Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
File: scPsU58j7gMao5asXO1CVjiEt7M.mft (raw, json)
Hash identifier: IsqkTRZ+mmBtu/V4eeHJEMWU3Q6vThOiUjRi5FalGQQ=
Subject key identifier: D2:EA:62:33:BF:5F:4F:F6:1D:3A:84:AE:19:75:89:F6:7D:38:64:62
Authority key identifier: B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
Certificate issuer: /CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Certificate serial: 01964CD94F5A60DAB8039B62FC4FA3C07F44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
Manifest number: 07B5
Signing time: Sat 19 Apr 2025 07:00:32 +0000
Manifest this update: Sat 19 Apr 2025 07:00:32 +0000
Manifest next update: Sun 20 Apr 2025 07:00:32 +0000
Files and hashes: 1: YggPTsSNi-M37lrKOeIMBOEQEh0.roa (hash: QqUu1L/3s6oQrDkvCSSy8nc3UlcW3BrRdN7rqT/pHRE=)
2: b4AGcn0hWNQHufubVLqGkpQqCJU.roa (hash: TffukrxORwRZt6LrZ4vP1Br2diZAMHQpSo83hi5snQM=)
3: scPsU58j7gMao5asXO1CVjiEt7M.crl (hash: /uLiuqhRjQGZK7BnFCY7E/D5nhswo7/S+DlIml4/FiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:d9:4f:5a:60:da:b8:03:9b:62:fc:4f:a3:c0:7f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Validity
Not Before: Apr 19 07:00:32 2025 GMT
Not After : Apr 20 07:00:32 2025 GMT
Subject: CN=d2ea6233bf5f4ff61d3a84ae197589f67d386462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8a:5f:16:2e:41:2f:6b:e3:0e:5d:37:ee:64:
83:55:31:e5:2f:45:88:41:5e:f8:73:8b:d8:e8:29:
c4:e8:0a:84:bf:8e:9b:ed:30:c9:46:12:5b:24:ec:
7f:8a:60:2a:df:0f:ca:d7:10:99:66:21:55:d3:6e:
b9:ee:46:40:6d:d8:0e:f2:bd:15:bb:75:fb:f4:8c:
3e:aa:f1:c0:f3:32:6a:be:cd:4a:cb:5d:7f:ca:da:
b1:48:84:0c:6b:a2:a3:74:a3:ac:fe:fc:32:e5:bc:
35:63:eb:7f:5f:ec:3d:00:f5:fa:e2:75:53:00:1e:
af:91:03:48:1b:c9:c3:39:cb:be:c1:38:47:40:01:
37:8a:ce:c7:a4:8a:73:1a:3b:58:63:8e:73:10:05:
8d:48:91:23:f6:86:f7:b7:64:0f:b9:23:94:a1:9d:
a4:fb:45:42:53:e1:cd:e3:c7:41:7a:d7:41:35:6f:
c0:69:1a:7a:7c:9f:f4:f2:f7:e1:52:25:d9:3a:d1:
38:37:47:39:4a:6d:7e:4d:d6:9e:74:44:57:dc:3f:
a0:0d:01:dc:5a:0c:a5:fe:a8:83:d9:68:94:83:90:
5f:82:89:de:de:cf:61:c1:0a:a4:8c:a3:b6:45:f0:
ec:df:25:bc:31:68:86:e1:79:4d:47:2e:4a:da:6f:
96:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:EA:62:33:BF:5F:4F:F6:1D:3A:84:AE:19:75:89:F6:7D:38:64:62
X509v3 Authority Key Identifier:
keyid:B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:17:3a:29:0d:f4:43:aa:7f:08:fe:3d:40:58:73:32:c9:3d:
5e:4e:28:1d:66:72:20:e5:be:1e:a9:5d:19:c8:37:be:29:d0:
99:2f:fc:62:46:5a:70:8f:8b:8e:16:0f:91:e0:da:60:e3:6c:
b0:5b:ad:8a:fd:f1:89:bf:0c:ee:af:c1:5e:4d:a9:66:3a:2f:
d5:36:21:57:b8:47:82:ae:b9:6c:7b:ee:56:ae:d5:26:9c:78:
d0:f4:56:62:50:2c:aa:8e:34:c3:3e:28:41:8b:b7:17:77:2b:
8c:98:62:f6:47:1b:8f:aa:04:e4:27:82:e5:be:e4:ee:6b:48:
82:be:64:1f:73:65:61:86:55:a8:f8:84:ab:84:5d:30:26:22:
84:e4:6b:72:8f:29:86:2b:67:77:44:77:00:89:96:de:a3:db:
09:19:f7:9c:a7:d4:5f:ee:8a:57:cd:4d:cc:ad:24:66:33:3d:
9a:78:c1:59:16:b5:ff:da:bf:4e:ea:99:46:13:c5:84:f4:70:
5f:17:c2:26:c3:df:42:d7:e3:95:5c:57:67:4b:67:16:fc:6c:
f5:ad:38:fd:5c:d4:b3:cf:75:d3:9f:c4:3d:ef:bd:a2:08:3b:
07:11:32:c2:cf:74:e7:79:83:a9:7c:04:92:5d:de:08:5e:ae:
93:ac:c3:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:28:13 2025 by rpki-client