Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
File: 2scQMP4IHgK6tII9BWj_sqMyZeE.mft (raw, json)
Hash identifier: qxvRZRF3kml6JGnqbLTjwoQEXi9pX1VyCdkGn3jOOFI=
Subject key identifier: E4:0C:8A:AB:ED:30:1B:88:31:81:D2:2A:4D:62:77:F5:28:B0:C0:EA
Authority key identifier: DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1
Certificate issuer: /CN=dac71030fe081e02bab4823d0568ffb2a33265e1
Certificate serial: 019849D379031889B5914AECA7E5D407986F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
Manifest number: 0597
Signing time: Sun 27 Jul 2025 03:00:52 +0000
Manifest this update: Sun 27 Jul 2025 03:00:52 +0000
Manifest next update: Mon 28 Jul 2025 03:00:52 +0000
Files and hashes: 1: 2scQMP4IHgK6tII9BWj_sqMyZeE.crl (hash: oNo0SbqQj0BQTrpn9GCeiZi6v4fJrWdCffs80P7zxTc=)
2: _aLDkeMiUI-Lqjzdkv0G6nDIZPI.roa (hash: tmIepxlUbHTd8KHj3iQSk+aTVIsaYnnddWmvrPeDuVM=)
3: cOPYQsOeCFDIc7qGbdrCMUud3Jc.roa (hash: BKdHxeFxd4fi3NghqoltBHVl5UTtuhA/jAVO3pAU5j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:79:03:18:89:b5:91:4a:ec:a7:e5:d4:07:98:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac71030fe081e02bab4823d0568ffb2a33265e1
Validity
Not Before: Jul 27 03:00:52 2025 GMT
Not After : Jul 28 03:00:52 2025 GMT
Subject: CN=e40c8aabed301b883181d22a4d6277f528b0c0ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:12:ca:b1:ac:d2:14:40:df:e5:a4:f2:92:30:
43:ff:dd:c9:d1:71:ea:0b:3e:35:cd:4d:d0:70:63:
1d:b1:50:c3:90:b6:d3:a5:50:74:d7:6f:cf:6e:df:
4f:20:0d:c6:c7:13:fb:73:73:bc:99:ec:31:3c:86:
0e:f6:04:91:d4:92:3e:e7:02:43:68:bc:d3:bf:22:
38:49:ba:19:c7:48:ee:63:84:0f:ac:26:09:15:d2:
7e:ab:ce:3e:9f:7a:00:ee:27:7f:c4:af:86:01:79:
56:59:01:40:9c:bc:96:78:0c:6f:1c:59:ab:90:7e:
e9:32:ab:02:b1:54:e4:4a:ba:60:89:6e:9a:82:00:
25:50:01:e7:15:8f:66:75:ec:2a:fd:64:a6:51:db:
31:cd:d4:97:bd:c6:9a:bf:7f:35:a4:ea:cd:37:67:
03:6a:73:d2:25:06:a4:9d:1f:21:78:6d:8e:45:5c:
55:c5:79:d5:71:a6:e9:fc:3b:8f:ba:d4:7b:a1:b4:
aa:da:66:f1:0d:35:1d:c8:3f:ae:b3:61:ee:7b:93:
7a:8a:fe:42:c4:5e:61:9b:13:f5:51:10:66:83:17:
ce:01:0d:27:4a:36:4f:c3:5b:cd:19:78:62:45:3f:
39:4a:7c:94:cc:7d:82:c0:0c:97:ca:1b:0c:45:42:
16:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:0C:8A:AB:ED:30:1B:88:31:81:D2:2A:4D:62:77:F5:28:B0:C0:EA
X509v3 Authority Key Identifier:
keyid:DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:c3:40:4d:95:25:1f:6b:82:0f:5b:ce:a1:48:00:57:7e:02:
0f:fc:d2:0a:f1:63:b0:c3:6e:9c:a8:97:1f:02:00:d9:e5:1c:
7c:e5:d7:52:31:42:10:22:f1:b7:62:c2:f6:44:89:97:73:c1:
e9:85:d8:3c:da:1d:a9:a0:60:0b:60:f5:07:cb:e7:d4:ee:77:
bb:b3:68:66:7d:f6:48:53:5e:5b:b1:6f:87:91:bc:b7:69:64:
6c:7b:bd:09:07:4d:0d:fe:d0:6b:5d:dc:67:a7:ad:2f:0d:a6:
7b:52:3a:46:5e:6d:b9:11:57:54:77:0c:a9:be:3e:53:d2:79:
a5:c7:74:f9:b7:85:51:37:58:f8:f3:bb:88:ca:36:bc:66:49:
a6:f6:e6:a1:30:e9:b0:85:2d:7d:5f:b1:df:6f:5a:02:08:a6:
7d:9a:77:5d:fd:a9:2e:b3:13:1e:f0:60:92:76:5e:28:9d:f3:
b1:50:75:dd:1f:52:58:8b:f7:53:7c:4c:fa:62:cb:a5:90:8d:
48:2d:62:fc:03:dd:61:cd:95:f6:c6:85:69:6c:84:40:65:cd:
e8:04:86:c0:63:ae:1f:25:fc:2d:e6:e7:5e:2f:52:86:4b:ec:
ce:15:8f:f4:ba:81:12:1d:bc:33:3b:63:39:f8:d6:aa:5d:3b:
9f:42:af:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:26:48 2025 by rpki-client