Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
File: sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft (raw, json)
Hash identifier: SKYdqnNXuG77jAH3R2Xebdj4PKcLZQeHO5pmIfFYDZk=
Subject key identifier: 8F:86:2E:93:28:DA:16:71:44:65:69:03:40:34:61:E9:24:71:D0:53
Authority key identifier: B0:25:BA:C1:32:E4:79:A2:8D:F3:35:73:DD:10:96:A9:B7:B7:8D:32
Certificate issuer: /CN=b025bac132e479a28df33573dd1096a9b7b78d32
Certificate serial: 01984A77F3E513E974CC4B96480753FF5595
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCW6wTLkeaKN8zVz3RCWqbe3jTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
Manifest number: 1606
Signing time: Sun 27 Jul 2025 06:00:31 +0000
Manifest this update: Sun 27 Jul 2025 06:00:31 +0000
Manifest next update: Mon 28 Jul 2025 06:00:31 +0000
Files and hashes: 1: 2nyXOUnq8HwO4oLCvfJ-Ox7H8mw.roa (hash: NuZHCaEAk+qkjfN7phn7HKdi7yOnn+ng8AEUE8vglQE=)
2: GKEiCiXD51YV54o_AXW0cf5rHVo.roa (hash: /4UzjNRUyHHeTjZCH+5v/WfPwcjPfXkUUwUC0eRZ12c=)
3: sCW6wTLkeaKN8zVz3RCWqbe3jTI.crl (hash: pewIgs64TJ8FBt3QbEQo0ZB8eNL3CN2MSKmc/O7xROI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCW6wTLkeaKN8zVz3RCWqbe3jTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:f3:e5:13:e9:74:cc:4b:96:48:07:53:ff:55:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b025bac132e479a28df33573dd1096a9b7b78d32
Validity
Not Before: Jul 27 06:00:31 2025 GMT
Not After : Jul 28 06:00:31 2025 GMT
Subject: CN=8f862e9328da167144656903403461e92471d053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:17:05:1f:48:59:49:c8:a2:15:2e:cd:72:77:
72:cc:d6:b4:f6:31:11:7e:be:a9:1f:c8:6c:fa:ed:
87:19:7e:6a:ba:fb:8e:51:f6:c8:cf:ef:98:96:de:
54:02:b6:c5:c2:fa:09:f6:64:67:57:74:09:1a:9b:
44:d3:68:3f:e0:69:93:a3:5e:a8:57:fc:50:02:e6:
36:39:4b:10:0f:b6:99:28:ee:95:9a:64:71:0e:ed:
26:1a:6a:c5:65:e7:8a:75:33:c2:93:9b:fc:4e:88:
21:23:aa:fe:e8:6d:c2:cc:85:42:d6:56:76:08:8d:
24:83:1a:13:22:de:f6:62:99:86:f4:65:16:98:21:
8c:a0:47:ad:8c:d3:43:2a:a9:54:ed:99:31:5c:eb:
3f:95:61:88:82:5c:78:78:7a:1d:d9:b1:ac:f4:09:
66:37:c9:05:28:2e:d4:f9:a2:bf:5c:28:a6:5c:40:
0e:c9:7e:d5:dc:90:99:2d:b8:58:04:d5:17:56:e6:
b9:ea:48:90:b0:3e:1d:ed:c9:2a:ce:31:91:70:26:
72:17:9f:83:9b:88:fe:e1:53:fd:e9:18:8e:bf:3f:
dd:e9:20:b1:be:f6:e2:b6:a9:a1:38:bf:ec:5b:97:
ca:8c:be:5b:26:d7:e8:c6:e3:5d:2a:91:06:11:81:
73:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:86:2E:93:28:DA:16:71:44:65:69:03:40:34:61:E9:24:71:D0:53
X509v3 Authority Key Identifier:
keyid:B0:25:BA:C1:32:E4:79:A2:8D:F3:35:73:DD:10:96:A9:B7:B7:8D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCW6wTLkeaKN8zVz3RCWqbe3jTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c5:9d:38:09:e6:be:a5:19:fd:13:05:f1:08:14:2f:a6:47:
2a:79:a4:da:0e:b3:d0:3b:bb:aa:bb:83:13:bd:f9:e5:ec:70:
5e:e2:8c:df:a8:24:70:02:c1:e3:40:4f:ec:bd:d9:14:a3:a4:
f6:ec:7d:cc:56:91:a5:f7:70:b7:2e:bb:1c:3d:7f:c3:60:de:
95:6f:8b:d0:87:2a:5b:00:70:e2:5f:01:29:62:1f:65:a8:c2:
1c:e5:82:84:60:1b:a6:96:b0:35:b4:7e:5d:c4:1f:12:d4:09:
05:78:8e:94:df:9f:03:be:b3:52:2f:39:f6:67:a1:ab:fe:db:
84:4e:e5:fb:c4:81:78:9e:75:5a:1b:ec:63:58:89:f5:c9:1a:
a6:ba:ac:9a:29:d4:80:70:90:d9:f2:2c:c0:90:25:7c:a3:56:
5a:31:3c:c2:aa:99:2b:84:09:e8:e4:e6:f4:4f:92:38:a4:a6:
2e:6a:d5:d1:2f:99:93:3b:d0:d1:62:12:54:77:97:41:79:e9:
9f:05:63:bc:82:6a:c3:be:95:15:ce:50:70:a4:81:fd:a9:0a:
28:a8:f1:87:7b:00:9c:d8:31:0b:82:cb:36:5c:26:c0:45:65:
2b:00:cb:e8:ae:ba:1a:8d:50:5e:5d:96:9f:16:b3:21:4a:f6:
65:9f:cf:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:53:11 2025 by rpki-client