Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
File: scPsU58j7gMao5asXO1CVjiEt7M.mft (raw, json)
Hash identifier: 830VCHt+shA/zl6elbLVKR2g0av9GjOlV8KOvKhDqlM=
Subject key identifier: B1:DF:2E:02:FD:66:CB:A3:5F:9C:9F:57:9A:BB:F5:2E:7D:37:FE:28
Authority key identifier: B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
Certificate issuer: /CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Certificate serial: 019745F91234FA9934A5FCA3A36EA113D0E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
Manifest number: 0836
Signing time: Fri 06 Jun 2025 16:00:40 +0000
Manifest this update: Fri 06 Jun 2025 16:00:40 +0000
Manifest next update: Sat 07 Jun 2025 16:00:40 +0000
Files and hashes: 1: YggPTsSNi-M37lrKOeIMBOEQEh0.roa (hash: QqUu1L/3s6oQrDkvCSSy8nc3UlcW3BrRdN7rqT/pHRE=)
2: b4AGcn0hWNQHufubVLqGkpQqCJU.roa (hash: TffukrxORwRZt6LrZ4vP1Br2diZAMHQpSo83hi5snQM=)
3: scPsU58j7gMao5asXO1CVjiEt7M.crl (hash: jEwCjSSPErLJza03GwIHCRc4UtnhG/32ov3l5Jzbzfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f9:12:34:fa:99:34:a5:fc:a3:a3:6e:a1:13:d0:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Validity
Not Before: Jun 6 16:00:40 2025 GMT
Not After : Jun 7 16:00:40 2025 GMT
Subject: CN=b1df2e02fd66cba35f9c9f579abbf52e7d37fe28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:38:3b:ae:2b:9c:5c:ef:04:39:f0:ac:aa:66:
a3:7d:5d:f6:e9:c1:df:6c:8b:33:33:73:13:81:68:
74:31:ca:bf:70:6f:6f:92:01:8f:c0:8c:92:56:bb:
17:b0:a0:b4:a3:65:c9:b2:91:4a:51:99:2d:dc:b2:
e1:96:6c:dd:0c:c8:80:d3:d5:fb:41:b0:38:f0:22:
6b:17:73:7b:c1:f9:f0:c3:9c:33:dd:9f:2d:43:05:
69:73:d4:1c:9c:7b:34:8f:0c:87:63:6d:9b:da:3d:
33:3b:d8:c3:e7:fc:d7:c3:2a:0e:a4:59:2a:74:1f:
d2:b5:7f:9e:6e:89:bb:93:4c:12:3b:0c:00:bf:4c:
5d:2a:c7:2d:d3:6b:ca:bf:42:8a:88:99:e8:e4:44:
cb:a5:a6:c3:05:4b:0c:d9:e5:20:d7:ab:6d:d2:ba:
a5:b0:fc:6a:df:f5:d7:76:83:91:29:76:fc:35:72:
59:46:2a:2f:8e:5c:b4:7d:e1:cb:9d:d0:65:87:ce:
f7:3f:6c:51:ed:a6:73:b6:eb:44:3a:97:7f:2e:0f:
1d:8b:bd:08:2e:b6:07:0b:e7:39:88:c7:e5:d0:12:
ce:bf:54:f4:dd:6c:70:04:21:f3:9b:7d:0c:cf:20:
3c:8e:17:e8:0e:8c:58:30:1e:15:d5:ac:83:f8:f5:
e0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:DF:2E:02:FD:66:CB:A3:5F:9C:9F:57:9A:BB:F5:2E:7D:37:FE:28
X509v3 Authority Key Identifier:
keyid:B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:2e:aa:12:1e:67:1d:90:bf:54:ee:68:a0:53:8b:60:43:4d:
