
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft
File: scIHU2wjS4vDrJgwEUMbp3Q51jc.mft (raw, json)
Hash identifier: AHkOH4dB0zgce/U2a6yrYjr228ytF4Ws+twLaIUJdlc=
Subject key identifier: AF:D5:F1:EF:45:79:36:B8:1A:C8:B3:AD:1C:6B:01:56:DB:E8:B2:8B
Authority key identifier: B1:C2:07:53:6C:23:4B:8B:C3:AC:98:30:11:43:1B:A7:74:39:D6:37
Certificate issuer: /CN=b1c207536c234b8bc3ac983011431ba77439d637
Certificate serial: 01976A73B3C267759A91B0EE01F5CE17F020
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scIHU2wjS4vDrJgwEUMbp3Q51jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft
Manifest number: 1E
Signing time: Fri 13 Jun 2025 18:00:56 +0000
Manifest this update: Fri 13 Jun 2025 18:00:56 +0000
Manifest next update: Sat 14 Jun 2025 18:00:56 +0000
Files and hashes: 1: scIHU2wjS4vDrJgwEUMbp3Q51jc.crl (hash: VeQNx87DDPUE599bsGpBPb6oPnCglCqNeAiiConoOUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/scIHU2wjS4vDrJgwEUMbp3Q51jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:73:b3:c2:67:75:9a:91:b0:ee:01:f5:ce:17:f0:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c207536c234b8bc3ac983011431ba77439d637
Validity
Not Before: Jun 13 18:00:56 2025 GMT
Not After : Jun 14 18:00:56 2025 GMT
Subject: CN=afd5f1ef457936b81ac8b3ad1c6b0156dbe8b28b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8a:c1:8d:fd:70:da:cb:c5:20:bc:66:08:66:
b1:a6:4e:6d:d6:6c:96:b6:2b:2d:27:70:34:79:1d:
54:46:be:b6:fa:16:dd:89:a7:e5:b2:bb:5d:92:08:
75:9d:ae:13:fe:de:a3:bd:99:06:89:0c:01:df:49:
1b:c8:fa:3e:af:4d:81:c4:a5:25:44:19:b2:ea:80:
97:8a:6f:30:4f:fc:fd:07:ed:9e:48:0f:9c:f8:ee:
ff:52:66:a7:2b:4d:1e:2c:e2:65:25:4a:94:41:22:
53:5d:8a:a2:b7:a5:8d:ef:09:23:b3:20:ea:f2:fd:
e1:c5:83:07:0e:57:1c:42:ab:2e:60:d9:75:09:32:
fe:00:31:7f:d8:ec:2d:fe:e3:05:df:28:81:1d:2b:
f9:2a:ba:6b:80:d0:04:f1:5c:57:be:d0:91:7b:3c:
8d:05:3a:23:ea:b6:85:85:dd:00:40:a9:5f:5a:c9:
e2:bd:c7:a8:58:16:8a:19:78:d0:79:f4:6b:8c:84:
21:de:18:e7:b8:91:fb:a8:c6:c9:15:6e:72:af:8a:
c3:cf:77:d4:f4:f1:de:7a:0b:b2:2d:4b:19:14:4f:
20:a2:37:68:8f:15:2c:1e:6b:a7:33:c0:9c:5f:9c:
c3:ea:41:42:28:55:4b:7f:44:ff:e9:62:d9:02:6b:
5c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D5:F1:EF:45:79:36:B8:1A:C8:B3:AD:1C:6B:01:56:DB:E8:B2:8B
X509v3 Authority Key Identifier:
keyid:B1:C2:07:53:6C:23:4B:8B:C3:AC:98:30:11:43:1B:A7:74:39:D6:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scIHU2wjS4vDrJgwEUMbp3Q51jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:1b:ab:81:d8:5e:9a:ae:c2:e0:21:49:a7:9c:7e:8f:5f:78:
a6:b1:18:2c:a4:cc:34:7d:b4:4f:ad:b1:5f:48:c3:64:d3:8a:
10:67:4a:06:d5:aa:9e:52:73:89:21:a6:fd:c3:4b:be:a5:a9:
b7:a9:8b:b1:b8:75:9a:3e:c3:98:f4:c9:59:c8:de:d1:1a:73:
3b:8c:57:72:c4:1e:71:cb:2a:f8:41:a0:ee:36:ae:2e:54:3e:
72:b5:17:e2:a8:53:c3:de:c8:8d:42:8d:5e:29:ca:7e:68:81:
1e:6f:94:72:ab:81:92:e4:6e:e4:80:8d:b1:3f:51:8b:86:83:
90:0b:1a:e1:09:a0:d9:24:14:3f:05:f8:1f:9a:fa:3a:2c:ab:
51:85:02:bc:74:cb:08:da:97:d5:fa:64:62:13:a7:08:32:a1:
2b:34:7d:c4:d6:81:3c:9f:d8:a0:48:99:8a:a7:a0:e7:19:a4:
d7:a7:ad:44:70:fc:c1:90:81:03:ac:15:8c:2e:40:9d:17:06:
4e:f5:65:63:77:c1:27:e0:c5:eb:af:05:55:82:aa:19:0d:4b:
eb:36:cf:ef:c1:e1:eb:6f:b3:08:89:e8:64:31:6a:2a:b6:63:
d6:3a:2c:a6:dd:e2:47:6a:98:4d:eb:7a:a1:89:5e:b7:c8:7e:
dd:c5:3a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 20:18:11 2025 by rpki-client