Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
File: 2scQMP4IHgK6tII9BWj_sqMyZeE.mft (raw, json)
Hash identifier: xSJVjR8RFZpkLR+wxadWjiGv+gq83Z0y1uD+3yTH0aA=
Subject key identifier: 96:54:CC:34:09:3E:0E:6C:61:A7:FF:A4:D3:8C:F8:C5:B1:4E:A6:6D
Authority key identifier: DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1
Certificate issuer: /CN=dac71030fe081e02bab4823d0568ffb2a33265e1
Certificate serial: 0197B70E7B927C5BDFB97749D54794E4DBF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
Manifest number: 054B
Signing time: Sat 28 Jun 2025 15:01:09 +0000
Manifest this update: Sat 28 Jun 2025 15:01:09 +0000
Manifest next update: Sun 29 Jun 2025 15:01:09 +0000
Files and hashes: 1: 2scQMP4IHgK6tII9BWj_sqMyZeE.crl (hash: BJzNZkkao7qE+vgnrxZoNPhNU2cRaRXGeXfeo9lEV3g=)
2: _aLDkeMiUI-Lqjzdkv0G6nDIZPI.roa (hash: tmIepxlUbHTd8KHj3iQSk+aTVIsaYnnddWmvrPeDuVM=)
3: cOPYQsOeCFDIc7qGbdrCMUud3Jc.roa (hash: BKdHxeFxd4fi3NghqoltBHVl5UTtuhA/jAVO3pAU5j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:7b:92:7c:5b:df:b9:77:49:d5:47:94:e4:db:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac71030fe081e02bab4823d0568ffb2a33265e1
Validity
Not Before: Jun 28 15:01:09 2025 GMT
Not After : Jun 29 15:01:09 2025 GMT
Subject: CN=9654cc34093e0e6c61a7ffa4d38cf8c5b14ea66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b1:ae:3e:af:d7:fe:b2:71:f4:e7:96:ca:64:
b3:a3:b4:c7:8e:f8:9f:77:49:fd:11:05:ec:08:fe:
23:2a:01:dc:36:e1:4e:9c:3e:20:65:eb:f6:da:21:
87:15:85:cb:43:19:cc:cc:fe:ba:68:af:98:c5:76:
94:7e:9c:46:c7:25:3a:ae:26:ce:d3:62:51:e1:7c:
99:01:0d:53:65:5f:0f:52:73:4f:b9:2d:5f:24:f8:
48:cc:eb:ff:94:d7:17:6a:a9:a3:af:43:b4:43:51:
01:b5:2c:59:4a:a1:c4:02:d9:8c:4c:03:48:7a:ad:
12:35:43:87:c8:df:c5:b5:df:c2:16:9d:d9:ca:c7:
6e:a5:3a:37:3c:59:58:c0:ce:9f:99:4d:9e:21:f9:
b4:fc:3f:9e:b2:bb:9c:e4:22:89:a1:c7:54:c4:d6:
8f:83:be:ca:07:c4:ce:79:f8:cf:59:5a:39:52:15:
46:27:92:86:d3:03:a7:65:ea:01:20:8a:1f:5c:86:
34:35:fe:17:dd:94:b1:fe:ea:62:45:d7:7b:b1:27:
66:44:e4:cf:92:7e:f3:f3:69:4a:a3:fb:4a:ff:87:
bd:92:70:1a:d9:d9:72:98:15:16:8f:90:b7:57:c3:
6c:dc:90:3a:1f:ed:47:f8:e6:da:d3:53:24:5b:36:
6c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:54:CC:34:09:3E:0E:6C:61:A7:FF:A4:D3:8C:F8:C5:B1:4E:A6:6D
X509v3 Authority Key Identifier:
keyid:DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:77:e3:53:e4:b5:7f:c5:07:bf:6e:20:c7:6f:ae:ea:65:b6:
e7:72:13:9d:5d:b5:e1:4b:9b:00:97:c9:23:a6:0a:cb:a6:c6:
c5:7a:9a:1e:8d:49:4f:a6:76:d1:9d:f8:7f:27:4f:cf:c0:43:
76:1a:81:7b:d0:a5:e7:69:01:e9:3c:3e:d2:b1:d1:ec:70:bd:
d0:af:72:fb:69:aa:d7:61:0e:bd:7f:5f:a8:f2:58:be:72:16:
26:e6:35:04:39:a0:1f:14:6e:67:fd:f4:a7:b2:e9:5f:af:2a:
99:e1:63:e1:33:08:e6:c5:f7:1a:27:ff:77:50:03:c9:7b:d1:
22:da:c7:ca:66:06:5f:0d:39:57:86:db:b3:6e:de:cb:d0:cc:
9f:56:f3:85:05:f6:84:43:f9:3d:57:4d:53:be:ee:cd:fd:f1:
45:5f:3a:1d:59:6c:cd:49:b6:bf:b4:28:cc:23:b9:9d:7d:6a:
10:06:a5:f7:3b:7c:10:86:40:7f:7a:ff:45:11:9c:44:eb:01:
53:7b:4f:db:42:79:45:fc:bb:f9:4b:f1:8b:87:ac:44:65:59:
e0:e9:de:13:a1:6a:74:6a:44:5e:f0:22:5f:12:56:78:cf:09:
d3:28:31:44:93:5f:a1:05:0b:6d:1e:9a:1f:c3:8a:97:0c:87:
59:c2:a1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:18:54 2025 by rpki-client