
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft
File: scIHU2wjS4vDrJgwEUMbp3Q51jc.mft (raw, json)
Hash identifier: EvzOOP0cRlbmZuO9N34RqcQL+nZ66fywortS1YNlpxE=
Subject key identifier: DF:07:EE:01:74:5A:4C:5B:ED:FC:C6:D2:8B:D9:09:21:40:2A:86:31
Authority key identifier: B1:C2:07:53:6C:23:4B:8B:C3:AC:98:30:11:43:1B:A7:74:39:D6:37
Certificate issuer: /CN=b1c207536c234b8bc3ac983011431ba77439d637
Certificate serial: 019768853F514001B4A39F6A3534D5083C73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scIHU2wjS4vDrJgwEUMbp3Q51jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft
Manifest number: 1D
Signing time: Fri 13 Jun 2025 09:00:52 +0000
Manifest this update: Fri 13 Jun 2025 09:00:52 +0000
Manifest next update: Sat 14 Jun 2025 09:00:52 +0000
Files and hashes: 1: scIHU2wjS4vDrJgwEUMbp3Q51jc.crl (hash: 38DfKcuEP89GCpCMoXcMYEZPTt5lplg8ZOF9UGtgRjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/scIHU2wjS4vDrJgwEUMbp3Q51jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:85:3f:51:40:01:b4:a3:9f:6a:35:34:d5:08:3c:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c207536c234b8bc3ac983011431ba77439d637
Validity
Not Before: Jun 13 09:00:52 2025 GMT
Not After : Jun 14 09:00:52 2025 GMT
Subject: CN=df07ee01745a4c5bedfcc6d28bd90921402a8631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d0:81:fc:72:9e:1f:42:39:a3:2f:1f:d3:35:
ea:cd:fa:23:4d:cd:93:14:b0:d7:50:a0:23:c6:d3:
f9:49:bb:41:09:89:ab:9a:6d:22:61:b4:48:b4:dd:
23:1e:bf:c8:d9:ac:07:23:81:75:32:7e:53:f8:3e:
ee:41:ef:a7:f3:ec:0a:ab:b0:72:87:01:fd:62:13:
68:c8:63:df:d5:f8:20:45:7c:43:4f:80:ee:ef:df:
55:ae:08:d5:9d:24:00:53:3c:4f:fa:89:c4:a1:b2:
07:26:1f:b6:a5:b0:80:b3:7a:b7:92:dc:27:1c:59:
29:db:83:b5:78:43:66:b2:24:73:ea:ed:62:8f:0b:
18:ba:2a:4e:55:02:a7:a1:b0:db:e3:76:e5:cf:ae:
fb:85:ef:0e:57:38:b1:1b:41:0a:de:59:06:b6:1e:
e0:e3:d3:30:db:99:52:cd:a3:30:3a:75:91:da:40:
be:33:31:c1:55:4b:d8:36:14:fd:94:d3:f9:bd:a7:
5b:0d:a3:5f:af:3f:07:c8:7c:14:1b:48:d6:5c:38:
25:cd:6a:f6:f8:10:ca:6e:b1:a9:ae:a5:ed:ac:03:
df:4b:bd:f0:d1:97:33:76:d7:97:0c:d1:d8:bb:6e:
9b:17:60:2f:a0:7c:cc:ea:9f:f0:4c:5d:c2:b1:6e:
43:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:07:EE:01:74:5A:4C:5B:ED:FC:C6:D2:8B:D9:09:21:40:2A:86:31
X509v3 Authority Key Identifier:
keyid:B1:C2:07:53:6C:23:4B:8B:C3:AC:98:30:11:43:1B:A7:74:39:D6:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scIHU2wjS4vDrJgwEUMbp3Q51jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:3a:cf:53:10:44:99:ef:29:6f:d8:72:72:1d:e0:91:b4:aa:
2d:6a:32:74:b0:0c:4b:88:4c:4f:23:c9:6d:41:73:9b:e0:7b:
df:7a:4e:f9:0f:ae:ce:ce:12:c3:44:85:34:86:de:ba:34:16:
be:5a:2e:86:cc:ad:d2:a9:81:4a:44:a9:f3:fa:2a:8e:77:c8:
92:2c:4d:06:df:74:1f:50:69:af:dd:b0:f8:43:4d:b5:78:62:
1a:5f:62:da:cf:ae:9b:75:49:e3:9d:f0:d1:01:bf:55:35:d6:
d2:91:7a:a4:76:15:be:7b:91:c7:b9:75:f9:f8:87:f6:10:51:
30:cd:ca:35:60:33:3b:8c:53:cc:69:04:7a:6c:35:b2:69:dc:
12:18:4e:24:11:fb:8f:d0:42:4f:c8:a5:c0:0f:17:4d:1d:1c:
3b:08:74:6e:e3:1e:25:b9:64:e1:13:95:cd:72:bd:32:36:35:
2c:47:69:b2:9f:95:72:3a:53:e8:35:e8:79:01:d9:83:d2:87:
1c:05:3f:d2:b7:14:9a:88:a3:8e:ae:90:33:87:7f:e7:ef:86:
7d:38:3e:90:00:02:31:d6:eb:2e:94:ff:50:ae:3f:78:04:28:
29:fb:24:09:88:28:bf:34:de:a2:0a:da:14:7e:3c:33:24:08:
3f:a6:db:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 16:11:52 2025 by rpki-client