Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
File: scPsU58j7gMao5asXO1CVjiEt7M.mft (raw, json)
Hash identifier: 6Z6ZucbLcIxrncEsk1xziXw280EdcRt/CjbqLljYsFM=
Subject key identifier: 1E:DC:42:20:2B:6D:C1:3B:F3:D8:5E:7A:74:9D:05:CD:35:0C:CE:AB
Authority key identifier: B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
Certificate issuer: /CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Certificate serial: 01969DF5E28D21303353A2B1BE1932FC99C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
Manifest number: 07DF
Signing time: Mon 05 May 2025 01:00:59 +0000
Manifest this update: Mon 05 May 2025 01:00:59 +0000
Manifest next update: Tue 06 May 2025 01:00:59 +0000
Files and hashes: 1: YggPTsSNi-M37lrKOeIMBOEQEh0.roa (hash: QqUu1L/3s6oQrDkvCSSy8nc3UlcW3BrRdN7rqT/pHRE=)
2: b4AGcn0hWNQHufubVLqGkpQqCJU.roa (hash: TffukrxORwRZt6LrZ4vP1Br2diZAMHQpSo83hi5snQM=)
3: scPsU58j7gMao5asXO1CVjiEt7M.crl (hash: tfbmkGVWsr0dul8sWLStzg3jHh+MFCE7yX/ApsK/Y1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:f5:e2:8d:21:30:33:53:a2:b1:be:19:32:fc:99:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Validity
Not Before: May 5 01:00:59 2025 GMT
Not After : May 6 01:00:59 2025 GMT
Subject: CN=1edc42202b6dc13bf3d85e7a749d05cd350cceab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:cb:09:53:dc:cf:6a:7a:c9:b7:6e:cb:b5:6b:
ba:ce:21:69:50:28:2e:fb:9a:fd:e9:1a:fb:a1:d0:
d8:a3:93:bb:18:bb:51:4c:66:02:d3:24:ba:08:6a:
86:79:7e:68:d1:c5:20:0f:95:55:22:80:5f:33:7f:
06:e9:89:c4:dd:c4:5b:6b:8e:66:08:ba:3b:95:d0:
21:0e:e2:6f:46:c8:54:0f:8c:40:be:b8:d7:1f:59:
ea:58:a6:db:19:14:f8:04:65:63:b9:3a:3f:6b:8a:
83:f3:01:01:9d:92:40:fd:d7:5f:d7:cb:3c:18:17:
9c:fc:d8:80:2d:66:9f:fb:ed:c8:86:fd:30:c8:8b:
53:9c:05:c7:e8:e7:9f:34:13:7c:58:ba:6e:59:1d:
0c:37:d9:d8:9a:f6:5c:64:cd:90:d4:32:cf:01:a4:
0e:f1:96:78:7d:dc:83:70:3e:dd:c1:e4:ec:aa:fc:
35:d6:da:94:3e:4a:ec:f2:53:d0:09:cf:c5:d4:65:
d8:d8:52:13:9a:3d:06:eb:e2:47:87:a1:67:43:77:
a4:e6:28:a2:06:d7:aa:d0:06:61:29:be:55:7b:b5:
70:4b:74:00:16:2c:0e:ef:30:a3:41:85:0b:2b:25:
bd:57:de:80:41:7b:b9:27:6c:1c:63:c4:90:75:3f:
17:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:DC:42:20:2B:6D:C1:3B:F3:D8:5E:7A:74:9D:05:CD:35:0C:CE:AB
X509v3 Authority Key Identifier:
keyid:B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:e2:16:b2:32:14:44:85:b9:2d:f1:4a:32:d8:7f:39:28:c3:
4f:79:d1:85:1b:fd:16:28:99:07:c7:5f:f2:45:2b:a3:99:19:
da:47:ea:9d:04:25:48:21:b0:26:f4:a1:b9:73:3d:7a:61:8c:
8d:27:73:d4:9b:59:26:c0:bb:d5:ab:69:99:95:f4:bb:40:a2:
2e:b2:73:0a:b0:b2:24:fe:dd:69:24:ed:78:1a:05:fc:06:ea:
42:22:4c:a7:e0:5c:c9:c9:a6:85:80:5d:e7:38:c5:1c:64:ba:
20:7f:a5:c6:af:1f:99:d6:2e:e3:39:65:0a:3a:12:40:75:8b:
b4:b4:42:93:aa:59:cb:31:17:e2:56:56:47:cd:2b:67:f1:d3:
7b:ab:9a:21:75:89:1c:72:99:c2:65:97:9c:b6:df:ce:30:3c:
46:43:45:c0:b7:c7:7e:fc:44:14:cf:b2:a6:34:5d:20:b6:28:
0d:56:8e:04:d7:b4:98:72:7f:74:1e:2f:64:a9:cd:58:1c:5a:
7f:09:be:7e:9a:60:24:3e:74:8a:9b:3c:be:07:45:c0:2e:2a:
ef:8b:c5:56:91:80:ea:16:9c:f1:6c:04:af:75:e5:6b:fe:f9:
25:17:06:a9:1b:73:2f:cf:69:ff:c1:ec:d3:9e:c4:dd:22:7a:
16:89:2f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:35:15 2025 by rpki-client