Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.mft
File: scIIojstTYe-k_idUyvG9EkIgZs.mft (raw, json)
Hash identifier: uEubdR9vjuvRKgopzS6ordm19PY1ipZ9p1aPGshKjRc=
Subject key identifier: 3B:7E:37:4B:28:2A:8D:6A:55:00:F6:9D:10:9B:E1:DA:24:6C:58:25
Authority key identifier: B1:C2:08:A2:3B:2D:4D:87:BE:93:F8:9D:53:2B:C6:F4:49:08:81:9B
Certificate issuer: /CN=b1c208a23b2d4d87be93f89d532bc6f44908819b
Certificate serial: 0197B7B35C5BCFA64F63EDED5D4643978708
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scIIojstTYe-k_idUyvG9EkIgZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.mft
Manifest number: 0A19
Signing time: Sat 28 Jun 2025 18:01:14 +0000
Manifest this update: Sat 28 Jun 2025 18:01:14 +0000
Manifest next update: Sun 29 Jun 2025 18:01:14 +0000
Files and hashes: 1: St1eW7huW5NWmrTlCcZNOVav4YY.roa (hash: L1r59p9it1NHOb7n3iknNAhhpFyt7umgYxP2fwKVRnQ=)
2: scIIojstTYe-k_idUyvG9EkIgZs.crl (hash: beE9xpOh8jQwaQaLqmKvtMDTFBQoXovWZhuXZ7WF28s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/scIIojstTYe-k_idUyvG9EkIgZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:5c:5b:cf:a6:4f:63:ed:ed:5d:46:43:97:87:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c208a23b2d4d87be93f89d532bc6f44908819b
Validity
Not Before: Jun 28 18:01:14 2025 GMT
Not After : Jun 29 18:01:14 2025 GMT
Subject: CN=3b7e374b282a8d6a5500f69d109be1da246c5825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3f:89:ac:b6:7e:e4:23:b9:7f:ef:7a:cb:b8:
1c:e0:71:dc:69:29:92:63:2a:72:86:76:51:3a:f0:
ca:ec:03:9f:6a:cf:57:64:c7:e8:bd:3b:cd:94:d6:
0e:86:b8:9f:4b:f8:c6:73:de:b9:70:ba:75:b6:9a:
25:01:48:18:26:eb:19:fe:5e:66:8e:56:ec:83:78:
7e:71:3e:28:1b:95:b3:b3:40:1a:90:55:55:2d:f9:
51:b0:9e:3c:3c:4c:57:4a:18:81:ee:fc:62:b5:73:
46:1e:00:9a:ec:9e:e8:4c:b1:5b:a4:53:c0:65:59:
a2:2b:43:47:bb:03:73:49:63:38:65:06:97:9f:83:
b6:ad:4f:2c:2a:1a:3d:ec:84:90:92:49:56:0c:51:
e6:d2:46:53:37:c1:3e:ed:fc:29:d5:9f:fa:c2:51:
05:fc:f4:32:12:ae:fa:42:66:6f:d7:b1:39:73:a3:
63:35:70:02:e1:e0:74:e9:69:d7:7e:c2:82:07:d1:
a3:f1:3e:c4:96:75:a4:b3:b7:71:9b:36:a3:d7:97:
e0:dd:df:28:df:da:de:32:ef:73:ca:f3:07:b3:a3:
8b:5e:84:a5:52:53:90:18:c2:19:d0:5a:19:61:30:
3c:50:e0:a5:89:73:ef:47:29:1b:d4:29:1e:7c:34:
8b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:7E:37:4B:28:2A:8D:6A:55:00:F6:9D:10:9B:E1:DA:24:6C:58:25
X509v3 Authority Key Identifier:
keyid:B1:C2:08:A2:3B:2D:4D:87:BE:93:F8:9D:53:2B:C6:F4:49:08:81:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scIIojstTYe-k_idUyvG9EkIgZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:42:09:87:85:85:66:27:31:9e:c5:09:5a:c0:2a:0a:2a:db:
cf:e3:35:47:d7:e6:ca:91:e5:5f:40:e3:b1:1d:fb:28:de:d1:
58:4c:da:a4:05:6c:c7:52:ff:c3:e0:96:cf:22:6f:9d:d9:88:
fb:92:d8:ca:47:c0:7d:04:b6:00:51:89:eb:61:17:4d:4b:cb:
05:08:b2:12:8d:d5:9c:40:b6:1c:c1:79:9f:7c:4a:1d:28:9e:
e9:41:e6:42:8d:89:29:1f:62:3e:8e:05:c1:8e:92:b3:ce:50:
f1:75:57:6b:1d:09:e1:42:fc:54:e8:a1:b0:4f:64:95:ae:97:
82:d1:b7:88:b5:0b:20:ee:74:aa:b9:bf:77:99:9f:c7:31:a3:
00:71:c0:b2:fb:5f:c8:7a:14:33:1d:ae:68:4a:dc:00:7c:dd:
f6:88:9d:a6:f0:19:e1:07:be:ac:35:6e:82:f5:98:13:40:87:
6b:3d:b5:80:6d:62:b9:33:47:81:2b:c7:4f:b4:d3:b3:07:ae:
4d:cb:af:ce:e7:44:a1:9c:0a:c6:b0:b4:b0:55:38:ff:90:0b:
5b:0e:b7:73:41:5b:9f:a2:d7:3a:5d:a0:16:51:04:ec:30:dd:
a3:f5:75:98:0b:8d:4f:5f:0c:d7:c2:87:1a:21:ec:38:78:0b:
ef:c0:9c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:18:25 2025 by rpki-client