Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.mft
File: sCqa8vxf6TxDFIqssTxRvpBMjkw.mft (raw, json)
Hash identifier: eXytYa4ZilxcWg0mF5Ue6+P8JQFHOHPazsHfJ8LIDNw=
Subject key identifier: 2A:35:22:C9:D8:A1:83:68:8E:1F:81:89:C7:59:3D:62:23:83:A8:EB
Authority key identifier: B0:2A:9A:F2:FC:5F:E9:3C:43:14:8A:AC:B1:3C:51:BE:90:4C:8E:4C
Certificate issuer: /CN=b02a9af2fc5fe93c43148aacb13c51be904c8e4c
Certificate serial: 0198375EC16B6D2FD5A7B3ADAE5C37F3C3E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCqa8vxf6TxDFIqssTxRvpBMjkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.mft
Manifest number: 0432
Signing time: Wed 23 Jul 2025 13:00:13 +0000
Manifest this update: Wed 23 Jul 2025 13:00:13 +0000
Manifest next update: Thu 24 Jul 2025 13:00:13 +0000
Files and hashes: 1: RLYBpjQJ_nWnvtQxzs5jpfZ53LI.roa (hash: WydSL9s2ghSAkXvNPUv+LZJE2s3aihvIV2UvrS6hIBw=)
2: sCqa8vxf6TxDFIqssTxRvpBMjkw.crl (hash: BzehB4jTD/EZPls7TeC5mRVt0S3scMJQ0J4WRnWzQLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCqa8vxf6TxDFIqssTxRvpBMjkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 13:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:37:5e:c1:6b:6d:2f:d5:a7:b3:ad:ae:5c:37:f3:c3:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02a9af2fc5fe93c43148aacb13c51be904c8e4c
Validity
Not Before: Jul 23 13:00:13 2025 GMT
Not After : Jul 24 13:00:13 2025 GMT
Subject: CN=2a3522c9d8a183688e1f8189c7593d622383a8eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:68:0a:d7:c6:2b:f4:e0:b6:73:65:bd:cb:06:
f7:22:32:8b:f5:56:5b:e3:f8:b3:4c:e9:e8:e4:f7:
55:dc:e4:a0:c0:12:9f:19:71:ab:31:d0:7d:cf:fd:
38:43:37:83:61:68:a3:8c:2d:e4:8d:23:47:21:52:
f1:97:0c:bf:c9:b9:1c:f9:03:24:9f:c7:c8:7c:40:
0c:c6:68:02:a8:76:df:75:34:75:f9:c5:b9:6a:f0:
67:77:4b:a3:b7:b6:95:7d:ac:70:97:89:06:a2:5e:
3c:d1:44:ec:95:5b:d9:0b:78:24:ea:2b:ca:99:0b:
e6:a1:fb:b1:8f:90:4b:b1:11:99:88:5a:87:46:40:
08:19:72:05:74:1b:b4:3d:bc:e8:1e:09:bc:81:37:
64:49:69:cf:49:2a:40:f7:4a:da:8d:36:07:f8:85:
14:4b:97:5e:89:83:ee:55:c8:31:12:36:ac:ff:8c:
32:17:d5:76:e0:f8:f4:4a:c5:7c:ee:86:5e:f9:b9:
54:26:a3:72:fa:ff:64:db:60:f4:58:c4:31:59:ef:
01:17:fb:54:9d:84:df:6a:4c:39:e8:12:ba:66:14:
2e:bd:b1:11:fc:1f:86:f7:2e:f6:e5:de:20:d6:17:
71:91:a8:7a:32:ee:f4:8b:ed:11:ab:ab:96:7d:c5:
c5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:35:22:C9:D8:A1:83:68:8E:1F:81:89:C7:59:3D:62:23:83:A8:EB
X509v3 Authority Key Identifier:
keyid:B0:2A:9A:F2:FC:5F:E9:3C:43:14:8A:AC:B1:3C:51:BE:90:4C:8E:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCqa8vxf6TxDFIqssTxRvpBMjkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:1c:3a:62:de:89:2f:69:7d:76:6f:33:62:fb:6e:e9:68:66:
9b:d8:b0:fb:b1:88:6c:95:4d:01:99:74:8d:6d:b1:8a:43:c7:
3d:9c:76:a1:a6:57:06:c6:d3:0e:f8:e5:5a:22:47:b5:1b:53:
cf:d3:3d:ae:a2:d3:17:b2:9e:39:19:bb:62:a8:76:c1:29:ec:
bf:9e:9e:23:7b:73:04:b3:b2:15:0f:b6:3c:5f:2a:1d:59:ff:
6a:64:34:25:cb:50:d2:36:96:cd:bb:3d:42:67:bb:d6:f5:58:
9d:8d:50:d5:e3:26:9e:1c:4c:58:ea:3c:9e:c2:cb:2e:a8:7b:
31:df:da:1b:fe:ef:8b:de:fa:1b:fd:6b:10:c0:07:1c:86:92:
cb:a0:3c:8e:9a:57:79:0d:1d:24:5a:4c:08:68:0f:22:65:fb:
36:b5:39:44:02:e7:82:0c:f6:6a:c5:7c:a6:82:3b:3b:9a:42:
89:58:c9:99:38:1a:b1:d0:b2:3b:cb:16:1b:e7:2a:5e:b6:6a:
66:0a:55:82:8a:41:71:b4:0a:06:87:4d:b7:cb:f5:6f:0a:c3:
7a:10:0a:4f:ef:dc:37:ce:0f:36:41:f0:c9:fb:6e:08:0b:5a:
a4:2f:2c:7c:ac:af:1a:fe:34:9c:8b:dc:32:09:b0:b2:63:6a:
6e:20:05:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 22:47:01 2025 by rpki-client