Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a57a63-a6b4-4165-9e5e-9c2d044dd4af/1/ScKchYIxItOsfH9IBdWyQocNLeI.mft
File: ScKchYIxItOsfH9IBdWyQocNLeI.mft (raw, json)
Hash identifier: fnyj7DRatW6nUPwi0SOqIT5czaIiDE1QqOst7ngb7As=
Subject key identifier: 13:16:7B:8E:5F:12:2F:4A:90:BF:89:75:3E:A4:66:2D:10:48:B1:1A
Authority key identifier: 49:C2:9C:85:82:31:22:D3:AC:7C:7F:48:05:D5:B2:42:87:0D:2D:E2
Certificate issuer: /CN=49c29c85823122d3ac7c7f4805d5b242870d2de2
Certificate serial: 0198D47275DC2A0E91D8EA20489D7D9D3DC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ScKchYIxItOsfH9IBdWyQocNLeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a57a63-a6b4-4165-9e5e-9c2d044dd4af/1/ScKchYIxItOsfH9IBdWyQocNLeI.mft
Manifest number: 13DE
Signing time: Sat 23 Aug 2025 01:02:07 +0000
Manifest this update: Sat 23 Aug 2025 01:02:07 +0000
Manifest next update: Sun 24 Aug 2025 01:02:07 +0000
Files and hashes: 1: ScKchYIxItOsfH9IBdWyQocNLeI.crl (hash: 1NPtvFATb5hwug6p7htL2e0GIeGf2WMkwh5rdCyy1F8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a57a63-a6b4-4165-9e5e-9c2d044dd4af/1/ScKchYIxItOsfH9IBdWyQocNLeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a57a63-a6b4-4165-9e5e-9c2d044dd4af/1/ScKchYIxItOsfH9IBdWyQocNLeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ScKchYIxItOsfH9IBdWyQocNLeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:75:dc:2a:0e:91:d8:ea:20:48:9d:7d:9d:3d:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49c29c85823122d3ac7c7f4805d5b242870d2de2
Validity
Not Before: Aug 23 01:02:07 2025 GMT
Not After : Aug 24 01:02:07 2025 GMT
Subject: CN=13167b8e5f122f4a90bf89753ea4662d1048b11a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:64:19:de:2a:97:b4:66:ae:ff:da:2b:a3:42:
29:79:57:0a:4c:5a:00:2d:c3:34:b6:6e:db:ca:68:
27:c1:f5:3a:d8:e6:98:39:0a:9b:ca:8c:1e:11:a1:
82:c2:05:36:20:86:1a:18:2c:6e:56:69:1f:65:dd:
ee:93:b1:f8:ab:5b:f7:30:54:d3:13:4e:09:a3:46:
97:f2:14:fa:d4:e6:30:be:95:46:41:22:21:b2:89:
7e:5e:8e:1f:24:f9:77:c4:5f:2f:6e:05:04:06:48:
84:ce:34:9d:77:7f:d6:84:80:ac:ab:23:78:d7:6e:
43:ff:bc:bb:a8:c2:84:f4:07:cd:77:45:04:4d:27:
e4:f8:fb:8a:8b:d4:07:e1:3f:13:ab:fc:17:a0:a3:
a7:11:68:f3:40:01:1a:a3:7f:dd:94:09:0c:32:34:
de:f0:0a:e4:9d:d0:61:e1:db:32:7b:6e:d0:2b:c5:
03:6e:54:7e:1b:e7:fd:a6:38:99:58:71:c0:bf:00:
07:13:d1:a9:3d:41:9f:4f:8d:45:59:c7:cf:0f:31:
55:c7:66:ad:81:d4:d5:cb:1e:77:40:f2:b3:bf:8f:
82:34:86:e1:e5:85:b0:b8:bd:18:71:d8:07:88:19:
fa:45:3c:e4:19:cb:aa:9b:82:d0:a6:d9:88:e2:66:
81:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:16:7B:8E:5F:12:2F:4A:90:BF:89:75:3E:A4:66:2D:10:48:B1:1A
X509v3 Authority Key Identifier:
keyid:49:C2:9C:85:82:31:22:D3:AC:7C:7F:48:05:D5:B2:42:87:0D:2D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ScKchYIxItOsfH9IBdWyQocNLeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a57a63-a6b4-4165-9e5e-9c2d044dd4af/1/ScKchYIxItOsfH9IBdWyQocNLeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a57a63-a6b4-4165-9e5e-9c2d044dd4af/1/ScKchYIxItOsfH9IBdWyQocNLeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:23:e0:0a:06:93:bb:e5:f7:cf:71:2a:c7:1f:0e:37:cd:3a:
2c:a2:ef:5f:54:7f:13:e5:b8:ad:d1:32:b1:a7:81:5e:8b:e2:
d1:98:39:6a:d6:cb:49:4e:1a:c1:69:88:35:4e:47:7b:24:d3:
b6:dc:fb:56:cd:6e:01:31:77:ed:06:4c:d2:29:71:a5:d6:6a:
be:3d:22:cd:5c:6f:25:04:88:2f:83:34:93:b9:48:34:6d:27:
e4:ec:9e:50:2b:86:03:5d:45:11:77:a3:ba:77:f3:4a:87:75:
36:c0:54:d1:7e:1d:67:25:ec:2d:8d:0c:62:de:5b:70:34:0d:
bf:8c:8d:1f:23:4b:84:6e:fb:cb:b1:f5:e8:35:01:81:85:7d:
2a:a0:65:ea:42:e0:80:fc:b8:a1:7b:f0:e4:9c:f1:08:93:5c:
63:26:65:f0:ad:65:42:34:90:ca:f6:fb:4c:8c:79:0f:a8:e6:
ef:8c:28:94:69:d9:72:89:30:d6:f1:86:7a:aa:bd:7a:2a:53:
8d:f4:0b:f9:56:bf:da:45:10:6e:58:66:4d:23:02:a5:c0:26:
26:29:79:7f:b6:94:cf:01:3a:11:93:5e:4e:32:4b:be:5b:56:
01:6d:cb:26:72:07:43:f9:8a:e8:07:63:79:a6:97:55:fc:de:
4c:1f:39:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:33 2025 by rpki-client