5f:df:4a:d7:86:af:93:00:5f:ae:8c:ec:56:9f:6e:9c:ef:9b:
f3:fd:ea:e0:b5:06:5b:eb:8e:f6:37:5e:56:4b:9e:10:8f:1a:
f6:1d:eb:fd:e6:e8:32:a3:fb:30:f7:bd:4c:0b:c3:54:a5:5e:
ce:4a:c7:16:28:4d:bd:6d:cb:c3:9d:00:b8:8c:5b:a0:cd:32:
63:a1:b1:bc:eb:97:5a:1b:e7:22:84:f0:b0:34:70:f7:90:54:
73:27:77:21:f6:b2:1a:b9:5e:cc:ee:0f:1c:81:c5:10:e4:f2:
d6:4f:33:40:b9:5c:f3:94:6a:0c:58:35:65:0b:9c:4a:ff:f9:
54:09:65:28:42:d6:34:67:6b:b9:3d:01:df:d8:af:d5:e4:d7:
c9:87:a6:6b:b7:d0:4e:16:9d:8c:3a:68:4a:f6:de:ac:05:5e:
df:1e:12:1b:b9:50:aa:b3:98:6b:5d:12:8f:e5:65:c6:9d:ce:
7c:5c:84:e2:22:78:46:a8:5b:0c:94:e0:05:3d:df:81:6d:32:
e8:65:b6:dd:94:20:99:32:39:a8:72:b3:60:c6:f1:f2:76:ef:
3d:ef:93:20:6b:c6:cb:19:02:af:ba:a5:f2:3f:d0:f3:4c:09:
7b:9e:b3:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdF+RI0+pk0pfyjo26hE9DpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYzNlYzUzOWYyM2VlMDMxYWEzOTZhYzVjZWQ0MjU2Mzg4
NGI3YjMwHhcNMjUwNjA2MTYwMDQwWhcNMjUwNjA3MTYwMDQwWjAzMTEwLwYDVQQD
EyhiMWRmMmUwMmZkNjZjYmEzNWY5YzlmNTc5YWJiZjUyZTdkMzdmZTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTg7riucXO8EOfCsqmajfV326cHf
bIszM3MTgWh0Mcq/cG9vkgGPwIySVrsXsKC0o2XJspFKUZkt3LLhlmzdDMiA09X7
QbA48CJrF3N7wfnww5wz3Z8tQwVpc9QcnHs0jwyHY22b2j0zO9jD5/zXwyoOpFkq
dB/StX+ebom7k0wSOwwAv0xdKsct02vKv0KKiJno5ETLpabDBUsM2eUg16tt0rql
sPxq3/XXdoORKXb8NXJZRiovjly0feHLndBlh873P2xR7aZztutEOpd/Lg8di70I
LrYHC+c5iMfl0BLOv1T03WxwBCHzm30MzyA8jhfoDoxYMB4V1ayD+PXgcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLHfLgL9ZsujX5yfV5q79S59N/4oMB8GA1UdIwQY
MBaAFLHD7FOfI+4DGqOWrFztQlY4hLezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2NQc1U1OGo3Z01hbzVhc1hPMUNWamlFdDdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8wMGRjZGYtZWM5ZC00NDQ2LTkwNWUt
NTU2MzQ3YTVmMDU2LzEvc2NQc1U1OGo3Z01hbzVhc1hPMUNWamlFdDdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8wMGRjZGYtZWM5ZC00NDQ2LTkwNWUtNTU2MzQ3YTVmMDU2
LzEvc2NQc1U1OGo3Z01hbzVhc1hPMUNWamlFdDdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQS6qEh5n
HZC/VO5ooFOLYENNX99K14avkwBfrozsVp9unO+b8/3q4LUGW+uO9jdeVkueEI8a
9h3r/eboMqP7MPe9TAvDVKVezkrHFihNvW3Lw50AuIxboM0yY6GxvOuXWhvnIoTw
sDRw95BUcyd3IfayGrlezO4PHIHFEOTy1k8zQLlc85RqDFg1ZQucSv/5VAllKELW
NGdruT0B39iv1eTXyYema7fQThadjDpoSvberAVe3x4SG7lQqrOYa10Sj+Vlxp3O
fFyE4iJ4RqhbDJTgBT3fgW0y6GW23ZQgmTI5qHKzYMbx8nbvPe+TIGvGyxkCr7ql
8j/Q80wJe56zKg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:17:50 2025 by rpki-client