Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
File: 2scQMP4IHgK6tII9BWj_sqMyZeE.mft (raw, json)
Hash identifier: LRG4w0Vs7t1Sf+m04dWMR6dvWmODReiGygCSpj0sUGY=
Subject key identifier: 5E:8F:D8:49:11:E5:F9:07:C0:9D:9B:F2:B8:4C:7B:8C:FA:A3:4C:4F
Authority key identifier: DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1
Certificate issuer: /CN=dac71030fe081e02bab4823d0568ffb2a33265e1
Certificate serial: 019A00351CEBC05FD7E239F8914D5EA199A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
Manifest number: 067A
Signing time: Mon 20 Oct 2025 06:01:11 +0000
Manifest this update: Mon 20 Oct 2025 06:01:11 +0000
Manifest next update: Tue 21 Oct 2025 06:01:11 +0000
Files and hashes: 1: 2scQMP4IHgK6tII9BWj_sqMyZeE.crl (hash: sUp5JZLFwyYtjm66Tk9wNL1mcOgTNmE5RZjOIWFW9Ws=)
2: _aLDkeMiUI-Lqjzdkv0G6nDIZPI.roa (hash: tmIepxlUbHTd8KHj3iQSk+aTVIsaYnnddWmvrPeDuVM=)
3: cOPYQsOeCFDIc7qGbdrCMUud3Jc.roa (hash: BKdHxeFxd4fi3NghqoltBHVl5UTtuhA/jAVO3pAU5j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:1c:eb:c0:5f:d7:e2:39:f8:91:4d:5e:a1:99:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac71030fe081e02bab4823d0568ffb2a33265e1
Validity
Not Before: Oct 20 06:01:11 2025 GMT
Not After : Oct 21 06:01:11 2025 GMT
Subject: CN=5e8fd84911e5f907c09d9bf2b84c7b8cfaa34c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5c:c1:69:eb:41:94:80:87:e2:f1:78:f8:1d:
67:5f:70:e1:d9:e9:80:be:d6:99:52:06:9b:24:cb:
63:22:90:46:c5:34:0c:ce:ab:28:26:fb:8f:03:06:
c6:0d:89:1e:93:dd:41:df:d5:cf:02:5b:18:e0:61:
f0:c4:3e:2b:39:45:33:e0:cc:0d:b2:32:6c:33:09:
6c:43:8c:e5:07:40:ad:3d:7b:4b:7f:b8:14:56:75:
bc:6f:bd:32:86:04:fd:ad:83:e4:a9:b4:90:b6:71:
24:01:78:ff:2b:87:8d:f0:53:eb:50:5f:f2:2c:1b:
04:60:ee:e3:8a:4f:ce:64:16:27:8a:e7:ca:2b:da:
ae:40:bb:5f:79:9e:fc:c6:65:b0:3a:57:35:f9:6b:
b5:78:fb:5d:84:20:3e:61:42:12:11:84:b9:70:95:
25:c3:09:e4:fb:5b:5c:db:57:e7:e3:b8:5f:93:5c:
3f:bd:71:1e:47:72:24:66:ea:fc:09:fa:bc:be:ac:
87:ea:b6:ae:01:b8:40:82:73:20:30:05:30:21:7e:
4f:6b:58:cf:33:44:ac:99:74:5a:c0:d1:7c:03:52:
27:1e:91:5e:e9:e6:54:61:bb:df:58:df:cd:a7:51:
69:a5:20:7b:de:fe:96:bf:52:c2:20:82:1b:a9:ee:
b9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:8F:D8:49:11:E5:F9:07:C0:9D:9B:F2:B8:4C:7B:8C:FA:A3:4C:4F
X509v3 Authority Key Identifier:
keyid:DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:62:fa:0f:34:45:8a:d9:44:89:3e:3f:0a:82:0c:12:5d:98:
d6:77:4d:b8:68:32:f4:34:9b:d1:56:81:a5:5b:f8:18:5e:79:
e5:b8:9f:92:0a:1d:82:2a:1d:f5:06:87:1d:6e:a3:d5:d8:9a:
90:b0:e4:f8:0c:d1:3b:f5:99:86:1c:b0:de:5a:0c:ca:cd:31:
8d:b4:bd:00:b5:e7:b6:a2:6a:9e:7c:10:a6:d4:f1:53:56:e0:
fc:2d:17:30:3b:87:ab:76:9a:4b:1a:ea:ea:25:5b:d9:5e:df:
66:88:a1:c1:65:e6:40:d3:2f:0f:85:45:f1:a2:8d:85:e8:47:
a0:8d:d4:10:eb:3f:c9:23:45:3c:03:e8:6a:67:0f:95:f4:26:
da:53:12:9e:1c:8d:27:07:a0:b2:b1:9f:02:9c:65:9e:17:16:
62:e3:53:d8:97:e1:47:25:5e:5b:86:85:b7:a8:46:61:22:c4:
37:52:89:2d:8c:54:c8:cd:ea:e6:d1:13:99:49:f9:26:ed:5d:
77:c4:1d:0a:59:ef:33:16:84:6b:31:18:11:03:c4:45:23:a4:
a4:b3:31:51:88:89:05:b9:7b:9f:17:2c:b5:e0:06:52:f6:13:
91:91:ae:67:c4:77:7b:67:c8:7e:50:f2:1b:92:38:9c:97:b9:
ac:7a:e4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:33:22 2025 by rpki-client