Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
File: 2scQMP4IHgK6tII9BWj_sqMyZeE.mft (raw, json)
Hash identifier: P4qgQ26Iwq/jqi0qfbPGQGmJUp06sI0+esVQCqw+r7U=
Subject key identifier: 3D:90:A5:CB:65:A9:12:70:E0:68:45:37:F4:69:7C:59:F7:E7:2D:99
Authority key identifier: DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1
Certificate issuer: /CN=dac71030fe081e02bab4823d0568ffb2a33265e1
Certificate serial: 0196A2E4DF3375FD89807E19D2857FA07E7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
Manifest number: 04BC
Signing time: Tue 06 May 2025 00:00:30 +0000
Manifest this update: Tue 06 May 2025 00:00:30 +0000
Manifest next update: Wed 07 May 2025 00:00:30 +0000
Files and hashes: 1: 2scQMP4IHgK6tII9BWj_sqMyZeE.crl (hash: cAaZBZTV/UNFRGf/QrPiYuHL2oF5qv0blf/45ePgdCU=)
2: _aLDkeMiUI-Lqjzdkv0G6nDIZPI.roa (hash: tmIepxlUbHTd8KHj3iQSk+aTVIsaYnnddWmvrPeDuVM=)
3: cOPYQsOeCFDIc7qGbdrCMUud3Jc.roa (hash: BKdHxeFxd4fi3NghqoltBHVl5UTtuhA/jAVO3pAU5j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:e4:df:33:75:fd:89:80:7e:19:d2:85:7f:a0:7e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac71030fe081e02bab4823d0568ffb2a33265e1
Validity
Not Before: May 6 00:00:30 2025 GMT
Not After : May 7 00:00:30 2025 GMT
Subject: CN=3d90a5cb65a91270e0684537f4697c59f7e72d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:58:f8:6b:a3:4d:99:d3:b2:53:fb:f6:11:a6:
39:88:ec:26:33:3f:58:12:4f:27:bc:4d:ba:2d:31:
71:50:3f:76:45:e2:db:40:7a:b8:cd:87:87:7c:d6:
98:44:ba:d3:0f:1e:66:9f:38:50:93:f8:c5:58:59:
8a:ac:f5:bb:63:c7:bb:8a:dc:76:c6:75:a8:51:8b:
8a:71:ff:33:80:a8:69:5e:c4:0a:ed:a7:7c:cf:d1:
93:0f:68:4b:b3:de:f1:e0:0e:a2:19:67:45:b1:b6:
31:78:7d:87:ea:e7:fb:14:d4:e2:d1:19:a9:fd:e5:
b4:7f:ad:1b:e8:10:2e:4d:cf:82:15:c9:31:11:ef:
5f:08:60:f7:dc:b9:3c:ce:2f:0e:c4:e6:6a:13:dc:
df:c1:53:ed:f0:44:c0:5a:91:0a:3b:25:62:1c:ef:
2f:c3:46:c8:3b:80:ec:89:29:83:20:09:b2:7a:77:
52:04:e0:9d:f0:97:3c:bf:f9:9b:a6:ca:a8:2c:30:
25:4c:57:5d:b5:d0:5b:88:fb:76:b7:12:0d:72:22:
d0:8a:c4:26:15:3e:e8:39:00:08:d1:ad:57:67:b1:
bf:3a:5c:5c:e7:aa:3d:42:5a:38:54:22:b1:22:c5:
1a:18:6c:69:f9:3d:f6:99:83:77:10:e0:86:65:e7:
c1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:90:A5:CB:65:A9:12:70:E0:68:45:37:F4:69:7C:59:F7:E7:2D:99
X509v3 Authority Key Identifier:
keyid:DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:00:91:a5:ff:5e:e2:92:80:8f:ff:ba:3a:7d:77:63:fc:99:
2a:26:c2:f8:95:4b:e1:b0:92:3e:92:65:67:c4:30:51:ff:17:
ec:84:9a:40:2e:00:aa:cb:7d:da:be:de:9c:20:96:84:98:7e:
05:e6:44:31:74:de:24:c8:cd:56:37:14:fb:c2:cc:c1:ce:f1:
ed:d8:ed:41:1e:f6:b3:d7:0b:a0:b8:a2:28:f6:42:bd:7f:06:
89:21:9d:7a:8d:30:7a:57:37:f2:f5:42:7b:69:94:19:cf:fc:
44:5a:52:88:41:72:c5:5d:f9:41:24:3a:92:cd:19:02:07:e1:
ff:d9:eb:a9:29:85:f0:48:c2:99:39:a5:97:e2:0e:4d:11:96:
d7:81:84:84:f3:3c:12:c6:ca:a6:2a:b4:e1:50:f7:96:1b:a9:
87:3a:e0:4f:fb:ef:ac:d4:05:a6:d3:4a:c1:73:d7:cf:d6:4e:
54:d0:9c:86:08:12:6b:b4:c9:1b:1a:a1:70:33:d9:f8:11:9f:
01:04:09:48:03:b5:ff:22:4b:fe:df:53:ec:2a:cd:40:1b:f5:
2f:d1:77:05:8b:03:f1:76:35:26:49:11:63:50:64:4a:87:03:
f3:6b:43:59:94:83:3d:0a:41:12:e1:12:fa:11:04:59:cd:72:
c4:89:53:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 02:14:26 2025 by rpki-client