Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
File: x2cScLac7FBGBrEmxMqDOBavfaQ.mft (raw, json)
Hash identifier: QRAaivZCgrIwYraW52crx3SZIsB/LzvBrCj5OtkMZz8=
Subject key identifier: 3D:E2:8D:D6:AF:F5:FC:51:14:3C:4C:CE:AD:BB:6D:8A:E7:E7:83:41
Authority key identifier: C7:67:12:70:B6:9C:EC:50:46:06:B1:26:C4:CA:83:38:16:AF:7D:A4
Certificate issuer: /CN=c7671270b69cec504606b126c4ca833816af7da4
Certificate serial: 01974AE86AEDE028FC886525D5B7BA19AD39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2cScLac7FBGBrEmxMqDOBavfaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
Manifest number: 0651
Signing time: Sat 07 Jun 2025 15:00:34 +0000
Manifest this update: Sat 07 Jun 2025 15:00:34 +0000
Manifest next update: Sun 08 Jun 2025 15:00:34 +0000
Files and hashes: 1: l2_sIOs4HMyf2OgLQgyJY2hl_f0.roa (hash: ux1UyG4HPgGv7Al9zX4rAYUS2Y3nKcLtZPuBWZDi2xs=)
2: x2cScLac7FBGBrEmxMqDOBavfaQ.crl (hash: okPQOeI6WgI4Oq46hNCvrCEem4qxyfcxdawDEVORwXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2cScLac7FBGBrEmxMqDOBavfaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:6a:ed:e0:28:fc:88:65:25:d5:b7:ba:19:ad:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7671270b69cec504606b126c4ca833816af7da4
Validity
Not Before: Jun 7 15:00:34 2025 GMT
Not After : Jun 8 15:00:34 2025 GMT
Subject: CN=3de28dd6aff5fc51143c4cceadbb6d8ae7e78341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1d:28:ee:e8:b0:12:c9:1e:bb:87:60:ec:f8:
6e:8f:56:ac:a0:f0:ef:73:7b:1c:c0:59:aa:d0:36:
71:6b:d6:bf:85:d7:29:31:7d:b6:a6:9b:dd:49:15:
6b:d3:4b:36:e4:06:21:fe:71:64:f6:5c:33:5a:16:
a2:1f:c8:f8:15:62:c3:b8:1b:8b:ed:a5:a8:be:04:
fb:77:e2:61:1f:43:02:04:5f:ff:a2:5d:b3:dd:fa:
24:fe:ae:87:b8:8a:53:4b:37:76:b6:14:6d:cf:00:
73:2c:6f:8e:bd:38:ef:58:5d:15:0c:4c:26:07:10:
4e:21:f0:7a:e5:c7:65:6f:e7:fc:60:3e:09:2e:2d:
14:f9:93:b3:95:06:2a:b7:52:52:8e:ac:54:2d:c8:
d2:e4:2a:25:2d:80:c5:3b:0c:57:27:57:fc:df:67:
b2:52:11:bc:e9:4a:22:6e:de:52:f0:ae:22:2c:fb:
1e:d3:e7:84:da:a8:92:6c:40:0f:ba:40:1c:39:68:
a6:5b:52:f4:20:63:1f:b5:55:95:79:0d:d7:ba:27:
38:e4:89:ab:a4:4b:3c:7a:1e:8c:db:53:c2:e4:97:
3d:29:31:c6:c1:a4:ea:31:52:13:57:65:71:a6:f2:
dd:5c:55:22:fd:04:39:31:b9:1f:23:ea:e7:6e:7f:
70:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E2:8D:D6:AF:F5:FC:51:14:3C:4C:CE:AD:BB:6D:8A:E7:E7:83:41
X509v3 Authority Key Identifier:
keyid:C7:67:12:70:B6:9C:EC:50:46:06:B1:26:C4:CA:83:38:16:AF:7D:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2cScLac7FBGBrEmxMqDOBavfaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:80:be:80:39:37:2e:e8:35:45:bb:7f:cb:90:f6:d6:c9:70:
5e:1e:80:76:6e:1c:50:c1:bc:f8:a6:7a:81:8a:75:45:aa:6e:
f8:5c:08:c1:f4:e1:b3:0d:8d:56:8c:4c:89:22:ba:ae:be:15:
e0:06:05:a4:ea:72:20:83:ce:37:ba:1b:b0:30:45:5b:25:6c:
cd:ce:42:6f:36:0b:2c:ec:81:a6:d0:ab:64:eb:0e:80:32:cf:
c2:6e:9c:b9:61:85:4c:3e:03:42:7b:f1:54:d5:e5:fd:16:8e:
ad:3d:82:4d:15:82:3e:ab:33:ee:66:39:b4:3b:cc:9e:30:c5:
4b:76:09:b2:64:2f:a2:43:77:60:04:c4:0b:f2:3e:3e:80:9f:
d9:1c:ca:f6:4f:d5:47:1e:04:89:b3:f4:37:0b:c3:6a:a3:34:
9d:48:80:56:64:49:47:0d:d7:59:7b:46:5f:fb:42:f8:1c:2e:
e1:b8:55:2c:49:10:82:b1:30:ce:bd:6f:68:a5:93:cc:31:ba:
2a:a1:0a:96:f8:df:ca:5a:cc:07:10:14:dd:b5:b5:63:0e:ab:
68:54:8e:b1:64:f7:f8:21:7b:87:9d:8e:97:1b:46:24:f6:7f:
0b:c2:09:56:d2:4e:92:30:3d:bb:58:1f:6d:1c:6b:f4:a6:f6:
4a:a2:b9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:12:52 2025 by rpki-client