Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
File: SScSTZgDp95UiDFko3bqcuPGPq8.mft (raw, json)
Hash identifier: G2vgVxyO8KGLYzWgjzE44U4SUN3AfgkCbsM4Wl2TRY4=
Subject key identifier: 38:39:AF:15:8B:83:E4:9F:D5:DA:1D:20:D5:B4:9D:FA:8D:A4:F4:06
Authority key identifier: 49:27:12:4D:98:03:A7:DE:54:88:31:64:A3:76:EA:72:E3:C6:3E:AF
Certificate issuer: /CN=4927124d9803a7de54883164a376ea72e3c63eaf
Certificate serial: 0197B7B307AF908CF2FC7C51CE18CC230F7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 18:00:52 +0000
Manifest this update: Sat 28 Jun 2025 18:00:52 +0000
Manifest next update: Sun 29 Jun 2025 18:00:52 +0000
Files and hashes: 1: 6-IQUKyeOlnZ0n7k-mpTFfKu5nA.roa (hash: uwqOWT1eD0xXX0n+hN5F7B5Z9MhYA/dYHW/YSlQ6tT8=)
2: OJmLUcdGyKqyreRJA04sZVowZg0.roa (hash: ZPcGNQNPGXt7sqvYIqkF3ZoSuhuiF050QsXqHbGtgGo=)
3: SScSTZgDp95UiDFko3bqcuPGPq8.crl (hash: PzCAhch5M/BNv3LWiSMh3ZNzoZM/no/6ds3cj4DcVdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:07:af:90:8c:f2:fc:7c:51:ce:18:cc:23:0f:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4927124d9803a7de54883164a376ea72e3c63eaf
Validity
Not Before: Jun 28 18:00:52 2025 GMT
Not After : Jun 29 18:00:52 2025 GMT
Subject: CN=3839af158b83e49fd5da1d20d5b49dfa8da4f406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c9:9e:f5:99:1b:2c:6f:0f:3a:4e:90:06:48:
14:e1:fb:a9:ff:c7:ee:6e:60:2b:16:31:2a:8a:af:
21:2f:b0:5b:91:72:ce:4a:c5:d6:25:6f:03:d2:fc:
e6:dd:5a:ad:c6:69:65:eb:cf:fa:cd:69:db:c7:c2:
5b:07:32:db:a2:8e:d1:b4:a0:fb:95:f3:e4:c4:ab:
2a:fd:d4:d8:a7:79:46:67:a0:5d:19:a1:d5:4c:29:
4b:e9:57:53:c1:01:c6:83:3c:ee:42:c6:26:56:60:
4f:92:ba:f8:3c:76:8c:d2:33:b9:cc:38:23:3f:93:
4c:c4:96:c5:ff:95:c5:f4:06:f5:71:83:40:16:af:
a2:1f:50:13:fe:ea:13:52:1c:23:61:11:5e:ae:d4:
82:32:2b:b0:6c:d8:08:e0:b1:f9:1b:a9:7c:f3:1c:
f2:ac:11:af:25:46:a5:46:11:55:66:46:48:78:ed:
a9:f5:d7:06:88:8d:5b:f3:b5:fa:ec:c5:2e:3a:71:
c2:af:fb:a5:a3:6b:15:8b:6b:20:e8:22:39:dc:77:
67:ad:57:01:8e:03:43:8c:ab:8e:72:80:72:3e:8f:
0f:e1:d1:a2:41:82:44:83:4a:b5:ae:b5:7f:6c:fc:
6c:e3:50:0b:55:bf:85:3a:4d:c8:e5:01:d6:9f:fc:
14:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:39:AF:15:8B:83:E4:9F:D5:DA:1D:20:D5:B4:9D:FA:8D:A4:F4:06
X509v3 Authority Key Identifier:
keyid:49:27:12:4D:98:03:A7:DE:54:88:31:64:A3:76:EA:72:E3:C6:3E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:af:b2:bf:f9:2a:f4:f2:70:5e:d7:f3:c6:79:81:0f:87:40:
cf:0a:11:e7:b5:23:1e:b6:58:e9:e7:30:08:76:f6:4f:11:66:
80:aa:07:ea:e5:cb:63:ae:39:f3:a7:32:32:c8:3c:0d:9e:4a:
9d:99:0f:99:01:15:74:14:d0:e8:27:40:8c:2f:d1:c2:47:94:
3e:f3:b1:21:da:ef:bf:7a:0a:ec:41:d9:ae:ba:1d:93:91:c2:
bc:0a:9f:93:25:6c:be:99:6e:be:d2:4f:4e:ad:68:77:26:b8:
3f:3d:f4:21:f6:1d:94:3e:86:dd:72:2b:d2:6c:89:e4:28:30:
35:85:63:b1:1a:87:a2:02:21:ae:2e:7c:34:09:c5:57:08:16:
3b:de:c2:ed:50:4f:6f:0c:5f:ca:fd:dc:6d:ad:49:b0:b0:d7:
5c:99:4f:a2:a6:ca:7e:97:16:46:9a:88:1d:1b:e3:c4:c5:c5:
1c:b8:00:0c:8f:c2:ac:58:a4:5a:80:08:b7:4f:4b:68:e7:cf:
83:3b:23:f4:53:ca:cc:fb:3d:18:d2:a4:be:8f:c4:14:17:c6:
6b:ff:25:bb:37:08:70:63:45:40:26:dd:5e:41:05:c6:0e:70:
38:19:b4:9d:50:65:de:3c:a1:5c:af:7d:b6:b7:58:04:11:80:
e8:e7:2d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:28:16 2025 by rpki-client