Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
File: ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft (raw, json)
Hash identifier: 9hQ9k0rJnbC3rbzXxx/JYtZFDY0uxkQHuFxYNnEvBEU=
Subject key identifier: 49:0F:1E:B8:71:30:25:F7:3B:ED:43:03:2A:4C:EB:85:31:FA:E7:CE
Authority key identifier: 49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71
Certificate issuer: /CN=49c403d43b5f38fca2119cd1409a92763edefe71
Certificate serial: 0199FC214835F1F849196D596A7FD129D34D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 11:01:03 +0000
Manifest this update: Sun 19 Oct 2025 11:01:03 +0000
Manifest next update: Mon 20 Oct 2025 11:01:03 +0000
Files and hashes: 1: 6ZwG_Y60Ty5PTqTrDlKsyphblXQ.roa (hash: vR97+OeUXCCOXRpSdGW1/Y4Sp/FefDWwnMJQ9Jni4rk=)
2: BGdD8LDEAedO7LkZulNO0on6BtA.roa (hash: 5JKMac3WduBMBCnJzqk90kK6WJ4PSh8kMPbmsKHD+wc=)
3: Bs46C8G9Xvlaiic-U_vabhAJhco.roa (hash: 3sJguMlQk0GQr3vKdqIN2WvzrXMmi6x68HlsMnn5UuM=)
4: D5iZPHtIHYKSLlUoRqhHam3z4fw.roa (hash: iQxb5JVe2tNY+bNton8d20CXKpbqyN/eHLh+5EoqEaI=)
5: Rl9152Qvb_u7j8K6moXvloqlxuw.roa (hash: 7VxgCsm28hyqe3FM8bfzznGaU0K/XnvaJIfEnQlGvZI=)
6: ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl (hash: U7Odho0hgnzFe8PWSJTh/5VrcmGNg3U288nacAkqvok=)
7: bkbeFY-foKd3saHxL2Ms4IvaWZI.roa (hash: Pb5Tubkcy9LxO6t4tf4Rf3p3iIfsYoVtUzwvSZ29zs0=)
8: h13V4d_ekYYA6uv0-jBvE7ljXgg.roa (hash: 64VEKJzZ2W6+uSgCoWExxMNGZCghiQUddh02slxkwlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:48:35:f1:f8:49:19:6d:59:6a:7f:d1:29:d3:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49c403d43b5f38fca2119cd1409a92763edefe71
Validity
Not Before: Oct 19 11:01:03 2025 GMT
Not After : Oct 20 11:01:03 2025 GMT
Subject: CN=490f1eb8713025f73bed43032a4ceb8531fae7ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:26:e0:d9:a2:d2:da:6a:38:e0:48:a8:8e:64:
d7:7f:6a:dc:0c:dd:39:e5:9b:54:21:50:c4:4e:e3:
77:17:e7:bb:33:29:e5:d1:28:db:c6:98:9f:25:04:
da:88:3c:fa:be:15:fb:c8:01:2f:74:59:d0:0f:29:
60:26:e1:03:c5:48:4d:35:58:ac:dc:d6:18:a0:ed:
9f:cd:32:4c:9b:f3:5a:dc:56:1f:15:c8:42:cd:33:
02:bc:17:22:6e:82:62:47:cc:9d:61:71:d4:7f:83:
e4:ec:46:d4:24:93:35:dc:f0:1c:f7:da:16:83:c3:
ac:0c:ec:f1:ee:0e:3f:6d:a4:31:47:7a:a1:47:49:
6a:98:b4:e4:ac:40:7f:e9:58:31:a1:4d:22:57:be:
33:dd:de:13:bc:6b:fb:09:3a:fa:be:b1:bd:a0:a6:
ea:b8:f4:8e:55:20:4b:07:44:9b:59:31:d0:c5:97:
ef:07:e6:43:eb:32:d8:40:ce:20:f2:93:02:19:4d:
c1:ca:ce:cb:5c:9a:7e:44:48:8d:b8:d3:5a:18:91:
6a:77:8a:17:0d:d1:67:a8:12:c0:65:ae:29:7b:aa:
b3:b2:a8:29:6e:08:40:84:97:bb:44:66:dd:be:ac:
8e:03:b8:51:c8:2e:90:8d:62:09:93:08:96:79:15:
18:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:0F:1E:B8:71:30:25:F7:3B:ED:43:03:2A:4C:EB:85:31:FA:E7:CE
X509v3 Authority Key Identifier:
keyid:49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:59:e5:37:2a:63:2a:85:f9:8f:55:01:af:33:e7:1f:99:48:
11:b6:6f:79:41:db:49:71:08:a7:d6:6a:16:6e:52:49:61:46:
2d:e3:39:05:77:de:6e:62:a4:11:46:ed:a6:39:ba:48:76:6f:
c2:21:f0:a6:35:b4:b5:2a:28:81:6e:dd:30:fd:a4:25:22:a8:
68:c1:45:da:f8:38:21:a4:a8:03:6f:d8:e1:d0:9e:a2:e0:64:
36:48:8b:1e:a7:58:ae:3c:20:a5:a3:01:33:63:9d:b5:b0:ab:
d5:b3:32:4d:6a:ef:93:43:c1:62:6a:ca:cd:d6:eb:01:b7:70:
a1:6d:40:90:a6:81:32:cf:61:29:9f:52:c0:71:28:4e:17:e2:
3b:79:54:86:24:44:81:37:1b:2e:a5:59:9d:c7:c8:45:a4:11:
0d:7f:d6:5c:1d:a1:fe:6d:1c:14:e4:71:9b:2e:ce:4e:d5:fd:
a9:e0:9a:1f:b9:4b:f9:7f:a2:6c:9d:7d:bd:35:9b:55:c3:2f:
dc:62:db:2b:39:0c:13:43:6c:50:9b:3e:aa:4c:55:24:f5:5c:
a9:11:e3:25:51:81:b0:62:11:a9:8c:8d:74:ef:8c:ae:4f:38:
21:2e:5c:e0:78:b6:36:b6:73:30:1d:5d:8c:7b:86:57:63:13:
fd:e9:9e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:51 2025 by rpki-client