Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft
File: scIHU2wjS4vDrJgwEUMbp3Q51jc.mft (raw, json)
Hash identifier: F5r0GgdF7G6577OaSgVdLAzZEEOhpVf4zk1ORVh7zyo=
Subject key identifier: F2:2A:52:E5:26:40:A9:78:AF:AC:BA:DE:2F:E7:35:C1:3F:91:EC:05
Authority key identifier: B1:C2:07:53:6C:23:4B:8B:C3:AC:98:30:11:43:1B:A7:74:39:D6:37
Certificate issuer: /CN=b1c207536c234b8bc3ac983011431ba77439d637
Certificate serial: 019922C31BB20E8C22C0CBF0F6C8D63B6ECA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scIHU2wjS4vDrJgwEUMbp3Q51jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft
Manifest number: 0102
Signing time: Sun 07 Sep 2025 06:00:35 +0000
Manifest this update: Sun 07 Sep 2025 06:00:35 +0000
Manifest next update: Mon 08 Sep 2025 06:00:35 +0000
Files and hashes: 1: scIHU2wjS4vDrJgwEUMbp3Q51jc.crl (hash: DT/mJZchDhBL7VNlDWQ+HWfK4VPhCFTw2tjUoskpAbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/scIHU2wjS4vDrJgwEUMbp3Q51jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:1b:b2:0e:8c:22:c0:cb:f0:f6:c8:d6:3b:6e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c207536c234b8bc3ac983011431ba77439d637
Validity
Not Before: Sep 7 06:00:35 2025 GMT
Not After : Sep 8 06:00:35 2025 GMT
Subject: CN=f22a52e52640a978afacbade2fe735c13f91ec05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:aa:81:65:d2:c9:b4:65:b9:61:37:82:32:08:
3c:f0:c9:d0:92:95:2b:cf:c3:fe:67:59:57:d8:3e:
35:86:91:38:48:30:7f:9c:46:3e:aa:f2:9a:c6:30:
4c:c6:2b:18:88:44:0e:63:d0:69:15:89:36:81:cb:
9c:7e:35:b5:cd:80:b3:15:7e:ae:82:b6:21:c6:7e:
5d:40:35:a2:cc:74:06:52:7d:7d:7a:6e:fe:90:e2:
f6:3a:d9:89:ed:5f:c9:64:15:73:2c:68:44:35:46:
9c:67:15:74:fc:5f:34:52:8d:0d:0a:92:a3:ce:81:
5c:bc:9e:6e:29:ba:2b:85:f7:f1:a0:56:48:48:f8:
92:20:bf:fd:a6:02:2f:9a:5c:49:8e:14:59:eb:77:
fb:5d:e8:44:4e:97:53:68:e4:f3:5e:16:ba:01:e2:
95:af:3e:a4:fa:48:df:37:3f:c4:4c:df:0d:9d:7f:
82:b3:ca:ba:1e:2a:ee:6b:ab:ee:33:8c:19:39:30:
2e:b7:a3:fe:d0:a7:46:b8:9e:5b:94:b2:73:a5:ac:
01:10:6f:72:96:1a:3d:ca:0d:68:aa:ab:07:0d:a0:
b3:4a:01:a7:4a:da:83:9c:19:6a:4c:7f:a2:bf:72:
0f:b1:3e:4a:59:3e:33:da:14:93:cb:82:fe:ca:68:
a8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:2A:52:E5:26:40:A9:78:AF:AC:BA:DE:2F:E7:35:C1:3F:91:EC:05
X509v3 Authority Key Identifier:
keyid:B1:C2:07:53:6C:23:4B:8B:C3:AC:98:30:11:43:1B:A7:74:39:D6:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scIHU2wjS4vDrJgwEUMbp3Q51jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:69:34:67:a5:f1:fd:c4:9d:e1:be:6a:fa:91:05:fd:46:6a:
01:c5:06:dd:b6:31:74:ef:5e:d7:a1:70:b0:db:f4:c5:4c:85:
69:d9:ce:f5:4e:14:3d:d3:a2:fc:34:7e:52:a7:d3:1b:06:4e:
0e:db:61:30:bf:d3:d3:9c:6d:42:f4:6a:a1:d0:9f:34:8f:79:
15:70:f4:89:05:21:81:9b:f2:d6:38:80:bc:4f:fa:e9:35:f3:
69:2a:a7:02:85:96:1b:63:87:9d:fb:f9:33:a9:44:20:9b:53:
d2:df:31:99:c8:ad:8a:db:a1:c2:fe:88:42:db:ae:7e:b9:eb:
21:1b:22:1c:92:9b:14:d5:b9:38:0a:33:9b:9c:c3:22:a6:d8:
d9:7f:b6:41:3f:35:2e:1e:28:97:1d:03:ee:15:4d:c9:5e:12:
e8:17:c9:61:30:c8:e7:ed:27:75:c4:29:33:b4:21:a0:6d:b6:
e4:cb:1a:29:a9:b6:f1:28:ab:c1:22:9e:a9:d7:2b:d6:20:46:
17:0b:88:75:ec:ca:77:ed:38:8d:12:9f:88:93:e5:90:1c:1f:
97:54:4e:ca:ae:0c:72:f1:e8:87:d1:2d:2a:09:1d:05:1b:07:
7b:99:88:c1:9b:0e:3e:4a:74:b4:db:0c:47:f0:79:38:4b:2e:
5c:aa:13:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:15 2025 by rpki-client