Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.mft
File: sCqa8vxf6TxDFIqssTxRvpBMjkw.mft (raw, json)
Hash identifier: QHD95ARxuJXaMFbHlDVB3egAPiH83GELNzbS0C4ShEw=
Subject key identifier: 19:F0:D3:FC:E8:32:34:6F:EC:2D:08:C4:D3:A1:CA:DD:CA:ED:98:75
Authority key identifier: B0:2A:9A:F2:FC:5F:E9:3C:43:14:8A:AC:B1:3C:51:BE:90:4C:8E:4C
Certificate issuer: /CN=b02a9af2fc5fe93c43148aacb13c51be904c8e4c
Certificate serial: 0198D5BC01A4F20D333C0B39E9E452A04FFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCqa8vxf6TxDFIqssTxRvpBMjkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.mft
Manifest number: 0484
Signing time: Sat 23 Aug 2025 07:02:04 +0000
Manifest this update: Sat 23 Aug 2025 07:02:04 +0000
Manifest next update: Sun 24 Aug 2025 07:02:04 +0000
Files and hashes: 1: RLYBpjQJ_nWnvtQxzs5jpfZ53LI.roa (hash: WydSL9s2ghSAkXvNPUv+LZJE2s3aihvIV2UvrS6hIBw=)
2: sCqa8vxf6TxDFIqssTxRvpBMjkw.crl (hash: k729/AgoM5D4ZWwbWwthfB9RHY3BJwBeGKF9Nz1Xp5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCqa8vxf6TxDFIqssTxRvpBMjkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:01:a4:f2:0d:33:3c:0b:39:e9:e4:52:a0:4f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02a9af2fc5fe93c43148aacb13c51be904c8e4c
Validity
Not Before: Aug 23 07:02:04 2025 GMT
Not After : Aug 24 07:02:04 2025 GMT
Subject: CN=19f0d3fce832346fec2d08c4d3a1caddcaed9875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a4:bb:f2:a1:c4:e9:9c:de:f4:dd:cd:be:68:
fd:40:26:85:36:8c:37:28:1c:65:5e:83:0b:23:45:
a0:f9:1a:20:5d:30:30:23:ee:8f:4f:b7:d2:d0:4c:
4a:50:3e:39:65:70:a4:d9:50:d5:7d:06:ae:2c:a2:
c6:3a:3b:88:70:05:bf:06:4a:6c:ca:44:c8:8d:4c:
5c:6a:56:3b:a3:74:c3:f0:7b:82:d8:58:9b:be:c3:
33:15:c7:30:dc:1c:8a:b8:e3:2b:be:3f:89:bb:12:
82:b1:19:9c:94:e6:ca:9d:77:30:aa:8f:59:b6:a6:
30:29:7f:15:27:07:d9:2c:71:ce:a7:c5:56:1a:4d:
e2:73:a7:e8:66:58:b4:63:ea:a7:f3:85:f7:19:d1:
31:08:ec:70:51:92:95:70:e8:4e:b8:15:fc:57:82:
b8:7c:34:93:3c:ad:6d:e1:42:db:28:a4:a5:a6:f6:
3b:f9:88:92:11:00:30:a2:2a:67:f1:b8:21:25:15:
f4:fd:cc:7a:04:68:9e:d4:33:3c:14:2f:bb:02:81:
37:21:b1:70:30:0d:cd:0f:5b:f4:8e:29:74:cf:4d:
5c:a8:16:94:4d:27:05:56:c0:1b:18:fb:de:1b:06:
e3:d9:fc:28:e4:d9:8c:06:3f:b5:43:c4:85:49:b8:
cf:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F0:D3:FC:E8:32:34:6F:EC:2D:08:C4:D3:A1:CA:DD:CA:ED:98:75
X509v3 Authority Key Identifier:
keyid:B0:2A:9A:F2:FC:5F:E9:3C:43:14:8A:AC:B1:3C:51:BE:90:4C:8E:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCqa8vxf6TxDFIqssTxRvpBMjkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:d9:09:f9:f4:0f:a0:2d:1a:5c:61:20:5f:9e:18:7f:3e:7b:
