
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft
File: Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft (raw, json)
Hash identifier: +2bAK9Tup/VA1ZcttA+nRUxZ+QQIBYFe+OE9R1zEiVU=
Subject key identifier: ED:E6:99:71:29:38:79:71:F8:D7:58:7D:C6:32:CD:3E:B0:95:65:65
Authority key identifier: 49:CD:9E:C8:E5:3F:8F:C2:A3:5E:91:B7:70:14:F6:A7:3D:8B:5B:3D
Certificate issuer: /CN=49cd9ec8e53f8fc2a35e91b77014f6a73d8b5b3d
Certificate serial: 0198526842C80B255662F50F6D9C271F073D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft
Manifest number: 11EB
Signing time: Mon 28 Jul 2025 19:00:21 +0000
Manifest this update: Mon 28 Jul 2025 19:00:21 +0000
Manifest next update: Tue 29 Jul 2025 19:00:21 +0000
Files and hashes: 1: NSiBzROOhgmJ9ypJm8Za0IGQ3F0.roa (hash: o2v8vxJ4hYMUAZbmBnTv+Psah74MuG6cFMK+pUBuCMg=)
2: Sc2eyOU_j8KjXpG3cBT2pz2LWz0.crl (hash: xlmzffUxULp+BuqVJFhErxy/4ohqx4EKb0s+7DAA9Hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 19:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:68:42:c8:0b:25:56:62:f5:0f:6d:9c:27:1f:07:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49cd9ec8e53f8fc2a35e91b77014f6a73d8b5b3d
Validity
Not Before: Jul 28 19:00:21 2025 GMT
Not After : Jul 29 19:00:21 2025 GMT
Subject: CN=ede6997129387971f8d7587dc632cd3eb0956565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ca:41:c3:48:fc:16:dd:a2:77:81:eb:91:a2:
67:56:4f:6d:ed:8f:90:17:e1:3a:73:f2:09:06:aa:
a8:eb:f6:01:96:a5:ef:06:64:2e:66:59:eb:20:8a:
e5:9f:34:17:f7:ab:1a:81:ab:ff:9f:ed:42:73:2d:
41:50:45:ff:ef:b9:1d:c7:e7:2c:84:5a:55:ec:d8:
cf:14:d8:e3:cd:39:3c:ae:dc:66:8f:31:63:b2:48:
e8:9a:63:52:22:24:9e:62:53:85:b5:66:44:51:56:
66:40:29:1b:18:ec:19:09:8b:dd:a8:45:5c:11:d6:
08:ce:aa:52:10:ef:82:10:02:02:ab:a2:5b:86:5d:
76:c0:7c:a3:61:f9:3c:75:26:46:bb:9e:a3:3c:b1:
55:70:69:71:d0:e8:17:6d:c7:23:ef:74:ec:4e:8b:
42:26:47:1d:1e:63:db:95:63:64:b1:3e:10:60:56:
95:ec:a5:52:a4:b9:ac:a3:f9:84:25:63:16:8e:95:
6c:4c:ae:3f:89:93:6b:54:6f:6f:fd:06:2c:a6:64:
c7:d4:6e:e3:50:f7:61:98:db:1c:4c:ee:f0:ed:f7:
67:3b:77:54:33:67:a1:c1:4e:dd:e0:ff:98:e4:cc:
33:d1:eb:9e:be:7f:56:10:d5:be:09:a7:b9:64:eb:
97:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E6:99:71:29:38:79:71:F8:D7:58:7D:C6:32:CD:3E:B0:95:65:65
X509v3 Authority Key Identifier:
keyid:49:CD:9E:C8:E5:3F:8F:C2:A3:5E:91:B7:70:14:F6:A7:3D:8B:5B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:68:c6:7e:10:17:e3:a1:e5:da:58:66:6f:d2:8b:8b:8c:1b:
35:ad:73:b9:f2:54:be:c7:f8:97:e0:9e:b9:f3:c4:ed:8a:39:
79:cd:c6:d0:3d:3b:b2:8c:f7:75:0c:f3:66:d8:cc:c4:9e:4b:
a5:60:d3:ac:39:24:5c:9e:7d:f6:ff:b3:85:86:6d:3e:8f:0a:
7c:58:f5:26:3a:6b:1f:ae:58:22:c8:9d:ab:11:f7:e3:a7:f9:
63:ba:26:78:72:49:14:5f:67:9a:95:f2:e9:5d:4a:39:24:81:
7f:8e:33:46:75:99:fb:0c:f6:11:63:ee:e7:df:a1:7f:70:15:
67:c1:b3:24:06:35:c3:09:a7:d5:10:a1:aa:d7:b2:f3:dd:06:
c9:27:a8:73:2c:0b:cd:5b:5d:3f:7f:64:d0:24:d0:1a:eb:9d:
2a:9f:07:d0:28:58:96:4c:3f:1f:24:8d:a8:09:e7:5e:66:68:
50:3e:81:88:16:8b:f9:52:f9:76:5d:3a:be:b5:4a:3a:47:15:
a5:1b:b7:3b:0c:ba:ef:f9:ab:6f:ed:64:4b:b2:2e:47:2c:11:
89:00:84:a2:08:b5:5a:e2:d4:b4:65:d0:ef:dc:3d:66:dd:8f:
43:af:7e:0c:75:c9:93:bc:56:54:1b:f1:58:26:f7:46:2b:ee:
cd:6e:e5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:38:36 2025 by rpki-client