Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.mft
File: sCBx_ye9CehFJRchNknb9nvK1dE.mft (raw, json)
Hash identifier: cRtHv5/1W+07FbB14Lblp/I7QGgRmO7NpHj7ROEThNU=
Subject key identifier: C0:8E:CC:06:2E:89:AE:C0:76:B4:B0:FF:F6:C1:11:B1:D4:B9:D8:59
Authority key identifier: B0:20:71:FF:27:BD:09:E8:45:25:17:21:36:49:DB:F6:7B:CA:D5:D1
Certificate issuer: /CN=b02071ff27bd09e8452517213649dbf67bcad5d1
Certificate serial: 0197B6A07FD141F9BD04F730221759E0A857
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCBx_ye9CehFJRchNknb9nvK1dE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.mft
Manifest number: 0241
Signing time: Sat 28 Jun 2025 13:01:01 +0000
Manifest this update: Sat 28 Jun 2025 13:01:01 +0000
Manifest next update: Sun 29 Jun 2025 13:01:01 +0000
Files and hashes: 1: sCBx_ye9CehFJRchNknb9nvK1dE.crl (hash: OU/F3rlLH8oi/nnFIBdiUYXVjC4rKbvJCdmUlOe5AC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCBx_ye9CehFJRchNknb9nvK1dE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:7f:d1:41:f9:bd:04:f7:30:22:17:59:e0:a8:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02071ff27bd09e8452517213649dbf67bcad5d1
Validity
Not Before: Jun 28 13:01:01 2025 GMT
Not After : Jun 29 13:01:01 2025 GMT
Subject: CN=c08ecc062e89aec076b4b0fff6c111b1d4b9d859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:57:99:76:91:67:ef:94:0b:9d:82:71:b3:27:
3c:79:03:c4:39:53:4f:83:77:f6:ee:1a:8c:5e:db:
25:ac:63:39:1e:d2:84:ae:3b:c1:b1:07:7c:96:cf:
8e:b9:b9:a8:fb:68:37:09:5d:26:48:3c:b0:44:11:
51:c5:e1:ef:5c:bc:91:45:48:dd:ad:61:a0:f1:7e:
e8:ec:a1:ec:92:de:8b:84:f6:72:4b:da:fa:88:45:
da:63:b6:c9:ce:96:9e:1b:80:74:7d:23:be:9c:71:
fe:c0:ed:0f:9e:d7:66:ed:ab:6c:a9:d2:74:af:a7:
8f:d2:69:3f:44:ee:48:12:0e:5d:be:f7:9a:18:a9:
de:c3:d3:a2:c2:df:92:be:51:c9:93:0d:d8:f0:68:
3e:00:2e:b7:03:4a:9a:4a:a8:ea:31:76:0e:47:ca:
ad:75:06:cf:c9:e2:0f:6a:70:c5:ea:f4:36:6a:81:
92:90:e0:18:5d:76:ba:23:70:94:88:e8:d7:f1:9c:
3d:15:49:ea:d6:2e:07:0a:84:52:d5:ff:a5:7c:c1:
8e:fb:a3:43:db:4e:4d:60:f5:a6:21:49:91:d4:8f:
91:11:7f:8d:c9:33:b5:00:85:57:9e:bb:52:ef:f8:
5d:18:e4:32:f5:e4:1f:7e:e4:bd:be:06:78:8b:a3:
9a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:8E:CC:06:2E:89:AE:C0:76:B4:B0:FF:F6:C1:11:B1:D4:B9:D8:59
X509v3 Authority Key Identifier:
keyid:B0:20:71:FF:27:BD:09:E8:45:25:17:21:36:49:DB:F6:7B:CA:D5:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCBx_ye9CehFJRchNknb9nvK1dE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:2d:b0:12:03:b6:1a:39:8b:ac:be:5a:b6:a6:34:55:84:0f:
36:54:39:41:7c:77:87:0e:34:04:e3:3a:72:4a:8d:fa:3c:a5:
80:66:4d:a8:f9:82:b5:c7:36:fc:ae:05:1a:a4:ee:33:b4:4e:
f7:44:34:6f:f5:c6:91:ef:41:7e:ea:be:8b:c7:96:ac:b2:f8:
48:4b:6d:cf:e2:14:33:72:6f:58:6a:5e:81:fc:d8:39:64:2f:
97:89:1d:1f:fa:ed:5f:40:28:c3:58:ac:61:65:51:08:b2:57:
27:a4:50:df:ff:10:c9:59:09:1d:8d:2f:19:35:60:82:95:bc:
e2:0a:a6:03:97:f5:38:34:f4:c5:0d:f8:76:00:67:94:75:b3:
e5:d3:ee:0c:05:c5:aa:24:01:22:dc:d3:9e:f3:88:64:46:1d:
bb:33:ad:32:36:da:7a:01:51:75:40:f6:ad:bc:6e:a2:2d:6b:
ee:25:77:69:d1:79:af:11:c9:1b:95:7e:9d:37:c9:01:78:ef:
68:3b:83:d7:ca:49:53:ef:7d:1b:2a:30:01:32:36:0d:7c:52:
2d:00:a1:66:70:d3:23:30:95:fb:f5:13:2d:c3:60:f9:c1:26:
b8:c4:53:75:fc:a0:ac:bb:df:ad:4a:28:09:dc:63:a6:b4:f1:
b2:7a:4e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:26:53 2025 by rpki-client