Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft
File: 0kSCMx_jdh3lOpm9N8j9am-foAc.mft (raw, json)
Hash identifier: DjWbeW3oJy2MDGKyh/GDqOt2cuXhicfHHKviJ0xMDCg=
Subject key identifier: 74:E9:51:07:91:15:F2:99:63:77:40:C1:26:E6:8D:4F:FD:D8:2F:25
Authority key identifier: D2:44:82:33:1F:E3:76:1D:E5:3A:99:BD:37:C8:FD:6A:6F:9F:A0:07
Certificate issuer: /CN=d24482331fe3761de53a99bd37c8fd6a6f9fa007
Certificate serial: 01982747728DE71936535EBD514D119390CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kSCMx_jdh3lOpm9N8j9am-foAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft
Manifest number: 22
Signing time: Sun 20 Jul 2025 10:00:50 +0000
Manifest this update: Sun 20 Jul 2025 10:00:50 +0000
Manifest next update: Mon 21 Jul 2025 10:00:50 +0000
Files and hashes: 1: 0kSCMx_jdh3lOpm9N8j9am-foAc.crl (hash: gWOfT2/MTTzGcBZUyo6PN2AoCv9PIg/lcVke2xg0pGs=)
2: M95FjIFFe7FE8GSWYSZYw7JDajo.roa (hash: NrgUx/KwCI45z+00qu3mq53IxB/PSBwR22i9a5VwK5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kSCMx_jdh3lOpm9N8j9am-foAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 10:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:47:72:8d:e7:19:36:53:5e:bd:51:4d:11:93:90:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24482331fe3761de53a99bd37c8fd6a6f9fa007
Validity
Not Before: Jul 20 10:00:50 2025 GMT
Not After : Jul 21 10:00:50 2025 GMT
Subject: CN=74e951079115f299637740c126e68d4ffdd82f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fe:92:c4:00:1c:08:bf:3d:b8:c1:64:84:96:
ea:7a:61:dd:fd:25:32:09:37:3d:63:4c:93:05:7f:
2d:04:2d:4e:1f:19:bf:ee:00:6d:8b:d9:0e:5c:99:
58:3d:79:aa:a3:66:6d:24:7c:da:66:e0:bd:48:66:
08:1b:9e:03:b2:92:6a:cf:8e:18:10:2c:a7:c0:63:
33:82:38:ca:40:0a:ee:75:6f:85:e1:28:03:ab:2b:
00:b7:d0:1d:1d:94:50:08:18:e4:69:fa:6e:7e:0b:
58:bc:24:81:f2:af:d5:8b:86:e2:de:f8:cf:2f:37:
33:f3:fd:0c:30:a1:bd:b8:fe:0f:d9:88:0a:f0:a6:
2b:4d:55:46:a4:78:e2:63:51:da:27:ec:a9:a1:08:
a5:18:77:85:50:8d:c9:5b:60:4c:c7:b0:ed:c7:3c:
8b:2d:15:82:a6:36:57:d5:a1:fb:07:7f:f2:82:4f:
c5:d4:9d:75:84:e5:81:e9:73:16:6f:4f:10:62:8b:
26:22:7d:7a:a2:bd:69:30:2d:17:73:f1:11:2f:b2:
08:8d:74:ec:fb:e1:a1:fa:89:d2:f9:9e:f2:e8:76:
47:2a:ad:9b:c1:a7:58:26:5e:72:42:58:4e:02:7d:
69:8f:ca:6e:91:e8:5b:99:40:54:de:b0:cc:b1:0c:
be:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E9:51:07:91:15:F2:99:63:77:40:C1:26:E6:8D:4F:FD:D8:2F:25
X509v3 Authority Key Identifier:
keyid:D2:44:82:33:1F:E3:76:1D:E5:3A:99:BD:37:C8:FD:6A:6F:9F:A0:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kSCMx_jdh3lOpm9N8j9am-foAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:bd:ae:c6:b7:21:06:fa:a4:d3:04:bf:58:39:4f:b9:5a:e1:
