Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
File: scPsU58j7gMao5asXO1CVjiEt7M.mft (raw, json)
Hash identifier: x7JEZwsq5pS+Wq+pE7joEBzVrJ9OcC5ZtxGbQIPw1XU=
Subject key identifier: 90:4D:38:D7:E1:22:2D:3A:67:D0:E1:A5:CD:83:51:11:C7:DA:EA:A1
Authority key identifier: B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
Certificate issuer: /CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Certificate serial: 019844E36959D222F76E3FF9C831ABBD108F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
Manifest number: 08BA
Signing time: Sat 26 Jul 2025 04:00:11 +0000
Manifest this update: Sat 26 Jul 2025 04:00:11 +0000
Manifest next update: Sun 27 Jul 2025 04:00:11 +0000
Files and hashes: 1: YggPTsSNi-M37lrKOeIMBOEQEh0.roa (hash: QqUu1L/3s6oQrDkvCSSy8nc3UlcW3BrRdN7rqT/pHRE=)
2: b4AGcn0hWNQHufubVLqGkpQqCJU.roa (hash: TffukrxORwRZt6LrZ4vP1Br2diZAMHQpSo83hi5snQM=)
3: scPsU58j7gMao5asXO1CVjiEt7M.crl (hash: 2DS9mpZ6m0i8fjiwQ52/LtskGa00yu1BRCvLmn6yZH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:e3:69:59:d2:22:f7:6e:3f:f9:c8:31:ab:bd:10:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Validity
Not Before: Jul 26 04:00:11 2025 GMT
Not After : Jul 27 04:00:11 2025 GMT
Subject: CN=904d38d7e1222d3a67d0e1a5cd835111c7daeaa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:86:6b:06:82:3f:86:0b:07:9d:a8:9c:92:07:
70:b4:7f:ec:03:42:93:06:e1:b4:81:99:3f:02:ff:
2f:d9:8d:88:04:1e:9e:b3:b5:cd:7d:79:71:1c:16:
66:f7:8e:49:6e:2c:0f:4c:76:34:49:8c:f4:0a:8c:
74:45:3e:2c:1b:92:4a:20:ce:97:94:52:11:62:3a:
79:2a:d4:fc:70:03:97:ff:68:e7:ee:bb:62:c2:f3:
2b:38:42:62:bf:8a:90:dd:4b:d3:19:e5:1c:4a:69:
1b:29:fa:89:3f:3e:ea:ed:95:6d:17:54:a1:56:60:
df:4a:28:fa:74:f4:40:45:35:36:58:bd:83:2a:1d:
00:0f:65:6f:36:3b:0c:bd:f2:4a:ff:08:e1:bd:7c:
f2:af:97:9f:31:c9:37:5f:a1:7d:a5:27:49:6f:29:
98:6a:bd:15:e6:92:e6:34:59:04:9a:23:b0:40:bd:
9a:85:2d:19:a7:2e:53:bc:3d:d7:ef:00:fa:dd:88:
52:2e:76:d3:f0:1d:9c:67:8c:c6:0c:9e:be:7e:35:
66:5b:c4:f0:62:66:03:03:7d:aa:08:8d:67:13:72:
59:9e:db:c4:b0:66:53:28:4c:6b:57:c9:e4:d1:49:
ed:be:88:6a:8e:b5:5a:ad:4e:08:97:21:6a:c6:7d:
27:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:4D:38:D7:E1:22:2D:3A:67:D0:E1:A5:CD:83:51:11:C7:DA:EA:A1
X509v3 Authority Key Identifier:
keyid:B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:99:ae:11:91:3b:9a:20:ac:ae:c2:f9:ff:83:67:2e:7e:e3:
05:72:6e:1f:59:45:6b:45:a4:66:97:41:86:91:d1:31:5d:1f:
c7:3b:9e:06:7f:da:7c:13:1e:be:aa:2d:b0:9e:07:24:f2:86:
10:a2:90:62:7c:37:8d:2a:54:b1:8d:d5:77:45:62:f3:1b:fd:
7c:2c:d9:11:a5:69:ed:b9:a1:65:99:fd:14:50:90:94:b2:89:
de:66:85:39:1c:65:8e:00:88:09:36:18:5a:e5:18:c9:9d:ca:
5d:6f:7d:b8:6f:77:54:73:cc:09:cc:7c:ff:3f:d7:6a:f0:e1:
d8:ed:92:b6:c4:81:2c:95:00:bb:75:d6:17:9f:13:60:91:e5:
5e:19:09:08:82:48:2d:0d:8e:1f:0a:93:cd:77:34:4d:1d:97:
d8:1b:d2:22:29:e6:46:4c:02:2f:1a:e3:0b:de:88:e5:c1:0c:
48:26:14:13:6e:2c:e3:12:97:7c:d0:1c:a5:e0:60:fb:19:f8:
1e:99:a0:6c:18:11:9a:ce:a0:a3:74:5c:ac:35:3e:a1:44:dc:
83:f8:8a:23:5a:7e:7c:fc:a6:23:f9:96:39:41:a2:07:dd:da:
4e:f5:b2:9c:80:b2:3e:9d:61:5b:31:d1:70:88:07:f8:4b:63:
95:7e:39:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:41:23 2025 by rpki-client