Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
File: x2cScLac7FBGBrEmxMqDOBavfaQ.mft (raw, json)
Hash identifier: B70Cm+ZmdR/k+Cwb2I0k2B3c0hA6aMehSNIAno/d47o=
Subject key identifier: 35:59:83:5D:1A:DC:8D:FF:14:99:D2:86:B4:8D:4B:B3:1A:B7:CE:E0
Authority key identifier: C7:67:12:70:B6:9C:EC:50:46:06:B1:26:C4:CA:83:38:16:AF:7D:A4
Certificate issuer: /CN=c7671270b69cec504606b126c4ca833816af7da4
Certificate serial: 019885B1FA0D556E0A5CF3DD3D4994FDA42C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2cScLac7FBGBrEmxMqDOBavfaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
Manifest number: 06F4
Signing time: Thu 07 Aug 2025 18:01:30 +0000
Manifest this update: Thu 07 Aug 2025 18:01:30 +0000
Manifest next update: Fri 08 Aug 2025 18:01:30 +0000
Files and hashes: 1: l2_sIOs4HMyf2OgLQgyJY2hl_f0.roa (hash: ux1UyG4HPgGv7Al9zX4rAYUS2Y3nKcLtZPuBWZDi2xs=)
2: x2cScLac7FBGBrEmxMqDOBavfaQ.crl (hash: 7dHX6QGXVZ0ZpRG7z8hpxVh5usfY9+mfT6+d1AExIXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2cScLac7FBGBrEmxMqDOBavfaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:b1:fa:0d:55:6e:0a:5c:f3:dd:3d:49:94:fd:a4:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7671270b69cec504606b126c4ca833816af7da4
Validity
Not Before: Aug 7 18:01:30 2025 GMT
Not After : Aug 8 18:01:30 2025 GMT
Subject: CN=3559835d1adc8dff1499d286b48d4bb31ab7cee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fb:6e:46:0f:cd:96:b3:97:47:8b:0b:25:1b:
75:b2:dd:14:26:b9:b5:15:fa:ab:ff:d9:6a:1d:85:
2f:51:04:f3:f6:da:66:be:67:56:7d:3a:b2:2d:2a:
5d:24:ba:0b:af:4b:02:bb:89:26:c4:92:b6:08:32:
8b:8e:25:6d:c1:23:81:98:2f:da:ec:e7:f7:f1:ee:
3e:b4:5f:b2:ec:82:31:e2:8a:8e:47:51:17:3e:52:
ca:df:61:bc:bd:75:c1:56:cf:0b:48:a2:1a:c1:08:
6e:0c:f6:4a:c6:46:37:c3:4f:4b:27:a5:11:78:97:
c2:ef:72:ab:39:80:72:61:5e:4b:5d:1c:c7:1f:5a:
6f:ed:b4:6e:91:2f:0b:d2:5b:e8:38:2b:10:e1:38:
c0:49:ca:2c:c8:96:28:b7:19:c1:1b:1c:95:a6:1d:
5a:a5:71:3a:ff:ee:8f:f9:32:c9:fa:21:33:57:df:
70:f6:7c:fe:bb:bc:be:7c:0a:2c:23:5e:46:67:a8:
05:d2:ca:9f:fc:63:00:9f:64:c9:99:ee:c4:84:75:
f4:b1:bd:d0:0e:32:58:0a:91:18:0d:6f:c7:8d:bd:
79:db:73:92:52:b8:a5:18:53:1e:f2:a4:0e:8e:e3:
80:24:48:84:c5:ee:64:3e:b1:de:14:39:c9:53:ed:
43:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:59:83:5D:1A:DC:8D:FF:14:99:D2:86:B4:8D:4B:B3:1A:B7:CE:E0
X509v3 Authority Key Identifier:
keyid:C7:67:12:70:B6:9C:EC:50:46:06:B1:26:C4:CA:83:38:16:AF:7D:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2cScLac7FBGBrEmxMqDOBavfaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:4c:ec:3b:d6:56:ea:d6:ef:49:f6:35:2c:d8:54:a4:b2:34:
8a:ca:86:69:b2:a5:22:df:80:ba:f0:72:95:ac:72:8e:e7:ef:
55:30:3f:3d:74:d3:4d:06:fc:55:68:c6:dd:ce:58:bd:16:bf:
12:21:f1:89:55:e0:a4:7a:6f:a4:bc:6c:9a:95:d3:00:5c:29:
91:be:f2:cb:9b:fb:b9:1d:f0:e7:86:70:b1:81:ef:fa:9a:10:
53:76:9b:2b:23:7b:95:c0:e8:87:24:26:e2:8c:2d:67:cd:5b:
21:e1:81:2e:62:d5:8f:d8:53:e1:71:a4:14:e3:05:de:5f:07:
00:6d:ed:f0:c7:39:07:8e:d1:17:fd:2b:91:7e:c1:51:3a:5b:
b6:83:51:8f:ef:65:f3:6c:ea:87:2b:5f:fc:fe:85:65:11:34:
24:fc:b9:88:9d:77:4e:00:1f:be:c0:18:27:e7:0a:b1:1f:bd:
08:9c:0d:b8:52:ad:fa:4d:b6:90:37:b2:55:53:dd:ea:ae:c0:
89:a2:e9:1a:8c:41:32:7e:ef:db:8c:f0:cb:3e:50:a5:ca:80:
c8:eb:25:8a:68:b7:74:eb:07:f0:c2:d8:b8:48:7c:cd:12:25:
52:03:8d:fa:c8:7e:72:04:c3:55:33:ce:6e:8f:12:b8:98:91:
62:f4:fc:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:10:07 2025 by rpki-client