Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
File: scPsU58j7gMao5asXO1CVjiEt7M.mft (raw, json)
Hash identifier: j9C5FHAPcR4Yl3NYH7V56W74M9chkEtwhh6sOBy3/vI=
Subject key identifier: 69:4A:43:8B:2C:26:6F:52:67:D7:2D:1F:3C:BE:B5:BD:37:21:3E:E5
Authority key identifier: B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
Certificate issuer: /CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Certificate serial: 0199326D15E85FD66C8F10E9E5C9488493B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
Manifest number: 0935
Signing time: Wed 10 Sep 2025 07:00:33 +0000
Manifest this update: Wed 10 Sep 2025 07:00:33 +0000
Manifest next update: Thu 11 Sep 2025 07:00:33 +0000
Files and hashes: 1: YggPTsSNi-M37lrKOeIMBOEQEh0.roa (hash: QqUu1L/3s6oQrDkvCSSy8nc3UlcW3BrRdN7rqT/pHRE=)
2: b4AGcn0hWNQHufubVLqGkpQqCJU.roa (hash: TffukrxORwRZt6LrZ4vP1Br2diZAMHQpSo83hi5snQM=)
3: scPsU58j7gMao5asXO1CVjiEt7M.crl (hash: aiykTCIadxDXiSRPYv+ApI1TTmuy6QRUsAYW4D2nYOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 07:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:6d:15:e8:5f:d6:6c:8f:10:e9:e5:c9:48:84:93:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Validity
Not Before: Sep 10 07:00:33 2025 GMT
Not After : Sep 11 07:00:33 2025 GMT
Subject: CN=694a438b2c266f5267d72d1f3cbeb5bd37213ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:70:05:2a:19:58:54:a1:d4:ee:ff:84:76:cb:
62:b9:c9:b5:c5:97:fa:74:0f:b3:e9:51:d9:fb:a1:
b9:f6:e9:1f:be:14:5d:9f:a5:7c:0f:b4:b0:56:36:
9b:fa:7a:28:d9:16:ac:51:a8:b7:b8:d5:d9:bd:2d:
26:31:da:7f:62:95:4c:41:15:ea:0d:ab:2b:80:d0:
ae:6c:3e:fe:76:74:5f:aa:7c:5c:03:08:d6:d8:67:
02:05:01:eb:c7:dd:fb:6a:d0:1b:f4:57:d1:5c:7d:
53:5f:71:41:a1:99:e7:0b:20:b3:63:b4:c8:78:d2:
3d:ea:45:e8:ab:54:3e:7c:7d:75:12:6a:82:b2:ce:
ea:9d:ca:21:8e:c8:77:22:8d:e4:02:03:1b:9d:f5:
3b:fe:13:d4:86:09:ff:c7:47:96:3c:22:83:1d:ec:
80:71:a1:50:f0:db:d9:2d:cf:86:e7:b7:f6:b5:e6:
ec:4b:a9:9c:9d:4c:86:d7:e6:1d:89:2e:68:4c:5d:
73:d4:01:44:1c:01:d1:30:10:fd:3e:df:93:dd:a6:
f7:9f:5e:9e:e5:6e:aa:39:9f:3d:ef:43:59:9a:e3:
10:ea:e4:10:a7:73:a7:84:ee:f0:54:af:b4:b4:20:
3e:6f:5c:16:85:a9:c6:0d:48:4b:67:8f:3c:a8:42:
c0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:4A:43:8B:2C:26:6F:52:67:D7:2D:1F:3C:BE:B5:BD:37:21:3E:E5
X509v3 Authority Key Identifier:
keyid:B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:9b:52:60:f5:06:6e:31:96:2a:b0:25:63:41:88:f1:6c:1c:
b4:fb:71:9a:d6:a4:a7:3d:9b:28:17:71:ad:36:7e:4d:b2:95:
f0:c8:d7:c9:18:b5:73:c8:a4:ef:2b:e9:c7:33:a9:be:da:a9:
6a:00:c8:ba:29:01:06:c9:8f:72:01:8b:38:a8:46:89:34:95:
25:72:f6:7f:de:76:d3:82:70:77:43:8b:d8:25:83:5a:0f:95:
87:e7:a0:4c:bb:8c:66:87:3b:aa:67:0b:bb:3e:99:11:1e:06:
59:d9:26:ed:fd:40:24:3e:63:23:82:96:5a:7b:85:89:96:2c:
19:29:16:3f:ef:48:8b:6b:09:28:0f:8e:03:54:68:ee:b3:0b:
20:92:5c:44:8a:34:24:94:6b:f3:72:98:d2:2d:5d:b2:d5:7b:
6e:5a:66:d8:2c:25:54:d1:d1:74:dc:66:88:45:c5:f7:54:32:
2f:c9:15:95:e2:1e:5b:e2:42:1d:14:d3:c9:ea:4e:5a:11:35:
71:e6:ae:70:5a:9b:24:f3:4a:55:69:33:64:bc:3d:38:ea:8c:
36:31:bb:34:58:51:8a:ec:2b:52:93:20:2f:d2:b1:38:ea:26:
9b:1e:f6:b7:5d:2a:71:cc:d5:2a:f8:c0:ab:0d:4c:92:a4:04:
45:4c:bf:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 13:30:17 2025 by rpki-client