Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
File: 2scQMP4IHgK6tII9BWj_sqMyZeE.mft (raw, json)
Hash identifier: bvm0EGc/o4e8JAaLU/9a17pQkodPLVi/Ehh7aYhOYrQ=
Subject key identifier: 68:46:81:75:09:5D:6E:D9:38:C2:40:62:EC:60:E4:68:5F:A9:0D:DA
Authority key identifier: DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1
Certificate issuer: /CN=dac71030fe081e02bab4823d0568ffb2a33265e1
Certificate serial: 019748FA61F9DCA1EE0B27FB89AC7F21D05E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
Manifest number: 0512
Signing time: Sat 07 Jun 2025 06:00:57 +0000
Manifest this update: Sat 07 Jun 2025 06:00:57 +0000
Manifest next update: Sun 08 Jun 2025 06:00:57 +0000
Files and hashes: 1: 2scQMP4IHgK6tII9BWj_sqMyZeE.crl (hash: LHA0n1WlH6KCzPHX3w7goewYTsiXisPLQyRRJKoPtwk=)
2: _aLDkeMiUI-Lqjzdkv0G6nDIZPI.roa (hash: tmIepxlUbHTd8KHj3iQSk+aTVIsaYnnddWmvrPeDuVM=)
3: cOPYQsOeCFDIc7qGbdrCMUud3Jc.roa (hash: BKdHxeFxd4fi3NghqoltBHVl5UTtuhA/jAVO3pAU5j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:61:f9:dc:a1:ee:0b:27:fb:89:ac:7f:21:d0:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac71030fe081e02bab4823d0568ffb2a33265e1
Validity
Not Before: Jun 7 06:00:57 2025 GMT
Not After : Jun 8 06:00:57 2025 GMT
Subject: CN=68468175095d6ed938c24062ec60e4685fa90dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:65:c3:cb:1d:3d:ae:0d:cc:13:ee:ee:66:63:
b9:66:1f:01:94:43:51:34:2d:8c:46:97:a4:57:74:
68:da:66:d0:ab:49:09:a5:0d:2d:9d:12:14:f2:ff:
85:66:53:31:c6:40:8c:9e:c4:e4:01:7f:39:c7:b5:
ee:56:70:f9:c1:a3:a1:ed:12:e1:1e:dc:40:df:53:
0a:7b:6a:02:85:cb:d9:c5:80:ee:be:f7:85:0a:34:
ad:4f:c0:85:a2:cc:40:f6:04:2d:98:70:35:50:94:
cb:f8:08:d0:5f:7a:9b:08:0e:36:20:49:ef:a5:7b:
9b:02:91:1b:3e:b9:28:ad:4b:ca:f1:fc:73:b5:c2:
82:72:8e:e5:ec:f5:fb:b6:88:9a:d0:07:0e:a5:0b:
9c:12:d5:eb:a4:50:c0:97:45:14:51:b6:67:f6:0a:
0f:d4:9a:13:e7:8c:7d:7d:b7:cf:4c:a9:48:bb:2a:
b3:41:79:bb:fe:72:c8:ba:d4:14:43:f5:ba:09:52:
0e:22:1f:5e:b3:ce:d3:db:59:32:37:12:be:ca:34:
61:4b:8e:6c:ad:ea:56:f9:ff:6c:89:29:b2:85:c5:
5f:92:c2:d0:6d:2a:94:5e:77:96:e5:71:dc:17:bc:
c8:e2:3b:ee:71:1a:8b:8d:a4:b5:93:94:d3:ba:b1:
a5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:46:81:75:09:5D:6E:D9:38:C2:40:62:EC:60:E4:68:5F:A9:0D:DA
X509v3 Authority Key Identifier:
keyid:DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:0a:79:40:53:eb:38:8a:94:a8:ad:a0:5d:8a:40:25:85:09:
0c:0c:e2:f2:7c:a3:85:d3:be:17:a1:89:b5:b3:44:d1:79:55:
24:71:c0:6c:3e:bf:7f:56:a4:1c:f8:a3:3d:e7:60:ab:7a:4a:
bf:c6:35:c2:61:5d:50:c7:be:67:56:4f:a3:7e:ca:3a:a6:49:
e0:6e:ba:5d:0a:65:46:15:df:57:2d:dc:bb:04:6f:9d:07:5b:
69:72:22:c9:54:33:55:69:19:f9:69:96:e9:06:b1:d2:ea:fd:
d3:5d:e3:b7:d8:2c:b8:c2:30:61:ac:54:30:10:e1:ec:41:e2:
55:f3:28:32:1f:14:4c:25:fd:6e:e6:cd:7d:2d:1f:f4:ee:8e:
b3:4e:17:0c:5c:c2:0c:3c:f7:d5:29:ef:c1:5f:fa:8a:e7:36:
bc:02:a6:9c:97:00:0e:0c:a5:c3:b5:e0:0b:27:97:74:c1:e6:
3c:84:20:b3:0b:33:a0:4f:5f:f9:0e:1f:76:71:36:b6:c3:9d:
b3:e9:89:c5:92:24:d6:d1:62:fb:8d:e4:ea:d8:38:32:6a:2b:
1c:c3:28:6b:17:cb:34:e2:6d:ad:92:82:23:c2:5e:cb:b8:1f:
56:0c:46:c3:47:2f:63:83:36:39:c0:2b:bd:d8:15:9e:bd:78:
ed:4a:87:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:00:15 2025 by rpki-client