Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
File: sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft (raw, json)
Hash identifier: mswpTC52DdZa3oD51sHJogZcLqs24NONYeoV6NCsAvg=
Subject key identifier: 93:6B:E5:F7:DD:4D:F4:E5:3A:58:54:53:55:B0:02:4B:A1:87:A9:CF
Authority key identifier: B0:25:BA:C1:32:E4:79:A2:8D:F3:35:73:DD:10:96:A9:B7:B7:8D:32
Certificate issuer: /CN=b025bac132e479a28df33573dd1096a9b7b78d32
Certificate serial: 0197499EFB38FBEF054228E2184E7AB858D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCW6wTLkeaKN8zVz3RCWqbe3jTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
Manifest number: 1581
Signing time: Sat 07 Jun 2025 09:00:44 +0000
Manifest this update: Sat 07 Jun 2025 09:00:44 +0000
Manifest next update: Sun 08 Jun 2025 09:00:44 +0000
Files and hashes: 1: 2nyXOUnq8HwO4oLCvfJ-Ox7H8mw.roa (hash: NuZHCaEAk+qkjfN7phn7HKdi7yOnn+ng8AEUE8vglQE=)
2: GKEiCiXD51YV54o_AXW0cf5rHVo.roa (hash: /4UzjNRUyHHeTjZCH+5v/WfPwcjPfXkUUwUC0eRZ12c=)
3: sCW6wTLkeaKN8zVz3RCWqbe3jTI.crl (hash: 2BBXCwnsVAF5ocV1H3KEWb3kfiSQgTrWakWfCJd1S/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCW6wTLkeaKN8zVz3RCWqbe3jTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9e:fb:38:fb:ef:05:42:28:e2:18:4e:7a:b8:58:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b025bac132e479a28df33573dd1096a9b7b78d32
Validity
Not Before: Jun 7 09:00:44 2025 GMT
Not After : Jun 8 09:00:44 2025 GMT
Subject: CN=936be5f7dd4df4e53a58545355b0024ba187a9cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:93:d1:a9:f5:12:ad:89:4b:ad:a7:16:fd:97:
cc:03:16:88:4f:52:9d:18:85:4d:02:e2:92:85:4a:
a1:36:59:9c:86:a9:50:68:87:3d:ba:57:82:40:c3:
f0:02:ad:31:90:87:a5:c0:59:ed:46:c3:f4:55:75:
93:27:d9:a9:64:07:1f:16:8e:c9:16:73:36:81:fc:
7e:20:4a:21:f3:6d:99:1f:ba:2b:01:2c:72:30:4a:
04:8c:66:5a:7e:7b:45:5c:c6:b9:e0:e8:08:30:16:
12:d3:d7:34:8a:5b:33:a1:0f:ba:21:74:ae:41:dc:
ab:f5:ce:a3:68:5e:0f:97:f0:48:b7:3c:70:42:62:
07:6c:13:bd:31:8d:d0:aa:53:3a:c9:8d:f7:d7:46:
45:ae:45:b5:35:8d:c5:ca:d8:14:b2:42:99:9a:22:
03:68:b5:46:6b:29:12:52:61:b6:e9:5c:92:fe:bd:
27:f4:95:f4:b8:d9:ae:8a:d2:11:b0:b7:85:9a:99:
8f:b7:16:6d:76:a8:0d:ed:3b:37:1f:f4:c4:b2:98:
a4:64:e1:0f:9f:a6:5c:3f:fd:7c:60:6d:59:d0:d9:
c4:bf:16:af:44:26:bb:d6:aa:18:4d:12:c6:14:d7:
bc:e5:6a:a9:5c:e6:a1:2e:7a:9e:f7:f2:52:e1:07:
72:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:6B:E5:F7:DD:4D:F4:E5:3A:58:54:53:55:B0:02:4B:A1:87:A9:CF
X509v3 Authority Key Identifier:
keyid:B0:25:BA:C1:32:E4:79:A2:8D:F3:35:73:DD:10:96:A9:B7:B7:8D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCW6wTLkeaKN8zVz3RCWqbe3jTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:6a:39:b3:b6:38:d3:ed:0c:85:80:15:d2:65:02:50:ad:75:
2b:ce:1a:d4:aa:60:7c:c1:a8:68:63:46:a6:54:b6:18:bc:67:
69:32:23:01:54:cc:7c:d3:33:b8:42:1e:8f:6b:e2:32:56:48:
e0:19:79:66:e3:5b:b1:8b:2b:35:a3:60:03:26:65:2a:a7:9d:
1f:57:00:f9:2a:43:47:07:0c:5f:4a:ca:b1:78:4f:1d:b2:a0:
31:86:f0:10:39:bd:1f:2e:99:26:8e:20:bc:ac:52:42:41:8f:
d5:61:bc:05:cb:d6:91:11:37:36:06:ac:6f:57:90:46:5d:2f:
81:c2:0c:9c:09:a2:6c:01:fa:8c:ab:e4:1c:1d:55:63:89:dd:
8c:77:d9:30:28:1d:4b:d3:9d:11:79:e7:8e:e8:ef:39:63:d5:
96:2a:fb:56:9d:10:2c:39:c8:07:14:3b:28:3d:10:ac:d8:ab:
86:45:67:c3:c1:d7:8c:e9:f4:26:12:f0:4c:e1:a3:a4:32:d4:
6c:61:b6:13:be:52:a5:22:af:79:28:9c:a2:be:ff:44:e4:34:
0c:ed:b8:7c:12:14:90:6a:5c:7a:90:f5:b7:00:d6:ef:8e:33:
e8:e3:85:5f:9c:e2:99:08:ba:a7:c2:bc:a3:1b:f8:dd:5d:79:
5e:03:c8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:24:41 2025 by rpki-client