1d:e4:45:f7:c2:42:54:22:09:ed:f0:ca:f9:fe:29:3c:99:4f:
d0:17:ae:a8:b9:9f:91:11:f2:b3:f1:f2:c1:55:c7:34:9a:d8:
89:94:97:6d:56:40:12:54:5c:4b:48:cf:30:5b:00:b5:02:27:
d7:d4:1b:b5:30:70:81:07:0c:b3:94:9b:21:98:11:fd:84:9b:
ff:ce:c7:68:8e:15:61:04:31:c5:0e:ff:3a:fa:eb:ca:21:9f:
5d:4b:e2:05:ec:cf:86:4e:b1:18:31:ce:b5:e5:2f:15:f2:71:
49:f1:b2:ab:40:ef:c5:d0:b4:70:60:b1:39:a9:ab:21:2d:51:
93:d1:64:e3:6a:a0:9f:1a:6f:bb:8a:19:5a:27:b7:01:cd:8f:
7d:8e:e0:b2:3d:82:ba:8b:36:5b:47:04:f3:91:53:d5:8f:50:
6b:48:05:ea:75:ba:78:16:eb:0a:cf:1a:56:b9:7c:03:45:f2:
7c:11:86:54:61:f6:bf:d5:b0:af:2e:4a:0c:f5:ca:e1:d0:2e:
57:1b:ec:56:1a:cc:ea:52:6a:97:76:6a:b3:f2:75:c6:ca:50:
33:08:0e:d4:23:d2:87:a2:c8:48:6c:96:9c:bc:9f:fe:22:e5:
bb:eb:e2:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvAGk8g0zPAs56eRSoE//MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMmE5YWYyZmM1ZmU5M2M0MzE0OGFhY2IxM2M1MWJlOTA0
YzhlNGMwHhcNMjUwODIzMDcwMjA0WhcNMjUwODI0MDcwMjA0WjAzMTEwLwYDVQQD
EygxOWYwZDNmY2U4MzIzNDZmZWMyZDA4YzRkM2ExY2FkZGNhZWQ5ODc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaS78qHE6Zze9N3Nvmj9QCaFNow3
KBxlXoMLI0Wg+RogXTAwI+6PT7fS0ExKUD45ZXCk2VDVfQauLKLGOjuIcAW/Bkps
ykTIjUxcalY7o3TD8HuC2FibvsMzFccw3ByKuOMrvj+JuxKCsRmclObKnXcwqo9Z
tqYwKX8VJwfZLHHOp8VWGk3ic6foZli0Y+qn84X3GdExCOxwUZKVcOhOuBX8V4K4
fDSTPK1t4ULbKKSlpvY7+YiSEQAwoipn8bghJRX0/cx6BGie1DM8FC+7AoE3IbFw
MA3ND1v0jil0z01cqBaUTScFVsAbGPveGwbj2fwo5NmMBj+1Q8SFSbjPuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBnw0/zoMjRv7C0IxNOhyt3K7Zh1MB8GA1UdIwQY
MBaAFLAqmvL8X+k8QxSKrLE8Ub6QTI5MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0NxYTh2eGY2VHhERklxc3NUeFJ2cEJNamt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8wYTYwY2UtYmIzNy00MzM3LWJmNTAt
NWVjYTM2ZTE5ZjVkLzEvc0NxYTh2eGY2VHhERklxc3NUeFJ2cEJNamt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8wYTYwY2UtYmIzNy00MzM3LWJmNTAtNWVjYTM2ZTE5ZjVk
LzEvc0NxYTh2eGY2VHhERklxc3NUeFJ2cEJNamt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGtkJ+fQP
oC0aXGEgX54Yfz57HeRF98JCVCIJ7fDK+f4pPJlP0BeuqLmfkRHys/HywVXHNJrY
iZSXbVZAElRcS0jPMFsAtQIn19QbtTBwgQcMs5SbIZgR/YSb/87HaI4VYQQxxQ7/
OvrryiGfXUviBezPhk6xGDHOteUvFfJxSfGyq0DvxdC0cGCxOamrIS1Rk9Fk42qg
nxpvu4oZWie3Ac2PfY7gsj2Cuos2W0cE85FT1Y9Qa0gF6nW6eBbrCs8aVrl8A0Xy
fBGGVGH2v9Wwry5KDPXK4dAuVxvsVhrM6lJql3Zqs/J1xspQMwgO1CPSh6LISGyW
nLyf/iLlu+viYg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:11 2025 by rpki-client