:
50:70:95:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:27 2025 by rpki-client