Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
File: ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft (raw, json)
Hash identifier: 97YUd3Js37Yibzn+s23W0Zi79teTlS/PZozoim5fKU8=
Subject key identifier: D9:49:A5:6C:7C:7A:C3:FB:0B:65:5D:BE:7A:C7:29:9A:5A:6F:41:D0
Authority key identifier: 49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71
Certificate issuer: /CN=49c403d43b5f38fca2119cd1409a92763edefe71
Certificate serial: 0196C013A112403441BBAF624785BACD7BA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
Manifest number: 153A
Signing time: Sun 11 May 2025 16:00:33 +0000
Manifest this update: Sun 11 May 2025 16:00:33 +0000
Manifest next update: Mon 12 May 2025 16:00:33 +0000
Files and hashes: 1: 6ZwG_Y60Ty5PTqTrDlKsyphblXQ.roa (hash: vR97+OeUXCCOXRpSdGW1/Y4Sp/FefDWwnMJQ9Jni4rk=)
2: BGdD8LDEAedO7LkZulNO0on6BtA.roa (hash: 5JKMac3WduBMBCnJzqk90kK6WJ4PSh8kMPbmsKHD+wc=)
3: Bs46C8G9Xvlaiic-U_vabhAJhco.roa (hash: 3sJguMlQk0GQr3vKdqIN2WvzrXMmi6x68HlsMnn5UuM=)
4: D5iZPHtIHYKSLlUoRqhHam3z4fw.roa (hash: iQxb5JVe2tNY+bNton8d20CXKpbqyN/eHLh+5EoqEaI=)
5: Rl9152Qvb_u7j8K6moXvloqlxuw.roa (hash: 7VxgCsm28hyqe3FM8bfzznGaU0K/XnvaJIfEnQlGvZI=)
6: ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl (hash: FESLfiIUgDETVwY8cv5fN/dtbLXBSnNn3SJWyG7DPrE=)
7: bkbeFY-foKd3saHxL2Ms4IvaWZI.roa (hash: Pb5Tubkcy9LxO6t4tf4Rf3p3iIfsYoVtUzwvSZ29zs0=)
8: h13V4d_ekYYA6uv0-jBvE7ljXgg.roa (hash: 64VEKJzZ2W6+uSgCoWExxMNGZCghiQUddh02slxkwlI=)
9: y4ffehEhJcuHU2W4RqSmsYxzQlg.roa (hash: stMeXk1cas0IbSmXY2+Qqlw++LVpL1MZDKLPTnxrrwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:13:a1:12:40:34:41:bb:af:62:47:85:ba:cd:7b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49c403d43b5f38fca2119cd1409a92763edefe71
Validity
Not Before: May 11 16:00:33 2025 GMT
Not After : May 12 16:00:33 2025 GMT
Subject: CN=d949a56c7c7ac3fb0b655dbe7ac7299a5a6f41d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:75:33:b5:fa:13:83:21:7d:9f:f7:a5:f0:6e:
5d:49:6d:e9:b1:ce:fd:d1:4e:4e:81:c2:58:f1:05:
b8:6e:29:76:49:8e:f5:b4:0b:8a:99:44:72:f7:c1:
c3:71:58:97:5b:f0:03:c2:c6:98:23:fc:be:89:11:
02:85:11:a2:dc:f5:ac:eb:55:aa:8c:46:84:29:0d:
48:ee:5c:fe:bb:4a:86:c4:2e:45:95:0d:c7:ea:ac:
a5:c7:1f:de:77:de:2f:23:45:39:b7:e8:d0:62:a8:
b8:06:c9:98:4e:64:9d:3b:21:b4:1b:5d:59:91:49:
9b:5b:b9:ae:52:7d:f1:18:5c:4b:89:51:5c:d3:68:
4a:d1:f5:9d:f4:f7:4c:0e:1e:d2:04:a7:52:bd:ba:
bd:a6:b3:81:37:d0:f2:27:20:f7:21:f3:c2:11:09:
83:b5:97:a3:c7:a7:ab:19:59:47:84:d6:b4:03:d8:
25:15:74:07:3b:94:ce:de:c8:2b:97:b9:0f:39:9b:
04:a3:c9:af:0e:67:1b:2d:ec:7c:2a:9f:e3:e7:00:
da:69:63:6e:46:6d:91:27:4f:52:c4:b9:86:b8:ba:
dc:21:ce:1c:3f:9c:51:2f:8b:98:7c:cb:47:83:d7:
82:37:4d:c6:ed:86:3f:01:95:ea:01:bc:8d:68:d4:
a8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:49:A5:6C:7C:7A:C3:FB:0B:65:5D:BE:7A:C7:29:9A:5A:6F:41:D0
X509v3 Authority Key Identifier:
keyid:49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:89:a9:e6:f0:62:14:70:bf:9e:b9:39:ae:85:ef:35:8b:4e:
23:bb:f0:28:7e:f0:e7:f8:68:40:1b:84:e5:88:66:54:8d:cf:
2b:7e:98:39:d7:66:12:a6:2b:c3:13:7f:19:17:d0:e6:c4:75:
c3:49:20:63:36:92:15:f1:87:69:71:49:96:c2:24:22:13:46:
20:f1:d0:c6:27:06:91:49:fc:e4:96:81:69:04:b2:c5:a8:f0:
fc:b5:4b:6f:83:3b:ac:ae:cc:e9:76:1a:eb:63:f1:97:70:9f:
bb:dd:bc:3f:c9:e4:61:33:84:a0:fe:b3:12:47:26:cc:f9:e4:
91:b8:e4:fc:b9:97:51:86:91:03:10:07:44:de:19:86:09:b2:
0a:c6:28:c3:35:41:93:83:ff:38:46:5b:39:fa:30:2e:57:8c:
21:64:7d:d6:df:10:09:aa:c7:b0:f2:5c:8c:f5:2d:94:46:c9:
0d:b9:51:25:ea:24:8c:e6:94:b4:c0:4e:3e:8e:54:74:7d:53:
33:ae:cf:41:16:f5:04:12:2a:4f:f4:27:92:17:d6:5f:86:44:
d9:6e:60:82:d2:62:20:82:61:32:5b:67:ad:75:c0:02:45:87:
98:e5:77:46:6a:22:6a:b4:d0:f1:29:2f:7b:76:56:7a:af:e1:
4d:c6:b0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:24:51 2025 by rpki-client