Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
File: scPsU58j7gMao5asXO1CVjiEt7M.mft (raw, json)
Hash identifier: FQ5ZA32xzSNFxEFeJYI4xBjguBc2kGl1PYIaP1yhOU4=
Subject key identifier: 2F:0E:01:A2:76:7C:54:C8:FE:49:1C:0C:C7:32:97:FB:4C:A1:A6:A3
Authority key identifier: B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
Certificate issuer: /CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Certificate serial: 01987CE5241F93C99E3C472B459552F93CFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
Manifest number: 08D7
Signing time: Wed 06 Aug 2025 01:00:48 +0000
Manifest this update: Wed 06 Aug 2025 01:00:48 +0000
Manifest next update: Thu 07 Aug 2025 01:00:48 +0000
Files and hashes: 1: YggPTsSNi-M37lrKOeIMBOEQEh0.roa (hash: QqUu1L/3s6oQrDkvCSSy8nc3UlcW3BrRdN7rqT/pHRE=)
2: b4AGcn0hWNQHufubVLqGkpQqCJU.roa (hash: TffukrxORwRZt6LrZ4vP1Br2diZAMHQpSo83hi5snQM=)
3: scPsU58j7gMao5asXO1CVjiEt7M.crl (hash: FKBbtpUyKG0ukrJXxsEgktvDnpZJPKansy5CBgzeWlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e5:24:1f:93:c9:9e:3c:47:2b:45:95:52:f9:3c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Validity
Not Before: Aug 6 01:00:48 2025 GMT
Not After : Aug 7 01:00:48 2025 GMT
Subject: CN=2f0e01a2767c54c8fe491c0cc73297fb4ca1a6a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:67:95:06:9d:10:48:dc:ce:04:4e:4f:2a:7c:
d5:0f:a3:41:4e:44:d9:b9:58:e7:99:56:a9:7a:50:
23:22:94:76:bd:da:1e:a7:7d:9b:ba:6d:c2:35:23:
02:d5:b3:61:ee:a1:49:f8:b6:e2:b6:af:90:88:37:
15:67:f5:08:19:c7:16:e9:71:a6:15:5d:5d:3d:c0:
9c:a1:10:89:11:f9:3e:96:0d:be:9b:33:1a:04:c9:
76:34:1e:6a:c4:8a:ec:a3:c3:6b:f1:ed:ad:41:d7:
8a:35:2d:91:da:4f:9d:73:b1:e2:13:15:0d:5d:d9:
7e:d1:4f:b6:6d:3c:57:d7:b1:6a:d0:74:78:2c:f2:
d4:fc:0b:ee:62:69:5d:a1:66:e3:19:e2:fe:b2:a3:
53:53:b7:a2:e3:62:af:e3:93:2a:c5:d5:6d:ba:13:
09:c2:80:ae:2e:2a:fe:35:58:a2:dc:7f:14:2b:83:
27:80:97:5a:85:d2:64:db:6f:e4:9a:75:89:af:4a:
ab:91:ce:b7:5c:c6:5b:a2:56:95:a9:2a:27:9e:d7:
33:8e:c3:dd:1f:10:ad:dd:22:c3:43:e7:d1:ea:7a:
68:d8:b6:56:1b:ed:7b:a2:15:dd:06:26:58:6d:d3:
c7:5e:2a:c3:8d:80:d7:d5:38:3a:cc:1e:e5:94:e3:
0f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:0E:01:A2:76:7C:54:C8:FE:49:1C:0C:C7:32:97:FB:4C:A1:A6:A3
X509v3 Authority Key Identifier:
keyid:B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:a8:a5:c9:0e:0a:d7:fb:18:76:24:55:19:37:92:8e:52:43:
aa:3c:3a:23:1b:42:ce:c6:41:52:c4:92:33:b0:bd:03:47:89:
c0:2b:70:b5:2b:cb:36:9a:cc:c9:c4:37:dc:5d:07:13:3e:f0:
cb:5e:e8:15:e0:e6:f8:0e:5b:ef:ee:9b:8e:42:37:df:a7:d9:
c2:6b:dc:0d:2b:c8:e5:2d:b3:01:2f:89:4d:d4:f3:78:e4:f7:
8e:eb:97:39:f5:c3:d6:d9:ea:26:68:54:57:6f:2d:22:e4:43:
12:c6:18:cf:4d:28:7b:af:9b:93:e5:13:24:53:01:f3:25:13:
ab:b2:64:39:cc:59:d0:bc:47:64:ec:8d:c0:49:17:f7:16:ab:
46:cb:6c:8d:07:04:59:0e:27:f5:3d:a7:53:9f:e3:e2:e9:7b:
9a:0d:97:34:8b:50:c1:d4:34:f9:a6:62:15:4a:6f:c1:e0:29:
ad:7b:d7:d6:c1:de:97:db:d4:3a:47:4e:29:37:0d:cb:76:2a:
cd:2e:1a:6e:13:e5:9d:ac:f2:4b:49:6c:d0:c9:df:19:54:b8:
29:a2:f5:ee:da:21:51:b2:3b:4e:a9:bf:2c:ae:32:0c:5c:6a:
23:b6:30:f4:a3:e6:47:87:40:72:52:62:33:e9:da:52:db:77:
88:42:fe:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh85SQfk8mePEcrRZVS+Tz9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYzNlYzUzOWYyM2VlMDMxYWEzOTZhYzVjZWQ0MjU2Mzg4
NGI3YjMwHhcNMjUwODA2MDEwMDQ4WhcNMjUwODA3MDEwMDQ4WjAzMTEwLwYDVQQD
EygyZjBlMDFhMjc2N2M1NGM4ZmU0OTFjMGNjNzMyOTdmYjRjYTFhNmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGeVBp0QSNzOBE5PKnzVD6NBTkTZ
uVjnmVapelAjIpR2vdoep32bum3CNSMC1bNh7qFJ+Lbitq+QiDcVZ/UIGccW6XGm
FV1dPcCcoRCJEfk+lg2+mzMaBMl2NB5qxIrso8Nr8e2tQdeKNS2R2k+dc7HiExUN
Xdl+0U+2bTxX17Fq0HR4LPLU/AvuYmldoWbjGeL+sqNTU7ei42Kv45MqxdVtuhMJ
woCuLir+NVii3H8UK4MngJdahdJk22/kmnWJr0qrkc63XMZbolaVqSonntczjsPd
HxCt3SLDQ+fR6npo2LZWG+17ohXdBiZYbdPHXirDjYDX1Tg6zB7llOMPpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC8OAaJ2fFTI/kkcDMcyl/tMoaajMB8GA1UdIwQY
MBaAFLHD7FOfI+4DGqOWrFztQlY4hLezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2NQc1U1OGo3Z01hbzVhc1hPMUNWamlFdDdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8wMGRjZGYtZWM5ZC00NDQ2LTkwNWUt
NTU2MzQ3YTVmMDU2LzEvc2NQc1U1OGo3Z01hbzVhc1hPMUNWamlFdDdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8wMGRjZGYtZWM5ZC00NDQ2LTkwNWUtNTU2MzQ3YTVmMDU2
LzEvc2NQc1U1OGo3Z01hbzVhc1hPMUNWamlFdDdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOailyQ4K
1/sYdiRVGTeSjlJDqjw6IxtCzsZBUsSSM7C9A0eJwCtwtSvLNprMycQ33F0HEz7w
y17oFeDm+A5b7+6bjkI336fZwmvcDSvI5S2zAS+JTdTzeOT3juuXOfXD1tnqJmhU
V28tIuRDEsYYz00oe6+bk+UTJFMB8yUTq7JkOcxZ0LxHZOyNwEkX9xarRstsjQcE
WQ4n9T2nU5/j4ul7mg2XNItQwdQ0+aZiFUpvweAprXvX1sHel9vUOkdOKTcNy3Yq
zS4abhPlnazyS0ls0MnfGVS4KaL17tohUbI7Tqm/LK4yDFxqI7Yw9KPmR4dAclJi
M+naUtt3iEL+0Q==
-----END CERTIFICATE-----
Generated at Wed Aug 6 04:09:02 2025 by rpki-client