Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
File: sCQrfkMFPJE9Yr9duxaC_-a43-I.mft (raw, json)
Hash identifier: Xvvj7KtuCmAgw9bnuHBlZQ3xNUZNTnObstLne32s5Q4=
Subject key identifier: A5:B3:EA:7A:AC:C2:1A:0E:7D:6A:8B:B7:F3:6C:65:41:43:FF:0A:56
Authority key identifier: B0:24:2B:7E:43:05:3C:91:3D:62:BF:5D:BB:16:82:FF:E6:B8:DF:E2
Certificate issuer: /CN=b0242b7e43053c913d62bf5dbb1682ffe6b8dfe2
Certificate serial: 0197B6D764735E32FAAD48840ECD1A80AA11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
Manifest number: 0F1B
Signing time: Sat 28 Jun 2025 14:00:58 +0000
Manifest this update: Sat 28 Jun 2025 14:00:58 +0000
Manifest next update: Sun 29 Jun 2025 14:00:58 +0000
Files and hashes: 1: VXSaoq70xTeN6W3C76eUA8OC5cU.roa (hash: vEwflplyRjS2mkClV+Bpny4Bw/QU3HBBti723DFTvj4=)
2: sCQrfkMFPJE9Yr9duxaC_-a43-I.crl (hash: BGD1a/h9upk+SJx+YCXQmpHIl1h1fT5rm086wW8laJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:64:73:5e:32:fa:ad:48:84:0e:cd:1a:80:aa:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0242b7e43053c913d62bf5dbb1682ffe6b8dfe2
Validity
Not Before: Jun 28 14:00:58 2025 GMT
Not After : Jun 29 14:00:58 2025 GMT
Subject: CN=a5b3ea7aacc21a0e7d6a8bb7f36c654143ff0a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:99:a7:d4:28:b4:7f:4d:e4:8b:6a:d7:16:c9:
d9:e6:e1:1f:4d:1b:fb:98:02:4c:c9:5f:67:3b:b7:
ad:0c:f1:b7:35:0b:f6:7e:f4:3f:d9:77:11:9e:08:
5c:8f:1c:35:b9:3b:cd:b3:80:09:eb:ae:c8:a5:fc:
95:29:07:54:6d:13:b8:f3:5a:14:4f:e7:ac:05:3c:
00:51:51:87:51:84:bb:ef:6b:73:06:91:69:5d:4c:
dd:0a:80:59:31:80:c2:32:cb:a9:84:95:ce:f0:21:
24:22:87:22:9c:73:8e:38:cd:08:b0:ee:b0:aa:5f:
e4:be:4c:7f:6e:f2:e2:3f:6c:12:76:c5:18:db:1d:
8c:70:a0:95:87:9a:6a:3d:97:73:4f:d2:82:7e:58:
28:60:07:70:89:d2:64:3c:46:46:01:da:8d:e9:8b:
8c:fd:d3:c8:41:7a:03:9c:bd:6e:fd:90:5b:fc:75:
17:dc:b6:01:9a:7e:01:2b:5b:6d:18:d6:2b:cc:32:
4d:99:ad:e6:d6:5c:69:24:8c:11:04:f0:ee:e6:93:
32:22:0d:3b:e6:b1:d3:14:31:f8:d9:ae:87:2f:cd:
a4:f5:42:05:58:39:7e:d2:be:cf:01:23:a9:10:fd:
5a:cc:57:3d:4e:30:47:c1:ce:4f:77:6b:69:c9:f7:
d9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B3:EA:7A:AC:C2:1A:0E:7D:6A:8B:B7:F3:6C:65:41:43:FF:0A:56
X509v3 Authority Key Identifier:
keyid:B0:24:2B:7E:43:05:3C:91:3D:62:BF:5D:BB:16:82:FF:E6:B8:DF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c3:df:1e:db:f5:fc:6a:b2:56:b2:ab:b2:d8:cf:53:70:69:
