Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft
File: scIHU2wjS4vDrJgwEUMbp3Q51jc.mft (raw, json)
Hash identifier: yzU07imbwMR/1cQJFZVmSS9Q4QDtZTjF+F+TarhKitg=
Subject key identifier: 8F:7E:BF:80:EA:42:1C:B0:29:68:01:70:64:7C:4B:63:D9:21:32:66
Authority key identifier: B1:C2:07:53:6C:23:4B:8B:C3:AC:98:30:11:43:1B:A7:74:39:D6:37
Certificate issuer: /CN=b1c207536c234b8bc3ac983011431ba77439d637
Certificate serial: 0199FCC63E715D4E0C1BD7E3194026CA2C88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scIHU2wjS4vDrJgwEUMbp3Q51jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft
Manifest number: 0173
Signing time: Sun 19 Oct 2025 14:01:14 +0000
Manifest this update: Sun 19 Oct 2025 14:01:14 +0000
Manifest next update: Mon 20 Oct 2025 14:01:14 +0000
Files and hashes: 1: scIHU2wjS4vDrJgwEUMbp3Q51jc.crl (hash: yf9cZ+c1R0OjYoX7LC104Y0PvtwoAhYW3DFTiQNf0UA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/scIHU2wjS4vDrJgwEUMbp3Q51jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:3e:71:5d:4e:0c:1b:d7:e3:19:40:26:ca:2c:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c207536c234b8bc3ac983011431ba77439d637
Validity
Not Before: Oct 19 14:01:14 2025 GMT
Not After : Oct 20 14:01:14 2025 GMT
Subject: CN=8f7ebf80ea421cb029680170647c4b63d9213266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:26:25:6e:77:2b:64:ab:7e:48:ff:97:91:9d:
f3:3a:3d:bf:43:00:49:f8:d8:2b:4c:95:66:84:c7:
74:cd:0a:a2:29:bb:89:f6:6b:ce:6c:40:a2:a8:b5:
37:a7:04:63:5d:c3:e7:09:49:8c:e2:75:5b:28:06:
f8:fb:90:77:bf:63:26:87:42:59:a6:53:5c:bf:96:
34:e5:a8:98:94:f7:ef:63:bb:c5:bc:c0:0a:fa:7a:
78:6e:43:49:76:3f:2a:cf:cb:db:a8:93:12:0e:70:
1c:80:21:cd:77:06:9f:18:7d:45:9f:3d:89:ce:45:
69:e7:40:84:cc:73:76:f3:5f:1e:29:67:bf:29:58:
18:da:14:7f:51:79:37:96:70:fe:1e:64:b5:96:ef:
ea:0a:28:33:75:0c:3c:3f:55:ca:34:23:fe:d7:ea:
dc:c5:20:cf:36:d0:26:9c:91:13:8f:0d:e6:40:5f:
ae:0c:bc:c7:0c:48:f8:1d:9b:c8:35:a9:ef:9c:5a:
25:8d:d6:47:73:2d:a6:0f:70:aa:fb:73:97:47:86:
6f:4f:57:a5:f2:a3:76:32:0b:50:41:3a:cf:75:94:
6c:c9:23:49:77:82:80:fc:a9:01:6e:1d:fa:64:cb:
97:e7:f7:4f:84:59:c8:82:bd:60:fa:43:ca:f7:ed:
36:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:7E:BF:80:EA:42:1C:B0:29:68:01:70:64:7C:4B:63:D9:21:32:66
X509v3 Authority Key Identifier:
keyid:B1:C2:07:53:6C:23:4B:8B:C3:AC:98:30:11:43:1B:A7:74:39:D6:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scIHU2wjS4vDrJgwEUMbp3Q51jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:72:62:a0:3c:45:bf:91:fc:a9:92:7e:46:bb:1f:de:0e:b5:
88:ad:6f:c0:0c:fa:58:92:38:a7:7c:49:56:e0:96:e3:74:ef:
41:51:ca:29:ad:f5:48:49:a5:db:d5:bd:93:e9:f6:b9:57:9a:
02:7d:14:57:3e:aa:fb:d2:09:5b:d9:33:57:f2:c9:e8:9a:62:
62:f2:5e:1d:bb:02:7d:e1:ea:5a:89:9f:8a:1c:5a:a1:9e:d1:
9c:b1:bf:c5:41:1b:35:fb:c3:c3:5f:13:64:88:87:ca:b2:c8:
da:cb:a0:73:67:18:e7:fb:f5:2b:82:77:a0:01:55:4b:9a:ca:
57:62:38:40:4a:95:b3:62:6d:65:b6:92:46:eb:dc:39:57:23:
74:1b:36:fa:22:39:08:8e:bb:71:ce:1e:c3:1d:7a:3c:e7:ac:
f0:2b:cc:53:bd:ec:82:6b:48:e2:07:37:57:bf:74:67:04:b1:
24:fb:6c:30:43:b5:93:5d:4f:73:0b:aa:7d:19:89:a6:81:66:
d1:a7:3c:d7:92:3c:09:d9:d1:90:04:0f:91:74:21:24:02:30:
79:0b:8b:a6:66:7c:af:98:59:08:ca:79:51:ce:83:a5:8d:0b:
ab:f6:81:73:08:a9:cb:44:91:65:81:bd:b1:3b:0f:d5:0b:1b:
dd:30:2a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:44 2025 by rpki-client