Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
File: 2scQMP4IHgK6tII9BWj_sqMyZeE.mft (raw, json)
Hash identifier: qSvlxSN88y3qele2iOiXmnNebgme/wlZCq2SbKxpcHM=
Subject key identifier: EF:72:9F:96:2A:5F:B9:35:A5:67:29:C6:CB:A6:44:31:77:58:26:32
Authority key identifier: DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1
Certificate issuer: /CN=dac71030fe081e02bab4823d0568ffb2a33265e1
Certificate serial: 019A2109254F20FE0AE76ED29D8E7BC47F0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
Manifest number: 068B
Signing time: Sun 26 Oct 2025 15:00:38 +0000
Manifest this update: Sun 26 Oct 2025 15:00:38 +0000
Manifest next update: Mon 27 Oct 2025 15:00:38 +0000
Files and hashes: 1: 2scQMP4IHgK6tII9BWj_sqMyZeE.crl (hash: 3/6w2m4qS9sLu8/SdfkNPd50sPcoDgsRQgNgVY+Eu4E=)
2: _aLDkeMiUI-Lqjzdkv0G6nDIZPI.roa (hash: tmIepxlUbHTd8KHj3iQSk+aTVIsaYnnddWmvrPeDuVM=)
3: cOPYQsOeCFDIc7qGbdrCMUud3Jc.roa (hash: BKdHxeFxd4fi3NghqoltBHVl5UTtuhA/jAVO3pAU5j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 15:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:09:25:4f:20:fe:0a:e7:6e:d2:9d:8e:7b:c4:7f:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac71030fe081e02bab4823d0568ffb2a33265e1
Validity
Not Before: Oct 26 15:00:38 2025 GMT
Not After : Oct 27 15:00:38 2025 GMT
Subject: CN=ef729f962a5fb935a56729c6cba6443177582632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:19:e1:2a:d6:f2:81:93:15:24:38:9f:39:17:
52:6a:45:2b:55:cb:35:ca:d2:70:8f:4d:48:a5:1e:
eb:89:62:a5:7c:52:2d:43:c3:b8:9b:68:c6:44:18:
cc:e0:05:f8:70:2b:8b:eb:18:bc:6a:66:55:26:df:
7e:90:79:47:4b:bf:4f:40:f0:43:74:67:b6:69:91:
67:ce:ca:42:83:f8:bb:5a:75:b8:46:54:9d:47:a8:
7a:f5:30:95:3b:97:f8:fa:12:f8:c9:f6:07:1e:65:
a2:80:70:4d:02:c8:be:b8:91:78:c3:c7:e5:1d:1d:
78:45:c6:1e:68:3f:6e:38:6b:10:bc:13:1f:16:a0:
9c:11:14:00:f9:9b:93:49:6e:a0:4a:fb:b6:ec:fd:
eb:4c:f1:53:0d:42:05:0b:10:55:5f:c8:14:19:22:
8a:25:a1:3a:d7:fb:70:a1:41:20:15:87:58:2c:dd:
18:e1:04:2d:10:95:dc:f2:eb:0e:58:1b:d6:0d:99:
c0:99:e9:dc:b9:4b:a3:bd:80:a4:b4:f7:32:4b:fd:
d6:ac:af:35:47:cf:95:ef:0c:49:28:de:28:a1:80:
e4:7c:79:41:ca:ca:65:39:36:cb:f2:4d:29:b2:44:
73:61:bd:ab:73:50:39:18:b2:36:78:3b:2e:e0:76:
f0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:72:9F:96:2A:5F:B9:35:A5:67:29:C6:CB:A6:44:31:77:58:26:32
X509v3 Authority Key Identifier:
keyid:DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:69:0a:f5:af:9d:b0:00:17:71:8d:52:dc:d1:60:ed:bd:5b:
16:60:1c:e1:fe:20:d3:42:74:24:d9:34:85:db:27:11:13:a4:
1f:65:e5:e6:ca:5c:9c:19:5c:b6:c3:74:94:35:49:ae:00:28:
0d:38:df:5b:1f:17:d6:cd:a3:08:8c:4a:82:35:e8:76:05:4c:
82:b9:08:61:4e:05:93:1d:6a:78:a0:10:0d:ea:7d:a3:b8:96:
4e:73:83:74:48:4f:c9:56:d4:1e:8e:dd:1f:28:ad:4a:fa:41:
6d:21:e5:59:46:42:1b:0f:15:d9:59:89:8c:88:6d:5f:e9:fd:
61:eb:6b:6f:f5:f3:ec:6c:ce:32:4a:42:78:04:6d:2a:7a:50:
dc:e3:ff:1e:87:65:ad:85:32:32:78:b6:48:80:02:43:18:f0:
32:9f:8c:43:17:14:fd:f0:96:2a:0a:09:85:dd:d5:4d:44:d2:
f4:ec:e3:15:46:e4:fc:eb:8a:d5:31:ee:da:66:67:60:c7:96:
45:74:4f:21:f8:fc:c4:93:97:10:c8:84:12:36:db:51:8a:3c:
2f:19:7b:40:23:c1:22:db:29:60:e5:0f:78:dc:7f:0f:29:56:
ee:80:cc:dd:fd:84:fb:09:d6:d5:7d:88:38:fa:6e:ff:8e:4e:
a8:f2:1d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:28:38 2025 by rpki-client