Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft
File: scIHU2wjS4vDrJgwEUMbp3Q51jc.mft (raw, json)
Hash identifier: LquFmYeTUCV+qq8o/VldpjLBrQDb6D7bz7Oa3IrAr9w=
Subject key identifier: B9:B2:A1:5A:D6:0A:3E:C9:EB:95:5D:83:B8:40:38:94:D7:81:16:ED
Authority key identifier: B1:C2:07:53:6C:23:4B:8B:C3:AC:98:30:11:43:1B:A7:74:39:D6:37
Certificate issuer: /CN=b1c207536c234b8bc3ac983011431ba77439d637
Certificate serial: 0197CEDFAC2CC7A697DF1213BE48F3707EAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scIHU2wjS4vDrJgwEUMbp3Q51jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft
Manifest number: 52
Signing time: Thu 03 Jul 2025 06:00:54 +0000
Manifest this update: Thu 03 Jul 2025 06:00:54 +0000
Manifest next update: Fri 04 Jul 2025 06:00:54 +0000
Files and hashes: 1: scIHU2wjS4vDrJgwEUMbp3Q51jc.crl (hash: qBjcswJIknSNvdDmjoli0QJ1o6+M5qG272w0u1WsrJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/scIHU2wjS4vDrJgwEUMbp3Q51jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:df:ac:2c:c7:a6:97:df:12:13:be:48:f3:70:7e:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c207536c234b8bc3ac983011431ba77439d637
Validity
Not Before: Jul 3 06:00:54 2025 GMT
Not After : Jul 4 06:00:54 2025 GMT
Subject: CN=b9b2a15ad60a3ec9eb955d83b8403894d78116ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4a:38:f2:ac:49:d5:04:2c:0d:1a:3e:78:32:
64:25:93:75:aa:11:2a:0f:3f:9e:5f:52:2c:d9:2b:
cd:7d:71:05:cb:d2:74:12:28:5f:48:48:7e:3a:98:
70:57:ee:23:d9:36:b2:65:b8:c5:84:c8:d6:fd:05:
01:e7:04:97:37:2a:3b:7b:9e:9c:c5:5d:98:8b:92:
ca:91:31:df:60:26:dc:66:64:11:56:a0:90:f5:a2:
de:93:06:bb:d1:92:6f:38:31:4e:31:eb:6b:01:63:
6c:e7:ed:92:a6:20:81:ef:f0:3e:b0:bd:aa:2d:10:
d5:c8:55:5f:ab:63:84:ef:db:44:16:1d:29:5a:d4:
6e:2b:6a:df:f4:24:72:44:cc:de:85:d2:c8:dd:8f:
5d:6f:06:1d:40:63:84:c6:2b:5a:73:c3:14:80:23:
1e:0e:82:11:0f:98:65:a7:5e:ed:95:11:ac:b2:68:
5e:56:5d:63:6a:7d:6a:28:83:0a:8b:99:c4:bf:49:
c7:cc:72:36:51:b4:08:f6:96:ec:b2:18:eb:e3:55:
ab:a5:f2:e7:7f:13:c5:c4:12:6a:70:13:f7:d9:e7:
56:e7:aa:4f:4e:07:9d:af:dc:e7:d3:47:77:d0:5d:
ca:6b:21:7c:36:a6:eb:7b:2f:73:33:a5:38:6c:bd:
1b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B2:A1:5A:D6:0A:3E:C9:EB:95:5D:83:B8:40:38:94:D7:81:16:ED
X509v3 Authority Key Identifier:
keyid:B1:C2:07:53:6C:23:4B:8B:C3:AC:98:30:11:43:1B:A7:74:39:D6:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scIHU2wjS4vDrJgwEUMbp3Q51jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f0:e2:40:5a:93:53:97:8b:be:1b:45:e9:b4:8b:58:16:58:
