Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
File: scPsU58j7gMao5asXO1CVjiEt7M.mft (raw, json)
Hash identifier: QsZT9sES3LYKjcklXILdVwbKBfZaLOHdgpSMvfo0TDo=
Subject key identifier: 59:3C:E5:19:8A:7F:4B:DE:54:02:8F:83:A2:9E:41:9D:82:DB:12:70
Authority key identifier: B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
Certificate issuer: /CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Certificate serial: 019A21E4F9085B21B70BB27706D8C0FC5AB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
Manifest number: 09B1
Signing time: Sun 26 Oct 2025 19:00:45 +0000
Manifest this update: Sun 26 Oct 2025 19:00:45 +0000
Manifest next update: Mon 27 Oct 2025 19:00:45 +0000
Files and hashes: 1: YggPTsSNi-M37lrKOeIMBOEQEh0.roa (hash: QqUu1L/3s6oQrDkvCSSy8nc3UlcW3BrRdN7rqT/pHRE=)
2: b4AGcn0hWNQHufubVLqGkpQqCJU.roa (hash: TffukrxORwRZt6LrZ4vP1Br2diZAMHQpSo83hi5snQM=)
3: scPsU58j7gMao5asXO1CVjiEt7M.crl (hash: jx5d+n9kmglNB69TQ0BzZTbmHYl9WlwTYWPfv6D91rM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:e4:f9:08:5b:21:b7:0b:b2:77:06:d8:c0:fc:5a:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Validity
Not Before: Oct 26 19:00:45 2025 GMT
Not After : Oct 27 19:00:45 2025 GMT
Subject: CN=593ce5198a7f4bde54028f83a29e419d82db1270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:00:ad:4d:61:b3:bd:87:ac:ab:c2:df:7a:9b:
a0:62:d9:59:c8:96:33:90:33:2f:06:d3:50:04:23:
a4:6b:37:72:84:be:db:df:3b:0a:8a:43:4a:5d:12:
8d:2d:f9:17:16:9c:e4:c8:88:9b:10:60:02:bd:dd:
29:58:9c:95:44:74:e2:74:15:ed:4e:47:76:dc:b9:
d0:cc:e0:85:18:44:04:f9:e8:91:34:ed:0b:af:ee:
ef:36:0b:c7:c2:36:86:6d:cf:9f:c9:a7:73:6c:1f:
34:f1:7d:a3:8b:82:0f:17:c4:20:1b:3c:2d:b1:23:
2f:af:47:bf:45:08:5d:09:0c:75:50:d1:e4:6a:33:
68:91:97:cf:f9:f3:b5:a2:85:88:8f:c0:73:48:e1:
8e:f0:0b:1b:e7:97:0a:d2:b5:c6:d7:12:ca:51:1b:
41:fa:ff:99:31:80:7d:6d:f3:02:fe:88:b4:48:da:
35:e0:87:8c:46:9e:45:32:46:c3:e9:e6:0f:3e:81:
32:9d:af:89:25:d7:54:b1:68:c5:90:36:55:2e:c3:
62:96:2b:82:43:10:75:b3:b3:3d:8f:ac:33:0a:43:
76:f6:79:05:1f:78:6b:a2:03:c4:2c:a2:d2:fd:96:
71:48:31:06:9d:ee:64:cf:89:53:69:7e:3e:18:45:
ad:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:3C:E5:19:8A:7F:4B:DE:54:02:8F:83:A2:9E:41:9D:82:DB:12:70
X509v3 Authority Key Identifier:
keyid:B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:52:cb:ca:d4:d3:a6:70:7d:e1:7b:9b:e6:a9:fd:e7:b2:be:
06:8d:fc:f2:c6:38:9d:53:21:08:66:66:f2:7f:9d:79:04:38:
51:1c:bc:13:f0:a4:38:01:ab:44:a3:90:07:cc:2a:06:6e:b5:
45:9f:0f:4c:a0:d4:af:dc:e1:4b:3f:69:08:5d:bb:2a:68:86:
e8:86:f0:35:9e:64:6a:72:64:b8:d6:68:79:57:54:72:a7:eb:
cf:5a:ba:5c:db:b4:11:37:4c:40:e5:c3:d2:a6:ef:56:7b:52:
19:cc:eb:0f:90:6c:a4:26:e7:87:5b:c3:ba:9c:07:99:d5:a2:
e2:d1:cb:8e:84:40:ea:00:d3:0f:21:4d:0a:0b:57:9d:9b:8d:
4e:bd:88:e7:f5:6e:5d:f6:99:2f:42:03:c1:62:f4:75:72:23:
f2:dd:70:9a:7d:d8:13:21:63:12:6a:22:88:08:dd:0f:47:5d:
c0:a4:ba:56:de:83:8d:0c:7d:fc:a7:3d:0c:68:0a:6d:2a:3d:
0f:65:2e:a4:3e:f5:7a:c0:a8:86:84:c3:1e:ec:ec:96:8a:08:
7a:cc:64:5a:f6:5b:70:62:ef:c2:6f:85:69:90:bf:05:cc:49:
d3:6b:8a:ea:a2:62:da:fc:dd:ad:01:b6:ee:dd:8d:a0:36:0e:
fc:27:17:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:09:39 2025 by rpki-client