Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft
File: 0kSCMx_jdh3lOpm9N8j9am-foAc.mft (raw, json)
Hash identifier: R6c+3sAT8yKrpBcYz0HNDxOpPLed2ZGSf5PIkq2Ja1g=
Subject key identifier: C5:2D:E2:AF:2F:50:31:40:34:53:68:7A:09:5D:BB:4C:95:11:FD:98
Authority key identifier: D2:44:82:33:1F:E3:76:1D:E5:3A:99:BD:37:C8:FD:6A:6F:9F:A0:07
Certificate issuer: /CN=d24482331fe3761de53a99bd37c8fd6a6f9fa007
Certificate serial: 01987E2EED9981BFBF9AED4CA308114DBBB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kSCMx_jdh3lOpm9N8j9am-foAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft
Manifest number: 4F
Signing time: Wed 06 Aug 2025 07:01:01 +0000
Manifest this update: Wed 06 Aug 2025 07:01:01 +0000
Manifest next update: Thu 07 Aug 2025 07:01:01 +0000
Files and hashes: 1: 0kSCMx_jdh3lOpm9N8j9am-foAc.crl (hash: e220LrMj6iQb1WheFUr9RN1d+QgRt7gMndWNTt5bhCY=)
2: M95FjIFFe7FE8GSWYSZYw7JDajo.roa (hash: NrgUx/KwCI45z+00qu3mq53IxB/PSBwR22i9a5VwK5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kSCMx_jdh3lOpm9N8j9am-foAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:2e:ed:99:81:bf:bf:9a:ed:4c:a3:08:11:4d:bb:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24482331fe3761de53a99bd37c8fd6a6f9fa007
Validity
Not Before: Aug 6 07:01:01 2025 GMT
Not After : Aug 7 07:01:01 2025 GMT
Subject: CN=c52de2af2f5031403453687a095dbb4c9511fd98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:55:ce:91:01:9e:89:ca:d5:65:12:d2:34:a2:
ca:36:59:ca:15:63:43:a9:76:0e:4f:81:5e:26:54:
9b:ce:1c:32:a8:b9:51:9d:90:ff:3c:8d:45:6e:e5:
02:62:51:41:80:b6:7d:5b:71:4a:3a:bf:36:38:a0:
4a:75:e9:10:2c:6c:6d:19:1f:5c:39:1a:04:9f:d9:
0e:1e:32:59:c9:00:88:d6:c5:a2:79:cf:af:81:08:
1e:93:67:a5:7b:ce:41:92:d8:87:75:e8:25:0c:5b:
b1:16:b5:6a:0d:b4:8d:fc:17:c3:fd:a5:a8:68:45:
f7:86:52:a8:26:28:3d:8a:bf:dd:ad:1a:cf:e9:0b:
b3:92:11:5b:33:d8:74:6c:f3:ac:0d:ba:fe:b7:68:
bf:0d:49:d7:84:95:54:eb:e7:a6:b1:ab:85:64:c7:
4d:be:d9:38:a6:82:c6:67:2f:bb:49:2d:1b:b2:f2:
be:61:be:e3:5c:c6:8f:d5:00:b2:21:cf:26:56:c7:
6a:d7:81:06:56:51:4b:df:c4:d5:24:a3:f6:91:95:
a6:07:fe:65:cc:74:6f:e9:4a:1a:00:41:84:9d:3a:
88:ab:b2:1c:3f:ca:eb:2f:4c:a9:65:46:2b:59:43:
86:af:f2:5a:99:22:23:a5:47:cc:8c:6a:23:ba:8c:
50:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:2D:E2:AF:2F:50:31:40:34:53:68:7A:09:5D:BB:4C:95:11:FD:98
X509v3 Authority Key Identifier:
keyid:D2:44:82:33:1F:E3:76:1D:E5:3A:99:BD:37:C8:FD:6A:6F:9F:A0:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kSCMx_jdh3lOpm9N8j9am-foAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:df:9c:3e:7b:98:88:77:1d:e8:a0:8e:4b:08:c6:16:80:f5:
33:12:7e:9b:25:a9:9f:05:08:0b:96:c5:68:90:be:39:e6:12:
ef:cb:83:c9:74:2e:9c:21:ca:50:94:ac:99:0f:86:8e:42:a0:
1c:ce:c3:1f:e6:0b:61:bc:e1:73:c2:14:49:27:f1:e2:9c:5e:
1d:02:ce:ff:60:09:77:c4:df:fc:2a:21:d6:ea:c3:71:25:9f:
21:85:0b:d0:bb:7f:81:0a:e6:86:fc:b6:e1:1a:eb:c3:32:e3:
94:f1:fd:35:59:7c:b2:de:d0:06:76:55:1c:51:5c:44:93:dc:
1e:d4:8b:fc:ea:d6:cc:3a:71:ee:8a:c6:76:33:c6:fd:ae:f8:
17:8d:b3:38:ee:52:a4:a6:f3:ff:7f:de:e5:c6:23:56:48:52:
ab:5d:42:2f:68:4a:dc:b0:cf:9a:88:ff:10:4f:f5:fc:7f:c4:
d7:3c:50:4e:e0:91:60:1b:64:c9:96:2c:ea:a9:50:d3:fd:bb:
55:ed:73:39:8f:08:2b:bd:5a:29:96:d8:c8:b8:f9:6d:b1:78:
ef:c2:87:b7:29:97:51:d9:21:92:08:9b:46:91:73:c5:8e:ca:
41:a4:bf:20:66:ae:1e:1b:82:4e:bb:c1:57:82:4f:fa:64:e9:
03:c4:8b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:30:05 2025 by rpki-client