Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
File: x2cScLac7FBGBrEmxMqDOBavfaQ.mft (raw, json)
Hash identifier: WoJQ0QUAXb3wHjla1W2+TWHZZZeCT5rR3CRFyEUHQDI=
Subject key identifier: 32:77:F3:08:2F:8B:6C:C7:11:3B:7B:41:AB:0E:C2:07:3B:D4:E1:D6
Authority key identifier: C7:67:12:70:B6:9C:EC:50:46:06:B1:26:C4:CA:83:38:16:AF:7D:A4
Certificate issuer: /CN=c7671270b69cec504606b126c4ca833816af7da4
Certificate serial: 0197B8FCD9C2D70D511B1F2189ED65EFBB9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2cScLac7FBGBrEmxMqDOBavfaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
Manifest number: 068A
Signing time: Sun 29 Jun 2025 00:01:07 +0000
Manifest this update: Sun 29 Jun 2025 00:01:07 +0000
Manifest next update: Mon 30 Jun 2025 00:01:07 +0000
Files and hashes: 1: l2_sIOs4HMyf2OgLQgyJY2hl_f0.roa (hash: ux1UyG4HPgGv7Al9zX4rAYUS2Y3nKcLtZPuBWZDi2xs=)
2: x2cScLac7FBGBrEmxMqDOBavfaQ.crl (hash: zjBJG2F/TYYLORjukDX16mNW1RNgQgdNL9frG4S7l7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2cScLac7FBGBrEmxMqDOBavfaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fc:d9:c2:d7:0d:51:1b:1f:21:89:ed:65:ef:bb:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7671270b69cec504606b126c4ca833816af7da4
Validity
Not Before: Jun 29 00:01:07 2025 GMT
Not After : Jun 30 00:01:07 2025 GMT
Subject: CN=3277f3082f8b6cc7113b7b41ab0ec2073bd4e1d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ed:48:3c:ec:e9:93:ff:6a:f5:bf:4b:aa:64:
0e:9a:a1:d6:8a:70:62:98:b3:70:f6:8a:a6:09:38:
69:4a:e2:d2:d3:a1:e9:91:c1:65:12:61:6f:3e:7c:
4e:44:94:ba:f3:ed:5b:17:d0:bf:14:60:91:68:ea:
76:47:90:2c:34:79:3f:7e:ff:bf:ce:ca:4a:ed:02:
3d:7a:6f:6e:5e:36:b8:ad:0a:e0:8d:2b:35:f3:d5:
a7:ce:06:f0:37:ad:ce:ab:d1:0d:5b:b1:06:cb:de:
8e:ae:1e:78:65:c6:38:d2:1a:4e:33:03:5d:64:a3:
c4:c5:bf:1f:13:f2:52:ff:02:b7:3f:0f:ef:3b:c2:
60:e0:63:2e:33:e8:26:55:bf:4e:4a:bf:dc:fe:ba:
0e:7d:64:88:07:28:cc:02:76:d0:aa:02:27:f8:b7:
b5:f6:23:31:19:e5:fb:ee:74:4b:c5:f1:22:27:32:
cb:2d:f2:93:04:12:7a:f7:f1:08:94:f0:ec:c8:c8:
3f:9c:9e:e0:5f:39:5e:1b:1a:c8:0b:42:2a:99:2d:
ae:fd:50:2b:8b:fd:ee:2e:4f:6e:99:b9:90:15:e4:
bf:08:fb:1a:26:8b:f0:21:d8:69:bb:a9:f6:81:d0:
02:83:25:d2:62:01:66:49:62:4a:9c:6e:ef:13:00:
ec:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:77:F3:08:2F:8B:6C:C7:11:3B:7B:41:AB:0E:C2:07:3B:D4:E1:D6
X509v3 Authority Key Identifier:
keyid:C7:67:12:70:B6:9C:EC:50:46:06:B1:26:C4:CA:83:38:16:AF:7D:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2cScLac7FBGBrEmxMqDOBavfaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:22:d6:61:33:0e:6c:77:a9:c7:17:7d:e8:2c:ed:8d:3a:c1:
69:da:cd:9c:60:be:7e:8b:62:8c:37:18:a3:54:c3:fd:c3:85:
73:a4:d3:9c:07:2e:fc:50:7f:7f:24:6e:09:01:d5:56:9a:ed:
10:8d:31:a0:f0:33:f6:61:20:7a:6e:2e:cf:22:b5:0a:09:e9:
8e:11:fe:68:05:d3:0c:64:43:64:be:93:a8:04:ab:7d:8a:29:
5c:68:ac:85:7e:8e:27:93:08:2f:61:b9:46:cd:74:69:2f:ce:
9a:0e:ff:95:ab:05:50:ed:a2:4a:f8:87:14:38:0c:40:56:85:
92:e7:65:74:cd:53:a7:22:79:db:7f:31:0d:8c:4b:39:86:64:
6c:38:69:d5:f7:3d:de:38:41:b2:cd:21:6b:4c:73:03:33:9b:
08:94:f8:51:12:79:f7:69:cf:85:0b:2c:d0:bb:a0:11:92:0f:
f2:dc:1e:9b:31:10:b3:1a:4d:86:67:16:34:c7:60:33:95:ef:
89:59:30:fd:00:1f:d7:42:82:af:41:ff:1c:6c:e1:ad:1c:a2:
1b:b5:25:1c:84:30:33:7a:fc:da:95:d0:00:66:ec:41:0d:fa:
73:8e:0b:6b:10:18:81:43:1d:57:7e:60:2f:7b:9a:ff:b0:79:
6f:49:e2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:17:20 2025 by rpki-client