Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft
File: sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft (raw, json)
Hash identifier: w+eO1RfsUsll6ojZzmTXZVHwazwXFWiauFRpLa5p+9w=
Subject key identifier: C5:A3:7F:21:67:8E:43:6B:1F:30:6A:CE:1D:F6:43:09:D3:CB:20:BE
Authority key identifier: B1:CD:C2:6D:44:EA:F8:56:54:48:1E:95:81:04:3E:14:88:77:65:B4
Certificate issuer: /CN=b1cdc26d44eaf85654481e9581043e14887765b4
Certificate serial: 0198793F04D8CC559B8E3086698BCFFCE2E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft
Manifest number: 1173
Signing time: Tue 05 Aug 2025 08:00:29 +0000
Manifest this update: Tue 05 Aug 2025 08:00:29 +0000
Manifest next update: Wed 06 Aug 2025 08:00:29 +0000
Files and hashes: 1: G1Dy1jIdJhnPg1RR07SyKW4TRdA.roa (hash: DeuawucuklWfQxVupMFlWsFVrFr6ThqGmaVCsW6hwCg=)
2: nzP88bjh-XEZ2kCW3oiiu2uSEHc.roa (hash: Kf5r0P3IvTLCYpsr+vk6c4IGLFB/DHZsFGgImWavBWE=)
3: sPOrY5QZw05wtZqjOmcPJxxNH1M.roa (hash: mEv22PsIL+19AjiIf+57cbc9L5IztRFvvnP5Tk0/Ms8=)
4: sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl (hash: 4UhgWDkuaTNGzApZLWp1+bl7MwmsTnzkcGZYeMYBF54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:3f:04:d8:cc:55:9b:8e:30:86:69:8b:cf:fc:e2:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1cdc26d44eaf85654481e9581043e14887765b4
Validity
Not Before: Aug 5 08:00:29 2025 GMT
Not After : Aug 6 08:00:29 2025 GMT
Subject: CN=c5a37f21678e436b1f306ace1df64309d3cb20be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f0:44:6b:fd:7c:48:ce:ee:d4:a0:49:a1:0a:
72:27:30:2e:e9:95:dd:5c:de:da:8c:7e:41:6b:e2:
c1:b9:9f:fa:45:1e:1c:ec:e3:d7:ac:d5:49:99:0b:
19:42:d1:69:b3:4a:95:62:f8:77:2c:50:97:ef:ee:
d9:ff:5c:21:61:46:09:40:10:9e:95:f7:7e:b0:6d:
22:0e:91:c9:a9:85:d1:b9:ad:4f:70:a5:ea:34:b0:
0f:2c:96:c4:2b:ae:ec:1f:82:44:e3:e6:14:33:9a:
9c:b0:3f:ce:f9:aa:d6:c0:25:3a:3f:8f:f5:aa:86:
62:16:83:e0:90:d2:96:10:b4:05:c9:bc:3a:61:36:
b9:2a:7f:ed:61:0a:8e:2c:72:cc:d7:42:04:57:cf:
09:d0:0f:5e:00:fe:50:34:d6:4b:f5:83:cf:96:e5:
69:0b:9e:18:74:4c:e8:7a:36:5f:92:f9:d2:31:60:
03:d7:9d:61:a0:d7:da:4c:13:0b:6b:74:45:34:32:
a9:93:f3:4c:50:8e:fe:dc:91:76:c6:51:69:e2:fa:
a1:7c:ef:1d:8e:b3:71:ab:ea:4e:03:23:cd:57:6a:
a5:61:18:77:4b:2d:6b:5d:f4:0e:a4:0c:f7:0d:8b:
f8:4e:a1:fa:05:40:d6:f4:ab:5c:e4:8e:59:31:77:
f4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:A3:7F:21:67:8E:43:6B:1F:30:6A:CE:1D:F6:43:09:D3:CB:20:BE
X509v3 Authority Key Identifier:
keyid:B1:CD:C2:6D:44:EA:F8:56:54:48:1E:95:81:04:3E:14:88:77:65:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:fc:b3:26:a2:8b:48:6e:3d:f3:59:3b:67:67:26:41:7b:32:
1a:fb:fd:ba:ef:39:3d:10:5a:b3:59:96:a4:09:64:ec:96:5b:
30:1f:e6:2e:ca:26:8a:3f:43:5e:fe:13:c9:d8:31:43:8d:37:
53:da:c8:5b:e0:97:20:a2:87:76:28:3d:f0:22:58:7d:f5:17:
f9:75:df:f4:53:1e:ea:a4:93:68:fd:9b:47:28:df:92:16:f7:
2e:b3:63:50:41:8b:c2:50:2b:ab:51:45:3a:da:b0:90:4e:4a:
78:95:e3:6d:58:6d:e5:25:67:af:63:65:3a:9d:02:7d:13:8b:
74:e8:e2:90:0b:13:90:b3:d0:d9:86:c2:b2:2c:8b:12:b1:c9:
96:24:c7:0b:87:f0:9b:c4:ae:1d:a4:15:2d:c6:da:23:b8:d8:
1b:39:f8:57:09:74:e8:71:48:aa:e6:46:48:26:49:4a:17:b6:
0d:2c:ca:2c:ff:a3:d5:42:92:c1:9a:f7:1b:ca:04:78:c9:ca:
5b:5d:1a:a6:90:f9:a2:0a:d4:41:75:d0:31:de:72:24:a5:2d:
47:9a:eb:29:3d:c6:20:cc:6c:64:db:16:a6:ff:23:6d:c2:d8:
7a:b8:53:a5:2d:69:ae:88:c2:ce:7a:af:5a:40:74:51:b2:84:
f3:2c:17:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:11:27 2025 by rpki-client