Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
File: scPsU58j7gMao5asXO1CVjiEt7M.mft (raw, json)
Hash identifier: JZ/6o3WVvlGEyWvOTUYIAxWq0/ERD4fclWeKTluXQBQ=
Subject key identifier: 14:E5:30:AA:C0:C1:41:60:3E:90:83:F0:DB:57:16:72:28:45:57:9A
Authority key identifier: B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
Certificate issuer: /CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Certificate serial: 0197B9D89E9B5EC40AD81C54367240F1D24D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
Manifest number: 0872
Signing time: Sun 29 Jun 2025 04:01:10 +0000
Manifest this update: Sun 29 Jun 2025 04:01:10 +0000
Manifest next update: Mon 30 Jun 2025 04:01:10 +0000
Files and hashes: 1: YggPTsSNi-M37lrKOeIMBOEQEh0.roa (hash: QqUu1L/3s6oQrDkvCSSy8nc3UlcW3BrRdN7rqT/pHRE=)
2: b4AGcn0hWNQHufubVLqGkpQqCJU.roa (hash: TffukrxORwRZt6LrZ4vP1Br2diZAMHQpSo83hi5snQM=)
3: scPsU58j7gMao5asXO1CVjiEt7M.crl (hash: RBtKusiTtDpkw/M3I3CVsGVj9ZRkwWvS9sMRim3RYTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d8:9e:9b:5e:c4:0a:d8:1c:54:36:72:40:f1:d2:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Validity
Not Before: Jun 29 04:01:10 2025 GMT
Not After : Jun 30 04:01:10 2025 GMT
Subject: CN=14e530aac0c141603e9083f0db5716722845579a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e6:cb:e0:f3:d2:b1:6e:6b:c5:36:67:78:8e:
6c:d1:85:4c:fb:d2:9e:f0:b7:8d:3c:16:20:8a:47:
c5:5a:c0:ae:94:1b:05:68:10:ed:ea:ea:c4:59:a4:
5b:7c:03:01:75:04:54:67:85:af:0d:17:1a:32:e0:
79:30:f6:35:3a:a1:1d:d5:30:99:56:6d:81:1d:7d:
d4:7e:6d:18:8e:28:a6:70:4c:67:07:99:39:0a:38:
23:32:72:3d:54:cc:45:0e:6e:2f:bf:cf:ac:79:38:
fc:68:de:f3:d9:ff:97:cc:37:c4:69:12:14:f3:b2:
c3:b1:c2:01:cb:e9:cd:2d:19:a4:dd:21:c0:0b:9d:
9c:92:b0:b5:96:4a:5f:0f:a1:da:e9:5b:53:19:c9:
f1:50:69:44:52:0d:3c:28:44:69:db:fe:39:83:8a:
af:a1:05:c3:58:16:36:22:2c:d5:f6:f6:8c:08:26:
ed:1b:17:30:3b:cf:bf:e7:ba:3b:50:a6:97:fd:90:
a0:1f:f9:fe:9c:52:91:97:26:03:f8:2e:cd:0c:ef:
87:06:76:05:b2:55:4b:82:8a:34:9b:1f:f4:34:06:
4b:02:94:78:c8:bf:00:8a:24:90:17:d2:92:bc:5d:
3b:41:07:1a:65:c6:4b:28:e3:d1:cd:e1:97:ec:02:
c1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E5:30:AA:C0:C1:41:60:3E:90:83:F0:DB:57:16:72:28:45:57:9A
X509v3 Authority Key Identifier:
keyid:B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:d5:2e:cc:f7:2d:8a:2c:57:8d:09:c5:de:0e:4a:72:be:15:
76:a7:2e:9f:41:19:45:1b:b0:88:8c:9e:7e:19:aa:2f:fc:1c:
1d:e3:bb:51:a2:4c:ac:c8:95:8d:e6:a6:df:4c:ab:98:34:49:
ed:04:3d:69:12:02:ce:6a:19:a9:32:cf:4e:f5:2b:6e:24:b1:
5f:ec:38:aa:3b:8b:c1:69:38:68:80:c6:a5:0c:66:d5:3f:79:
25:84:23:bc:76:05:77:e0:36:88:90:41:fb:9b:39:cf:23:f9:
86:7c:2c:f7:9a:13:0b:af:d8:8e:b6:1c:b2:9b:7d:d6:c1:78:
b3:eb:ba:3c:d9:ec:c1:ff:3a:41:d3:a3:6e:cc:33:9d:3f:07:
48:d3:6a:8d:8e:93:75:e0:c7:f8:e0:39:24:77:6a:ab:8f:d7:
f2:01:1c:69:d1:58:fd:f2:a2:54:8d:95:96:71:9c:6c:83:b7:
22:de:fe:b6:95:77:52:3d:2d:f5:a1:99:0d:aa:04:f7:33:1b:
57:a8:31:13:c0:29:39:28:0e:e0:c5:96:03:3f:5d:a1:3a:72:
5c:78:49:32:01:0d:2c:d8:1f:31:88:91:36:b1:65:8f:71:db:
b5:7e:62:e0:d9:c0:a2:49:55:2b:f2:5b:22:84:87:c8:62:6d:
47:f3:6d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:21:24 2025 by rpki-client