d3:02:1e:a4:c3:2c:ab:9f:e7:21:1f:5f:b5:b4:da:b4:b7:fd:
57:7b:c1:7a:85:f1:53:84:9c:b0:f7:2f:96:ee:50:e8:f1:96:
26:9b:8a:08:d6:d1:34:18:7f:7c:aa:9a:a3:61:55:46:bc:f8:
de:82:83:6d:ba:10:30:16:bc:f8:a7:85:ac:d5:66:de:4d:02:
4f:44:9f:66:d7:20:5e:79:2e:94:8a:f3:7c:79:f8:8f:d7:ec:
bf:d1:b6:9a:97:b7:44:e8:9b:b4:c2:1d:ba:8a:cd:f7:8d:db:
9c:b1:5f:96:85:fa:24:ba:85:f9:fa:d6:49:6e:c9:ca:45:3a:
61:c3:76:37:3e:7c:1e:4c:eb:9c:81:bd:3e:e2:5a:08:78:88:
7e:e2:51:5a:d0:5c:3b:c3:93:51:65:dd:55:29:27:70:54:fe:
7d:16:0d:b1:8d:82:33:3d:b4:92:59:b2:78:fe:e2:16:f9:60:
15:b7:4d:be:22:23:2f:32:cf:ed:9e:74:ce:2d:8a:c8:f7:a5:
7f:a7:c0:ea:d2:91:51:5f:23:35:d4:67:32:be:8f:b7:21:c2:
ef:eb:86:e5:45:5d:f7:60:8c:33:6d:07:ab:4e:8b:4c:38:61:
4e:79:1f:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfO36wsx6aX3xITvkjzcH6rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYzIwNzUzNmMyMzRiOGJjM2FjOTgzMDExNDMxYmE3NzQz
OWQ2MzcwHhcNMjUwNzAzMDYwMDU0WhcNMjUwNzA0MDYwMDU0WjAzMTEwLwYDVQQD
EyhiOWIyYTE1YWQ2MGEzZWM5ZWI5NTVkODNiODQwMzg5NGQ3ODExNmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUo48qxJ1QQsDRo+eDJkJZN1qhEq
Dz+eX1Is2SvNfXEFy9J0EihfSEh+OphwV+4j2TayZbjFhMjW/QUB5wSXNyo7e56c
xV2Yi5LKkTHfYCbcZmQRVqCQ9aLekwa70ZJvODFOMetrAWNs5+2SpiCB7/A+sL2q
LRDVyFVfq2OE79tEFh0pWtRuK2rf9CRyRMzehdLI3Y9dbwYdQGOExitac8MUgCMe
DoIRD5hlp17tlRGssmheVl1jan1qKIMKi5nEv0nHzHI2UbQI9pbsshjr41WrpfLn
fxPFxBJqcBP32edW56pPTgedr9zn00d30F3KayF8Nqbrey9zM6U4bL0bDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLmyoVrWCj7J65Vdg7hAOJTXgRbtMB8GA1UdIwQY
MBaAFLHCB1NsI0uLw6yYMBFDG6d0OdY3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2NJSFUyd2pTNHZEckpnd0VVTWJwM1E1MWpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS80NTZhZjEtNDM0MC00NzI5LWIzNDIt
NWVkNzVlNDI0NDY4LzEvc2NJSFUyd2pTNHZEckpnd0VVTWJwM1E1MWpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS80NTZhZjEtNDM0MC00NzI5LWIzNDItNWVkNzVlNDI0NDY4
LzEvc2NJSFUyd2pTNHZEckpnd0VVTWJwM1E1MWpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXvDiQFqT
U5eLvhtF6bSLWBZY0wIepMMsq5/nIR9ftbTatLf9V3vBeoXxU4ScsPcvlu5Q6PGW
JpuKCNbRNBh/fKqao2FVRrz43oKDbboQMBa8+KeFrNVm3k0CT0SfZtcgXnkulIrz
fHn4j9fsv9G2mpe3ROibtMIduorN943bnLFfloX6JLqF+frWSW7JykU6YcN2Nz58
HkzrnIG9PuJaCHiIfuJRWtBcO8OTUWXdVSkncFT+fRYNsY2CMz20klmyeP7iFvlg
FbdNviIjLzLP7Z50zi2KyPelf6fA6tKRUV8jNdRnMr6PtyHC7+uG5UVd92CMM20H
q06LTDhhTnkfBw==
-----END CERTIFICATE-----
Generated at Thu Jul 3 12:22:59 2025 by rpki-client