1d:e6:94:b8:4c:38:34:a0:b9:99:31:5d:ac:60:ed:ad:6c:ff:
a8:05:5f:4d:7b:13:9a:9c:3b:03:a4:86:2b:9c:c6:85:46:d0:
49:21:44:55:68:2b:f6:03:61:bc:30:6a:2a:2d:19:1d:55:0d:
ec:c6:1c:bd:4a:fe:71:88:38:33:f3:b4:00:f6:3d:3a:6e:92:
3b:ea:c3:b3:84:92:e5:e2:55:36:50:56:8b:26:6b:4c:ae:1e:
16:93:83:c0:b2:63:02:88:24:de:72:ba:c8:c9:33:4d:6c:c6:
df:7f:aa:3d:21:6d:ff:c9:0c:db:2b:c6:94:73:19:18:f5:68:
8d:75:a8:08:dc:2a:93:a8:95:b0:10:e0:26:35:59:a3:fa:15:
cd:ab:a7:bf:b6:1d:73:f8:ad:74:7f:d8:9d:67:a7:c9:a3:a1:
c0:10:1e:d9:0f:c3:35:10:a5:d1:c5:e8:c9:d9:c1:4a:1c:81:
bf:bd:e0:30:b7:f3:e3:6a:4a:fb:67:8b:7b:39:40:a5:6a:eb:
2f:6a:af:f4:77:15:6c:8b:38:08:90:b9:cd:39:5f:bd:42:69:
75:48:88:18:09:4b:f6:fe:47:72:1f:08:e1:c5:f5:b5:c5:44:
d0:6b:da:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZgnR3KN5xk2U169UU0Rk5DOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNDQ4MjMzMWZlMzc2MWRlNTNhOTliZDM3YzhmZDZhNmY5
ZmEwMDcwHhcNMjUwNzIwMTAwMDUwWhcNMjUwNzIxMTAwMDUwWjAzMTEwLwYDVQQD
Eyg3NGU5NTEwNzkxMTVmMjk5NjM3NzQwYzEyNmU2OGQ0ZmZkZDgyZjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1v6SxAAcCL89uMFkhJbqemHd/SUy
CTc9Y0yTBX8tBC1OHxm/7gBti9kOXJlYPXmqo2ZtJHzaZuC9SGYIG54DspJqz44Y
ECynwGMzgjjKQArudW+F4SgDqysAt9AdHZRQCBjkafpufgtYvCSB8q/Vi4bi3vjP
Lzcz8/0MMKG9uP4P2YgK8KYrTVVGpHjiY1HaJ+ypoQilGHeFUI3JW2BMx7DtxzyL
LRWCpjZX1aH7B3/ygk/F1J11hOWB6XMWb08QYosmIn16or1pMC0Xc/ERL7IIjXTs
++Gh+onS+Z7y6HZHKq2bwadYJl5yQlhOAn1pj8pukehbmUBU3rDMsQy+wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHTpUQeRFfKZY3dAwSbmjU/92C8lMB8GA1UdIwQY
MBaAFNJEgjMf43Yd5TqZvTfI/Wpvn6AHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGtTQ014X2pkaDNsT3BtOU44ajlhbS1mb0FjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8yNWI2MWItMzdlOS00NDA4LWFjYzEt
ODdjMDNjZGQ3ZjlmLzEvMGtTQ014X2pkaDNsT3BtOU44ajlhbS1mb0FjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8yNWI2MWItMzdlOS00NDA4LWFjYzEtODdjMDNjZGQ3Zjlm
LzEvMGtTQ014X2pkaDNsT3BtOU44ajlhbS1mb0FjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN72uxrch
Bvqk0wS/WDlPuVrhHeaUuEw4NKC5mTFdrGDtrWz/qAVfTXsTmpw7A6SGK5zGhUbQ
SSFEVWgr9gNhvDBqKi0ZHVUN7MYcvUr+cYg4M/O0APY9Om6SO+rDs4SS5eJVNlBW
iyZrTK4eFpODwLJjAogk3nK6yMkzTWzG33+qPSFt/8kM2yvGlHMZGPVojXWoCNwq
k6iVsBDgJjVZo/oVzaunv7Ydc/itdH/YnWenyaOhwBAe2Q/DNRCl0cXoydnBShyB
v73gMLfz42pK+2eLezlApWrrL2qv9HcVbIs4CJC5zTlfvUJpdUiIGAlL9v5Hch8I
4cX1tcVE0GvaeA==
-----END CERTIFICATE-----
Generated at Sun Jul 20 16:24:46 2025 by rpki-client