Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft
File: sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft (raw, json)
Hash identifier: rCxKgYB0uxlPvdmRdgo+XIU+obY+xrv6mnqaT6OUyhY=
Subject key identifier: C7:DA:04:55:15:42:57:8C:6F:A8:08:10:3D:16:B9:63:14:FA:F8:A0
Authority key identifier: B1:CD:C2:6D:44:EA:F8:56:54:48:1E:95:81:04:3E:14:88:77:65:B4
Certificate issuer: /CN=b1cdc26d44eaf85654481e9581043e14887765b4
Certificate serial: 0198D7E19A194534D0F01FE79CFCA5FBE607
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft
Manifest number: 11A4
Signing time: Sat 23 Aug 2025 17:02:23 +0000
Manifest this update: Sat 23 Aug 2025 17:02:23 +0000
Manifest next update: Sun 24 Aug 2025 17:02:23 +0000
Files and hashes: 1: G1Dy1jIdJhnPg1RR07SyKW4TRdA.roa (hash: DeuawucuklWfQxVupMFlWsFVrFr6ThqGmaVCsW6hwCg=)
2: nzP88bjh-XEZ2kCW3oiiu2uSEHc.roa (hash: Kf5r0P3IvTLCYpsr+vk6c4IGLFB/DHZsFGgImWavBWE=)
3: sPOrY5QZw05wtZqjOmcPJxxNH1M.roa (hash: mEv22PsIL+19AjiIf+57cbc9L5IztRFvvnP5Tk0/Ms8=)
4: sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl (hash: EZQRzuejgpthZK3sbkT2EBJOlTXvfA0lyDRwJYtjHyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:9a:19:45:34:d0:f0:1f:e7:9c:fc:a5:fb:e6:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1cdc26d44eaf85654481e9581043e14887765b4
Validity
Not Before: Aug 23 17:02:23 2025 GMT
Not After : Aug 24 17:02:23 2025 GMT
Subject: CN=c7da04551542578c6fa808103d16b96314faf8a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1f:b4:1a:b9:c7:f1:83:2e:56:75:54:67:d9:
f2:e8:bf:70:f5:11:7a:dc:32:95:03:00:f9:16:f2:
b0:36:5e:b8:4c:b1:24:15:21:c7:f9:eb:e2:ec:22:
f4:9a:18:c9:55:60:50:40:ff:02:62:1f:d5:a4:4d:
03:d9:f9:f7:b6:dd:8e:ba:79:c0:ea:83:a1:b2:1f:
c6:8c:0e:28:57:ff:bd:7b:8d:9c:e2:95:d5:c0:9f:
6c:3c:bd:3a:c8:f9:72:ef:cf:c1:da:a2:0a:58:ba:
20:98:41:53:03:7e:d2:7d:0c:c3:46:fb:9b:9f:f0:
71:6d:e0:3f:a6:50:08:7f:3d:04:13:3f:3f:75:7a:
61:bd:4c:f2:38:ec:f7:76:1e:c3:91:36:44:bc:d2:
73:c6:f1:20:dd:e8:d0:86:8f:37:0a:b4:71:80:88:
04:10:64:e2:a4:2a:69:7e:d1:4d:57:c6:a3:ac:23:
0b:50:78:d3:34:09:10:0a:96:0f:3d:23:71:cc:b0:
ff:cc:81:33:b0:37:ea:f1:69:9a:da:91:b0:4d:d4:
71:19:29:15:16:a5:bf:a8:70:d5:3e:2a:94:52:62:
b9:1b:63:76:9c:7f:59:fe:8b:9d:f6:62:8b:31:c4:
c1:33:f5:55:dd:ad:0c:70:be:71:31:38:ab:84:a2:
ce:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:DA:04:55:15:42:57:8C:6F:A8:08:10:3D:16:B9:63:14:FA:F8:A0
X509v3 Authority Key Identifier:
keyid:B1:CD:C2:6D:44:EA:F8:56:54:48:1E:95:81:04:3E:14:88:77:65:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:26:59:6f:eb:89:e7:1b:20:f0:9c:11:3d:7e:8f:cb:11:4c:
11:74:32:c2:6a:e4:16:bf:ee:d1:84:b4:04:b5:a0:4d:58:2b:
75:c0:0f:87:c2:72:57:22:ed:34:77:32:c3:41:c5:e3:0b:22:
d6:55:c2:b2:1d:21:ed:30:e4:f0:b4:24:26:8f:e5:6d:23:dc:
88:21:77:6a:a7:ee:70:4e:66:40:bf:44:c4:bc:68:05:93:77:
d2:39:72:86:f2:d7:c2:e1:54:01:07:6e:66:f3:95:41:a6:a0:
11:b8:83:ac:56:28:89:55:dd:1a:7c:0e:20:cd:c3:2e:fc:f2:
94:51:26:91:30:5d:82:94:b2:0f:4e:17:51:70:4d:f5:20:bc:
52:a1:15:32:41:22:6a:0f:5c:97:4a:3e:96:0f:a6:4e:47:b0:
a6:06:f3:4b:a9:8c:cc:94:2a:8d:77:c8:1d:54:69:30:a2:65:
d7:76:ef:13:a1:22:e0:f6:c3:c8:3f:b8:04:eb:38:28:54:80:
15:ea:e2:68:8c:68:38:f8:d6:c4:ee:38:34:4f:78:95:20:61:
2e:88:07:38:ad:3c:ea:64:89:17:83:83:8a:0b:2a:80:d8:aa:
d3:c6:ae:d6:77:61:41:2a:5d:a9:41:cf:1c:85:d9:11:10:cc:
04:13:51:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:28:54 2025 by rpki-client