Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.mft
File: sCqpYbR31UI9hbfUPz76JjJtcJA.mft (raw, json)
Hash identifier: PqggWS1eWvQiPjQr6JnbsG5SQ5CP6CwXsRB6846loRg=
Subject key identifier: D1:FB:9B:58:85:2E:90:04:45:22:3C:CC:A5:23:63:9D:AC:D0:92:9C
Authority key identifier: B0:2A:A9:61:B4:77:D5:42:3D:85:B7:D4:3F:3E:FA:26:32:6D:70:90
Certificate issuer: /CN=b02aa961b477d5423d85b7d43f3efa26326d7090
Certificate serial: 01987F0A3691126749AB73A4147D27D9C7BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.mft
Manifest number: 1623
Signing time: Wed 06 Aug 2025 11:00:32 +0000
Manifest this update: Wed 06 Aug 2025 11:00:32 +0000
Manifest next update: Thu 07 Aug 2025 11:00:32 +0000
Files and hashes: 1: 3WE6dfLNxFsfmDokXfTCR3HDgJA.roa (hash: 4x45ICmKpG8qOpEIix9N+xHqWEezDEIU9A+oBlF8GPM=)
2: Wb3lkfWf6ka0qstTNr3DHQk98Io.roa (hash: GA6ShDwKxVTanoCjEQltZxPOXFGDZucgrHs4qUUB0mE=)
3: gftrqq2xNPQCOHxaCTBevS63_R0.roa (hash: BBnqHSnGOHFEg3w/aAg1dxePTY9R+tg1C4jtSLBPpAc=)
4: hzxPD1tTltD0QDura1MxJWigUBE.roa (hash: 5nYVXUDsX4+3FWl3JaINgnQyrUXh4rqzUTE7RBqyFqA=)
5: s0olpFJOyt15T_pyM--2CmUb0gk.roa (hash: ngdLwlq+fDO5qvE2dRL5JDPZUtcX3P2i8ij4BiH5dks=)
6: sCqpYbR31UI9hbfUPz76JjJtcJA.crl (hash: 9heR6+lD8M2YahvTbowhNU/ZTMsEqh8z7XlJkAezK5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 11:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:0a:36:91:12:67:49:ab:73:a4:14:7d:27:d9:c7:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02aa961b477d5423d85b7d43f3efa26326d7090
Validity
Not Before: Aug 6 11:00:32 2025 GMT
Not After : Aug 7 11:00:32 2025 GMT
Subject: CN=d1fb9b58852e900445223ccca523639dacd0929c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0b:4f:54:61:63:ad:74:9d:25:77:1a:b5:e6:
cf:48:78:b0:51:88:09:bf:eb:de:b0:3d:6c:26:08:
04:ae:5e:be:59:c7:1e:a0:59:a7:74:5a:85:9c:1e:
11:e9:7e:bf:3b:33:a8:37:78:0c:a8:b7:63:52:2c:
1a:18:8b:3a:24:b5:5a:2b:17:d1:93:6f:20:81:42:
d0:fb:4d:c2:3f:6c:a4:f4:99:05:cb:90:b1:44:ae:
11:be:93:93:15:a1:38:ab:e9:87:67:67:ac:8b:fa:
17:1f:c8:ed:21:01:24:d0:db:bf:37:a2:c6:2c:bd:
f5:21:7d:aa:83:16:17:28:42:50:ad:e1:c6:43:cc:
8e:11:a4:35:37:0a:1c:21:68:70:d1:17:c9:02:da:
c9:da:58:f6:72:3f:d8:8f:f1:15:e0:92:71:30:ea:
1b:e4:ba:0e:a4:13:0d:10:83:69:ab:26:e9:99:dc:
5d:4c:e2:c1:84:17:80:d5:58:f4:1e:4f:9c:77:ca:
f9:f0:f0:e9:4f:6f:ec:61:76:4b:ab:61:e3:07:2c:
87:76:cd:3a:95:99:57:c3:00:7e:ef:68:41:99:22:
0b:55:c8:29:f0:77:af:d2:39:1d:69:4d:27:30:fb:
f1:e9:6f:6c:f2:af:5f:29:26:7c:fd:a3:9d:bc:a3:
ee:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:FB:9B:58:85:2E:90:04:45:22:3C:CC:A5:23:63:9D:AC:D0:92:9C
X509v3 Authority Key Identifier:
keyid:B0:2A:A9:61:B4:77:D5:42:3D:85:B7:D4:3F:3E:FA:26:32:6D:70:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:e5:1b:f2:f5:6b:e8:3e:65:ba:7f:9d:7c:69:ad:69:8f:03:
b9:e1:2e:7a:7b:c6:e5:c5:26:a3:79:a8:7a:b6:e0:98:2e:5e:
ae:f7:0c:b5:d1:bc:c7:41:17:45:16:e4:5e:7f:62:1b:36:a7:
3d:fc:a5:be:bc:b2:53:09:94:6a:0c:98:3b:c6:00:df:6f:fb:
94:84:cb:84:f8:c0:83:3b:eb:32:95:af:74:86:b2:59:a0:9f:
8f:18:a4:01:f4:46:ed:23:f5:07:be:44:c3:a4:a7:03:88:87:
8a:b8:05:ec:76:c5:73:50:81:e0:2c:12:99:54:eb:00:05:b9:
cc:a6:89:cc:b8:6c:87:ad:ba:5d:93:b8:cd:53:6e:1c:3b:b7:
e1:d8:1e:ea:1a:6b:ce:bc:20:08:65:ab:48:13:4a:8c:f1:10:
43:bb:22:d6:87:be:79:07:46:4b:30:27:e2:98:f5:fc:8a:bc:
3f:b1:f8:f9:1b:00:a5:1f:16:a6:2a:d8:e3:83:a1:75:4a:ad:
b9:6d:50:56:7b:48:24:23:64:34:2c:9f:b8:33:fb:a8:bf:3a:
22:3b:7e:09:67:d6:57:70:7b:07:df:65:27:20:61:b5:e4:f0:
86:df:f5:d5:92:13:7e:40:70:14:b7:d4:84:d9:3a:eb:3e:19:
8e:53:b9:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh/CjaREmdJq3OkFH0n2ce6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMmFhOTYxYjQ3N2Q1NDIzZDg1YjdkNDNmM2VmYTI2MzI2
ZDcwOTAwHhcNMjUwODA2MTEwMDMyWhcNMjUwODA3MTEwMDMyWjAzMTEwLwYDVQQD
EyhkMWZiOWI1ODg1MmU5MDA0NDUyMjNjY2NhNTIzNjM5ZGFjZDA5MjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwtPVGFjrXSdJXcatebPSHiwUYgJ
v+vesD1sJggErl6+WcceoFmndFqFnB4R6X6/OzOoN3gMqLdjUiwaGIs6JLVaKxfR
k28ggULQ+03CP2yk9JkFy5CxRK4RvpOTFaE4q+mHZ2esi/oXH8jtIQEk0Nu/N6LG
LL31IX2qgxYXKEJQreHGQ8yOEaQ1NwocIWhw0RfJAtrJ2lj2cj/Yj/EV4JJxMOob
5LoOpBMNEINpqybpmdxdTOLBhBeA1Vj0Hk+cd8r58PDpT2/sYXZLq2HjByyHds06
lZlXwwB+72hBmSILVcgp8Hev0jkdaU0nMPvx6W9s8q9fKSZ8/aOdvKPuQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNH7m1iFLpAERSI8zKUjY52s0JKcMB8GA1UdIwQY
MBaAFLAqqWG0d9VCPYW31D8++iYybXCQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0NxcFliUjMxVUk5aGJmVVB6NzZKakp0Y0pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8wMTQ4NGMtNWYyOC00MmY1LWI5ZWEt
MDc4N2E1MDNjYTY5LzEvc0NxcFliUjMxVUk5aGJmVVB6NzZKakp0Y0pBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8wMTQ4NGMtNWYyOC00MmY1LWI5ZWEtMDc4N2E1MDNjYTY5
LzEvc0NxcFliUjMxVUk5aGJmVVB6NzZKakp0Y0pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPuUb8vVr
6D5lun+dfGmtaY8DueEuenvG5cUmo3moerbgmC5ervcMtdG8x0EXRRbkXn9iGzan
PfylvryyUwmUagyYO8YA32/7lITLhPjAgzvrMpWvdIayWaCfjxikAfRG7SP1B75E
w6SnA4iHirgF7HbFc1CB4CwSmVTrAAW5zKaJzLhsh626XZO4zVNuHDu34dge6hpr
zrwgCGWrSBNKjPEQQ7si1oe+eQdGSzAn4pj1/Iq8P7H4+RsApR8WpirY44OhdUqt
uW1QVntIJCNkNCyfuDP7qL86Ijt+CWfWV3B7B99lJyBhteTwht/11ZITfkBwFLfU
hNk66z4ZjlO5Vg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 18:29:06 2025 by rpki-client