Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.mft
File: sCBx_ye9CehFJRchNknb9nvK1dE.mft (raw, json)
Hash identifier: q8LoA2JRaSKQsySsGrpvinYXH7umyXNABU9kTvw661o=
Subject key identifier: 71:9D:3E:72:E1:3E:33:03:A2:BA:68:E8:70:A0:17:0C:6A:ED:C9:A5
Authority key identifier: B0:20:71:FF:27:BD:09:E8:45:25:17:21:36:49:DB:F6:7B:CA:D5:D1
Certificate issuer: /CN=b02071ff27bd09e8452517213649dbf67bcad5d1
Certificate serial: 0198D472EDFFB5F63EF8CB858553BB521160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCBx_ye9CehFJRchNknb9nvK1dE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.mft
Manifest number: 02D5
Signing time: Sat 23 Aug 2025 01:02:38 +0000
Manifest this update: Sat 23 Aug 2025 01:02:38 +0000
Manifest next update: Sun 24 Aug 2025 01:02:38 +0000
Files and hashes: 1: sCBx_ye9CehFJRchNknb9nvK1dE.crl (hash: fJS6akcfdpcX8chBivZXTML06wzPtyW+x4sxWJy5nGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCBx_ye9CehFJRchNknb9nvK1dE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:ed:ff:b5:f6:3e:f8:cb:85:85:53:bb:52:11:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02071ff27bd09e8452517213649dbf67bcad5d1
Validity
Not Before: Aug 23 01:02:38 2025 GMT
Not After : Aug 24 01:02:38 2025 GMT
Subject: CN=719d3e72e13e3303a2ba68e870a0170c6aedc9a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ad:69:04:a2:b2:f5:c0:47:69:e0:55:5c:0e:
41:6a:69:cf:62:10:63:8b:71:cd:4d:b8:5c:3a:44:
f7:18:4f:03:9a:08:25:76:fd:ed:9c:ec:4c:f9:34:
37:ff:cd:8b:9d:37:f0:09:f7:f9:0b:da:8f:7b:28:
23:17:43:16:bf:3a:4b:a2:d8:84:fd:f6:20:dd:f4:
58:a5:fc:59:90:2d:61:3a:b2:a1:32:66:7c:ee:19:
15:3f:72:ad:57:9c:5c:cc:51:cb:ee:2f:97:04:32:
4e:56:60:19:df:57:22:6c:ac:55:5d:ff:f2:a3:7e:
1f:c7:a2:8e:11:86:b1:60:87:51:58:d4:31:51:2b:
23:f7:62:21:23:12:af:ab:4c:61:9c:f6:b5:e1:c3:
d2:ec:28:58:24:aa:a5:4c:d9:69:50:d5:c9:a0:6b:
1c:9c:4a:f8:a9:6b:79:fb:f3:98:fa:8c:39:f2:ab:
f0:25:a2:32:f1:bc:17:b8:00:36:54:2a:6e:4c:56:
9a:56:c4:43:2f:47:55:eb:e7:35:0a:3a:44:d1:30:
39:6c:9a:35:b9:fd:cc:60:1a:43:ef:c9:7f:4c:19:
5a:aa:e9:78:91:94:12:c1:f2:52:0d:a2:9f:12:13:
86:79:66:ee:7a:79:dc:62:63:d4:f8:b0:ae:76:d7:
c7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9D:3E:72:E1:3E:33:03:A2:BA:68:E8:70:A0:17:0C:6A:ED:C9:A5
X509v3 Authority Key Identifier:
keyid:B0:20:71:FF:27:BD:09:E8:45:25:17:21:36:49:DB:F6:7B:CA:D5:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCBx_ye9CehFJRchNknb9nvK1dE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:4b:48:1b:99:99:d2:c2:1e:9d:da:d7:5d:d4:17:a1:21:d7:
67:48:67:00:65:63:90:90:63:7f:79:7a:2b:33:62:2e:58:d7:
ba:02:f0:08:b1:ca:74:84:c5:d2:7d:1d:43:08:22:ce:14:22:
42:a6:95:9b:04:2c:0b:c7:3f:a3:94:c9:4f:f4:ae:1b:e9:ca:
87:e1:83:cb:ef:64:8a:eb:70:56:6b:66:1b:3d:13:e3:49:27:
bd:80:6c:73:78:ae:37:aa:12:e7:86:6a:06:23:ba:62:89:78:
23:2a:15:84:b8:a3:67:a2:b3:6b:31:e7:0e:9a:1a:78:45:cb:
5e:ad:2a:e9:cf:c4:99:ec:3f:8b:34:e0:be:db:bb:5f:74:8c:
2a:4d:1a:d4:9a:de:b1:58:56:be:cd:00:e5:c1:f7:82:98:85:
f7:3a:ef:10:ad:1e:4c:11:bc:9a:4a:37:8c:41:cc:0b:10:a3:
87:8e:1c:3a:f8:e8:61:08:25:9d:52:50:3c:3a:23:01:7e:1f:
4c:01:7d:91:23:3f:ba:ab:75:03:1d:41:aa:4b:54:72:9b:b6:
9c:1b:ba:d5:6b:8b:ce:35:68:f1:c3:ca:bf:b9:b3:95:7b:79:
2b:72:1c:56:fa:b8:c6:11:67:1a:e5:ab:02:2e:76:20:59:17:
53:93:0a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:03 2025 by rpki-client