Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
File: scPsU58j7gMao5asXO1CVjiEt7M.mft (raw, json)
Hash identifier: PLSMKnSRj6q0R2z72VTjKJ/y4UhCfqh+VoRcA8kPyUo=
Subject key identifier: B2:B4:E5:09:A3:DA:F2:7F:7D:C4:65:9E:01:B2:FB:87:41:B0:F3:1C
Authority key identifier: B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
Certificate issuer: /CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Certificate serial: 0199FD342F1D3E851C9E35D7EEE2E26DE3F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
Manifest number: 099E
Signing time: Sun 19 Oct 2025 16:01:19 +0000
Manifest this update: Sun 19 Oct 2025 16:01:19 +0000
Manifest next update: Mon 20 Oct 2025 16:01:19 +0000
Files and hashes: 1: YggPTsSNi-M37lrKOeIMBOEQEh0.roa (hash: QqUu1L/3s6oQrDkvCSSy8nc3UlcW3BrRdN7rqT/pHRE=)
2: b4AGcn0hWNQHufubVLqGkpQqCJU.roa (hash: TffukrxORwRZt6LrZ4vP1Br2diZAMHQpSo83hi5snQM=)
3: scPsU58j7gMao5asXO1CVjiEt7M.crl (hash: iONnh+zZ+/q9d5mtBasKd/0r8BC/0uFhgea1oD934qQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:2f:1d:3e:85:1c:9e:35:d7:ee:e2:e2:6d:e3:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Validity
Not Before: Oct 19 16:01:19 2025 GMT
Not After : Oct 20 16:01:19 2025 GMT
Subject: CN=b2b4e509a3daf27f7dc4659e01b2fb8741b0f31c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8a:1f:13:8d:59:4e:ce:fa:56:9b:cd:76:82:
ea:15:1f:97:2e:5f:3e:69:f9:77:28:1a:3b:36:c6:
e4:0c:5b:c4:0b:72:8b:99:23:d2:44:98:42:74:8f:
1e:1d:92:75:5b:dd:1d:23:ef:6a:ee:ff:ca:d9:88:
c4:f2:31:c4:20:e6:f6:ce:8e:f2:ca:12:60:e3:af:
ee:65:f6:61:bb:1d:d8:5a:cf:57:c3:cd:e0:31:91:
f0:24:1d:6f:0d:59:36:43:b3:71:90:55:7d:f8:2c:
25:cb:5c:1c:3c:80:4f:9e:f3:d5:bb:b1:d8:a7:d6:
8d:ab:47:83:07:9e:a4:6a:43:3e:76:de:73:b4:15:
8c:53:7b:e0:15:8a:23:79:da:9a:2b:3f:00:45:0b:
ed:6a:d0:52:7a:62:96:72:3a:c1:41:c5:36:df:d5:
cb:5b:28:0f:da:ba:46:08:04:aa:27:70:df:8b:98:
67:c9:e1:06:d6:93:9f:13:14:ba:17:92:ff:10:6e:
35:de:fc:92:55:a0:5f:a9:20:87:59:1e:ac:a4:ae:
50:98:68:4c:8e:cc:d8:d8:9f:fe:66:63:7b:99:5d:
73:05:ec:bf:d4:da:46:81:5c:34:46:97:b7:e5:37:
3f:8c:64:83:fe:99:9e:8d:f2:48:18:2d:04:b1:24:
46:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B4:E5:09:A3:DA:F2:7F:7D:C4:65:9E:01:B2:FB:87:41:B0:F3:1C
X509v3 Authority Key Identifier:
keyid:B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:f5:92:7e:86:13:fd:d1:13:5c:bf:74:4e:c2:1c:5b:4a:9d:
5f:c2:f5:71:54:8f:27:a9:41:4b:2c:0e:64:e6:d3:c7:73:b0:
59:ec:4e:6b:5f:35:16:ba:ad:06:85:2c:97:6f:f4:92:8b:56:
33:b6:a1:67:5f:9f:c5:74:81:5f:54:bf:fb:51:09:aa:4a:1c:
0c:31:b1:84:e6:91:8f:aa:1e:04:08:35:3e:55:08:11:c9:b1:
5f:cc:d6:67:5e:0e:04:ed:be:47:0b:87:36:94:9f:d9:f2:46:
e1:c4:14:21:6e:ca:4b:f0:ae:52:72:ab:d0:05:e6:85:14:d7:
7c:82:11:d3:bf:38:27:17:68:ea:a8:dd:56:72:81:9c:46:bd:
e7:1a:47:45:f4:6a:f2:21:97:90:b6:ef:24:69:de:ec:8f:72:
6d:0c:03:df:ab:93:73:c3:39:62:e2:13:17:aa:6f:28:78:fb:
9e:8d:53:f8:3f:65:0b:02:51:85:d8:cc:7b:a5:35:16:1e:60:
9b:7d:66:e7:ca:01:9a:dc:b0:bd:2f:cd:2b:ef:5b:e8:77:53:
9d:10:c4:b6:1d:84:a5:3b:e1:50:a6:38:60:11:f2:b8:ce:f1:
13:01:25:27:b9:3e:b2:ec:6b:f8:27:18:44:d1:49:f4:ad:fc:
50:8c:4e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:02 2025 by rpki-client