Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft
File: sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft (raw, json)
Hash identifier: KAOix/jiUk4vfgVKr0aLlQ+TUGBOThF5yl5ZFzQhtLc=
Subject key identifier: 21:E2:E7:D6:54:9D:FA:A3:E4:4C:28:15:05:8A:B7:F1:07:D3:48:62
Authority key identifier: B1:CD:C2:6D:44:EA:F8:56:54:48:1E:95:81:04:3E:14:88:77:65:B4
Certificate issuer: /CN=b1cdc26d44eaf85654481e9581043e14887765b4
Certificate serial: 01976C98DFD1E5DF97770CF42B3974861E30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft
Manifest number: 10E7
Signing time: Sat 14 Jun 2025 04:00:47 +0000
Manifest this update: Sat 14 Jun 2025 04:00:47 +0000
Manifest next update: Sun 15 Jun 2025 04:00:47 +0000
Files and hashes: 1: G1Dy1jIdJhnPg1RR07SyKW4TRdA.roa (hash: DeuawucuklWfQxVupMFlWsFVrFr6ThqGmaVCsW6hwCg=)
2: MRwWdWt562qFAJPbbIblGOiEamc.roa (hash: HBxjXaaWOR1gt1kLDIaGluOQUgmhyXoAYpcX/2J2fWA=)
3: nzP88bjh-XEZ2kCW3oiiu2uSEHc.roa (hash: Kf5r0P3IvTLCYpsr+vk6c4IGLFB/DHZsFGgImWavBWE=)
4: sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl (hash: 5fHLHQqlB0U6BZrpX9fy115v2v4yy8usHceCZ9CIV40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:df:d1:e5:df:97:77:0c:f4:2b:39:74:86:1e:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1cdc26d44eaf85654481e9581043e14887765b4
Validity
Not Before: Jun 14 04:00:47 2025 GMT
Not After : Jun 15 04:00:47 2025 GMT
Subject: CN=21e2e7d6549dfaa3e44c2815058ab7f107d34862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:97:e6:b1:3c:6e:50:17:46:e1:57:6d:87:0e:
ec:d9:f2:cd:54:c9:8d:ac:81:a0:a5:74:8c:16:98:
06:0d:d4:30:cc:48:b9:3e:89:7a:7e:58:6c:de:28:
2d:10:8b:9b:3e:cd:bf:24:85:82:cc:77:5d:f6:44:
d3:ab:b2:56:57:80:0d:96:a0:4c:da:7a:2c:2a:cf:
8e:28:fd:eb:5c:9c:c8:61:4b:29:2b:ba:bb:07:b2:
d1:61:e9:15:2b:37:da:db:be:5c:ee:51:0d:c7:1c:
e8:fa:f2:82:60:aa:d2:3a:e9:e9:ec:6f:e3:fc:1c:
08:4c:db:ae:97:12:42:95:32:3f:76:2c:c4:76:47:
4e:6d:30:19:a6:e5:c0:76:8b:56:71:a9:42:f6:0a:
9f:43:7d:0e:bf:f1:36:d6:73:89:a2:c8:12:70:85:
6b:3a:bf:85:f8:c0:d2:52:dc:cd:38:54:ab:e3:52:
b5:b9:2a:9a:a7:bc:6c:a2:5f:21:3f:b1:2d:41:78:
19:45:8c:b1:f9:11:58:e4:20:94:04:c0:af:64:99:
f0:9c:b8:0d:80:30:2e:bd:90:7b:00:c0:a7:07:fd:
0b:05:6a:64:e7:6e:d7:4f:3d:5a:86:9d:5d:8a:e9:
50:90:69:3c:eb:d2:47:49:72:5e:c8:fa:36:ae:a4:
a2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E2:E7:D6:54:9D:FA:A3:E4:4C:28:15:05:8A:B7:F1:07:D3:48:62
X509v3 Authority Key Identifier:
keyid:B1:CD:C2:6D:44:EA:F8:56:54:48:1E:95:81:04:3E:14:88:77:65:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:0a:47:52:d9:3b:b5:22:18:e6:67:bb:a7:14:dc:41:bd:ec:
6d:e4:e6:db:25:00:37:2b:a7:4d:d2:36:fb:f6:de:01:74:21:
39:d8:cc:fe:24:cc:56:2d:82:91:90:66:e3:70:5d:18:9a:a8:
1f:c5:3b:5f:21:cd:dd:22:fa:62:c2:d7:27:eb:1f:73:6a:af:
0f:8c:96:a1:3a:f7:d4:8c:d7:a6:88:88:da:df:7b:10:95:39:
68:7d:10:8c:05:db:49:7f:6d:41:b1:91:e5:02:bd:f2:f1:29:
28:76:e5:0c:2a:bf:81:db:f6:23:6b:91:d3:00:30:1c:3d:bf:
c4:de:a6:ef:ef:9b:d0:9e:c9:bb:13:9a:8d:4f:9d:a6:7e:07:
51:9a:d1:e1:0c:07:a2:d8:2b:50:eb:45:31:8a:f5:b4:05:c7:
d8:47:5b:f1:b4:8c:44:8b:eb:fd:bd:26:83:0c:3c:4e:9c:4e:
2e:bb:1f:ae:93:63:b0:57:26:46:73:72:5e:c0:de:57:d4:80:
62:8c:66:f0:98:10:54:16:36:25:0a:fa:42:63:e7:a2:4a:bf:
d9:11:09:cf:3e:f5:d1:7e:45:c5:48:a4:7d:11:1f:f1:85:b7:
39:08:2d:fa:29:74:66:f1:d6:7d:2b:28:03:df:fa:35:33:7f:
33:42:31:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:45:05 2025 by rpki-client