ad:db:eb:b6:3a:cc:2a:de:ee:e0:94:42:74:4b:00:1f:51:14:
5e:b1:63:77:09:21:04:3c:5d:d7:34:19:d3:a1:1e:37:ee:6f:
d6:b5:04:b5:36:49:8b:b9:cb:e3:7e:1c:63:f7:c0:9c:96:d9:
3c:c0:60:76:8c:76:d5:ae:4b:b5:ab:ea:a3:d5:eb:4e:7d:c4:
57:00:e1:69:a1:ac:12:1b:29:0c:14:48:67:bf:c7:75:d4:96:
05:b1:1a:71:a8:5d:ec:b2:fc:31:8b:df:b2:0c:36:ed:60:db:
0a:d9:32:70:6d:b3:b7:f4:77:4f:cf:e6:28:cd:2b:d0:e1:7f:
3c:98:7c:6a:01:72:bc:97:53:66:95:80:fe:18:0e:d8:86:e2:
1b:78:eb:1b:83:d4:33:1a:fe:7d:08:20:bf:7c:95:bf:02:bd:
dc:18:e9:cf:43:f5:4b:01:68:04:14:5e:1c:5a:a4:d4:18:49:
96:29:d3:27:d8:10:a1:d5:d5:77:73:b1:0b:a2:ca:a5:21:b0:
c5:43:6c:9e:ff:02:6a:e3:68:bc:d5:cb:0d:e1:f7:c3:1b:1b:
dd:c4:a7:45:c3:41:26:81:f9:1c:55:e1:fb:80:86:a2:16:58:
1a:8f:c2:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe212RzXjL6rUiEDs0agKoRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMjQyYjdlNDMwNTNjOTEzZDYyYmY1ZGJiMTY4MmZmZTZi
OGRmZTIwHhcNMjUwNjI4MTQwMDU4WhcNMjUwNjI5MTQwMDU4WjAzMTEwLwYDVQQD
EyhhNWIzZWE3YWFjYzIxYTBlN2Q2YThiYjdmMzZjNjU0MTQzZmYwYTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJmn1Ci0f03ki2rXFsnZ5uEfTRv7
mAJMyV9nO7etDPG3NQv2fvQ/2XcRnghcjxw1uTvNs4AJ667IpfyVKQdUbRO481oU
T+esBTwAUVGHUYS772tzBpFpXUzdCoBZMYDCMsuphJXO8CEkIocinHOOOM0IsO6w
ql/kvkx/bvLiP2wSdsUY2x2McKCVh5pqPZdzT9KCflgoYAdwidJkPEZGAdqN6YuM
/dPIQXoDnL1u/ZBb/HUX3LYBmn4BK1ttGNYrzDJNma3m1lxpJIwRBPDu5pMyIg07
5rHTFDH42a6HL82k9UIFWDl+0r7PASOpEP1azFc9TjBHwc5Pd2tpyffZFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKWz6nqswhoOfWqLt/NsZUFD/wpWMB8GA1UdIwQY
MBaAFLAkK35DBTyRPWK/XbsWgv/muN/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0NRcmZrTUZQSkU5WXI5ZHV4YUNfLWE0My1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82MzhmMjgtMDBkNS00NjNiLWIxNmMt
Zjg0NWJmYzQyZjZkLzEvc0NRcmZrTUZQSkU5WXI5ZHV4YUNfLWE0My1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS82MzhmMjgtMDBkNS00NjNiLWIxNmMtZjg0NWJmYzQyZjZk
LzEvc0NRcmZrTUZQSkU5WXI5ZHV4YUNfLWE0My1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACsPfHtv1
/GqyVrKrstjPU3BprdvrtjrMKt7u4JRCdEsAH1EUXrFjdwkhBDxd1zQZ06EeN+5v
1rUEtTZJi7nL434cY/fAnJbZPMBgdox21a5Ltavqo9XrTn3EVwDhaaGsEhspDBRI
Z7/HddSWBbEacahd7LL8MYvfsgw27WDbCtkycG2zt/R3T8/mKM0r0OF/PJh8agFy
vJdTZpWA/hgO2IbiG3jrG4PUMxr+fQggv3yVvwK93Bjpz0P1SwFoBBReHFqk1BhJ
linTJ9gQodXVd3OxC6LKpSGwxUNsnv8CauNovNXLDeH3wxsb3cSnRcNBJoH5HFXh
+4CGohZYGo/CUA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:46:00 2025 by rpki-client