Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
File: scPsU58j7gMao5asXO1CVjiEt7M.mft (raw, json)
Hash identifier: pXq7OmkIRzkHv96ITmjcnxhkYdgxrVkJEFRcJqRf/5c=
Subject key identifier: 2C:02:FB:05:AF:7E:A1:D2:0B:74:DF:F8:13:E5:6B:4D:09:ED:11:F3
Authority key identifier: B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
Certificate issuer: /CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Certificate serial: 01976C989AAA624358C78E4BDAB28C7AD081
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
Manifest number: 084A
Signing time: Sat 14 Jun 2025 04:00:29 +0000
Manifest this update: Sat 14 Jun 2025 04:00:29 +0000
Manifest next update: Sun 15 Jun 2025 04:00:29 +0000
Files and hashes: 1: YggPTsSNi-M37lrKOeIMBOEQEh0.roa (hash: QqUu1L/3s6oQrDkvCSSy8nc3UlcW3BrRdN7rqT/pHRE=)
2: b4AGcn0hWNQHufubVLqGkpQqCJU.roa (hash: TffukrxORwRZt6LrZ4vP1Br2diZAMHQpSo83hi5snQM=)
3: scPsU58j7gMao5asXO1CVjiEt7M.crl (hash: ut3D5uP/gJEmB3UbGxZHzvKbnmlrW7EojPazfCpA9G0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:9a:aa:62:43:58:c7:8e:4b:da:b2:8c:7a:d0:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Validity
Not Before: Jun 14 04:00:29 2025 GMT
Not After : Jun 15 04:00:29 2025 GMT
Subject: CN=2c02fb05af7ea1d20b74dff813e56b4d09ed11f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:52:46:f6:7c:a9:ec:26:c9:cd:cd:b5:8c:fb:
6d:b2:1a:da:64:ab:b7:69:24:40:29:ac:9b:e5:ae:
b7:76:d2:31:95:14:27:00:5d:0f:3e:51:34:5c:01:
2b:ec:64:89:b2:df:c3:56:00:0b:ee:40:b7:96:28:
65:42:ba:8e:b7:54:f8:6f:47:3b:d8:9b:59:7c:4a:
a4:93:b6:10:b9:2b:67:b4:d6:08:5f:bb:bc:58:86:
c0:e1:2d:c5:78:0e:2d:cc:66:24:d5:f2:6a:b9:d0:
3e:3f:e1:64:f3:c4:8c:ea:5b:8a:f6:2b:0c:08:79:
8c:07:22:95:a1:c8:79:a3:cd:77:4e:e0:eb:0b:df:
86:a6:93:67:94:1d:79:b2:8f:af:65:c7:12:31:68:
1b:f1:61:0b:0c:bd:aa:42:a9:64:47:b0:01:dc:68:
c1:66:50:1c:4b:05:c2:b3:f3:9c:79:30:e8:ae:57:
0c:38:ff:31:fd:dc:26:a5:2c:9a:61:8f:df:9c:0b:
d9:ab:33:b1:f2:66:7b:20:d0:0e:7c:e3:db:a7:4d:
cf:03:2c:49:09:72:41:1b:55:50:42:7b:be:ae:51:
6b:79:9a:47:0f:bc:47:6c:a1:8a:14:8f:bd:c4:03:
97:03:18:29:ec:25:dc:2d:88:dc:b0:50:c9:00:14:
0e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:02:FB:05:AF:7E:A1:D2:0B:74:DF:F8:13:E5:6B:4D:09:ED:11:F3
X509v3 Authority Key Identifier:
keyid:B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:79:a6:a5:90:50:b5:50:c5:a8:ff:e8:d2:17:9e:b1:74:61:
65:49:4f:c0:b5:c3:d0:18:01:25:3e:c1:c5:1e:a4:db:ed:46:
cd:f2:86:52:ce:c7:75:ab:d6:84:82:fb:62:8a:21:48:f9:83:
fc:e0:88:2f:17:63:06:57:92:49:63:4b:7b:9f:02:24:e1:bd:
b4:b6:77:07:f9:36:77:b0:17:3e:38:8e:95:1e:ef:6f:94:ba:
50:29:86:93:8f:32:3e:6a:2f:6f:4d:89:4c:8b:84:c4:cb:f7:
a7:c6:64:24:5c:ce:97:70:32:b7:8e:1e:86:3b:f2:21:f1:b1:
db:18:85:8e:e7:5b:de:b1:53:53:a9:68:0f:86:6d:c7:c6:ca:
d4:9c:fe:95:df:8a:46:c5:2a:4e:38:d4:ed:e4:cb:8e:97:b4:
9e:2e:41:ac:0c:29:80:ef:3e:3e:2c:a1:3d:b8:1e:a3:05:7e:
4a:f2:4d:91:91:5b:9f:28:73:07:2a:09:ad:c8:63:1c:c4:01:
03:6b:a2:b2:54:b5:21:65:da:ef:9d:2e:7f:4f:ce:99:86:1a:
c2:d2:2d:fd:2b:8d:41:2a:3c:5f:fa:ab:87:3f:95:5b:4a:2b:
9c:53:a3:fc:e5:75:e4:a5:95:e7:4d:a2:b5:1d:cd:30:ea:64:
61:d7:79:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:14:31 2025 by rpki-client