Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a57a63-a6b4-4165-9e5e-9c2d044dd4af/1/ScKchYIxItOsfH9IBdWyQocNLeI.mft
File: ScKchYIxItOsfH9IBdWyQocNLeI.mft (raw, json)
Hash identifier: r36J104uALDNsKgi12SZ38gqdieLT5dFFi8iI1bNvc0=
Subject key identifier: B3:A0:EA:03:E9:76:C8:9C:FF:97:EA:08:C7:76:A8:2C:19:BC:D4:BC
Authority key identifier: 49:C2:9C:85:82:31:22:D3:AC:7C:7F:48:05:D5:B2:42:87:0D:2D:E2
Certificate issuer: /CN=49c29c85823122d3ac7c7f4805d5b242870d2de2
Certificate serial: 0197B6A21EDA594F2BDF99C54B7F4CF57438
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ScKchYIxItOsfH9IBdWyQocNLeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a57a63-a6b4-4165-9e5e-9c2d044dd4af/1/ScKchYIxItOsfH9IBdWyQocNLeI.mft
Manifest number: 134A
Signing time: Sat 28 Jun 2025 13:02:47 +0000
Manifest this update: Sat 28 Jun 2025 13:02:47 +0000
Manifest next update: Sun 29 Jun 2025 13:02:47 +0000
Files and hashes: 1: ScKchYIxItOsfH9IBdWyQocNLeI.crl (hash: O46Thd61nHh18OFKWMYXeONJgQLBno3SEoputEHF5so=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a57a63-a6b4-4165-9e5e-9c2d044dd4af/1/ScKchYIxItOsfH9IBdWyQocNLeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a57a63-a6b4-4165-9e5e-9c2d044dd4af/1/ScKchYIxItOsfH9IBdWyQocNLeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ScKchYIxItOsfH9IBdWyQocNLeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:1e:da:59:4f:2b:df:99:c5:4b:7f:4c:f5:74:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49c29c85823122d3ac7c7f4805d5b242870d2de2
Validity
Not Before: Jun 28 13:02:47 2025 GMT
Not After : Jun 29 13:02:47 2025 GMT
Subject: CN=b3a0ea03e976c89cff97ea08c776a82c19bcd4bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a0:7f:b2:32:73:a6:f5:0b:fd:84:6b:da:63:
4d:0b:a7:11:1e:c2:74:cc:31:73:ed:1a:49:f5:04:
75:26:f3:b3:2c:8a:4c:97:83:a7:11:a0:e2:32:10:
dc:04:1f:e7:0c:61:29:aa:cd:07:08:4e:c6:ca:d9:
d8:da:fe:c0:82:5f:85:ab:3b:2b:a5:f0:51:20:66:
ee:32:0f:7d:14:f2:6c:89:bc:df:6e:4c:43:71:54:
dc:33:1c:82:91:03:15:5f:e6:06:9b:a8:e4:bb:cb:
81:8f:22:77:63:8b:e8:a1:30:26:63:18:95:30:65:
2b:a6:ee:21:2a:5b:44:44:04:15:b7:00:fa:14:62:
91:60:c8:d0:0e:e9:e8:04:f0:84:9a:3d:25:8d:cc:
8d:95:e9:00:ff:17:e5:d5:a9:8a:39:b4:5d:c0:a7:
41:36:ed:0c:e3:94:93:80:fc:10:b1:63:ec:48:a2:
4f:84:6f:b6:8c:11:1b:d7:a0:2b:79:a1:10:22:0e:
da:64:87:b2:77:57:55:64:ae:fb:11:64:54:a2:1f:
47:a1:e7:de:89:b9:d5:b9:4f:dc:94:06:29:6a:5b:
8f:4c:68:2e:8a:20:22:d5:27:e3:92:35:ac:ac:71:
15:b2:bc:a2:17:eb:b7:5c:ff:93:4c:a4:6f:ec:4f:
d8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A0:EA:03:E9:76:C8:9C:FF:97:EA:08:C7:76:A8:2C:19:BC:D4:BC
X509v3 Authority Key Identifier:
keyid:49:C2:9C:85:82:31:22:D3:AC:7C:7F:48:05:D5:B2:42:87:0D:2D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ScKchYIxItOsfH9IBdWyQocNLeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a57a63-a6b4-4165-9e5e-9c2d044dd4af/1/ScKchYIxItOsfH9IBdWyQocNLeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a57a63-a6b4-4165-9e5e-9c2d044dd4af/1/ScKchYIxItOsfH9IBdWyQocNLeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:39:47:96:d0:6a:0d:fe:fa:7a:23:d3:42:0f:12:21:06:8e:
c6:88:72:37:8e:bd:a2:77:f0:09:7f:09:72:1b:53:21:6f:8a:
8c:1d:7b:29:72:f8:08:f6:28:72:88:f7:b2:80:45:5e:5e:6d:
ad:0a:06:d6:7a:29:ab:d3:0b:23:05:82:9a:8f:7f:7d:33:c3:
98:5f:e0:76:e8:4b:3a:8a:30:f1:c5:ef:13:f2:a8:14:36:0a:
73:8c:e4:e7:c7:cf:61:c7:41:36:ac:06:59:9a:12:68:87:e4:
6a:f0:d0:ab:6f:62:e3:0d:2e:82:25:35:dd:ff:69:a4:cf:4b:
0e:9d:7e:fe:37:fc:3a:bc:c5:8e:56:00:22:57:98:41:42:71:
20:9b:09:73:20:90:29:c8:1c:de:be:f7:50:5c:41:c2:6c:51:
68:85:2d:0f:37:5b:57:b0:1a:ff:31:65:45:10:03:fe:2f:9e:
bc:01:ae:86:92:2c:31:9a:4f:ab:52:bb:42:d6:03:ac:93:ac:
c9:88:fe:63:ef:3b:70:2c:23:4f:1b:86:22:59:20:6f:68:bf:
eb:fe:48:a7:01:22:2c:37:d6:17:76:59:8f:f1:be:41:c1:55:
61:ae:2e:b3:88:d9:21:0c:dc:37:03:67:59:e6:09:6d:d8:4d:
c3:bc:11:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:07:20 2025 by rpki-client