Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
File: scPsU58j7gMao5asXO1CVjiEt7M.mft (raw, json)
Hash identifier: ZWuYAcVEk4updx5likU8QTXBAI4PLSmhfdTHErC5uBM=
Subject key identifier: 71:30:87:84:94:CD:17:60:D5:C3:B1:43:D1:C3:3C:AE:CF:B4:0A:E5
Authority key identifier: B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
Certificate issuer: /CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Certificate serial: 01967943D9DD00BE0F694E8083E73B56D359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
Manifest number: 07CC
Signing time: Sun 27 Apr 2025 22:00:11 +0000
Manifest this update: Sun 27 Apr 2025 22:00:11 +0000
Manifest next update: Mon 28 Apr 2025 22:00:11 +0000
Files and hashes: 1: YggPTsSNi-M37lrKOeIMBOEQEh0.roa (hash: QqUu1L/3s6oQrDkvCSSy8nc3UlcW3BrRdN7rqT/pHRE=)
2: b4AGcn0hWNQHufubVLqGkpQqCJU.roa (hash: TffukrxORwRZt6LrZ4vP1Br2diZAMHQpSo83hi5snQM=)
3: scPsU58j7gMao5asXO1CVjiEt7M.crl (hash: iXAcn7ulCy2An0PGcHNJ9jaYv2ytqoXkHndA18yN3mY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:43:d9:dd:00:be:0f:69:4e:80:83:e7:3b:56:d3:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Validity
Not Before: Apr 27 22:00:11 2025 GMT
Not After : Apr 28 22:00:11 2025 GMT
Subject: CN=7130878494cd1760d5c3b143d1c33caecfb40ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:cc:2b:26:a5:7e:25:14:ca:6d:e8:ff:75:f8:
d3:c2:67:ae:33:fb:d9:e5:e9:81:bb:d4:ef:4a:3f:
2b:f2:cf:0e:28:3c:99:0f:33:ee:8f:3a:8c:75:04:
ec:c5:96:77:ea:74:64:8c:d6:a1:bd:0e:e1:61:a3:
9b:92:15:84:05:b7:e9:c4:ac:8a:5a:84:cf:93:e6:
98:11:d4:4a:20:79:dd:2b:26:7d:3f:90:6d:15:c8:
14:80:d7:6a:71:09:20:ab:18:0d:b7:2b:30:4d:bf:
0f:1d:0d:11:24:4b:b6:06:3c:3f:0d:4f:24:2f:c8:
f2:33:d6:fb:df:ff:7f:2a:a4:dc:cc:20:f6:f8:55:
4e:fa:d0:9b:75:bd:6c:de:0c:74:5b:e6:19:42:b0:
2e:23:4f:11:4a:0f:9d:70:3f:ed:88:e9:a3:d4:ea:
55:a2:50:fb:fb:15:df:31:a1:45:3a:bb:0d:b5:c0:
97:43:9c:94:39:7a:d4:f7:08:2b:96:8d:3b:86:59:
08:51:9a:d8:c4:94:be:dc:6d:44:75:3d:84:17:d3:
8c:fb:91:7c:47:21:0f:ac:2f:3c:bc:84:a9:56:7f:
d4:eb:ae:1d:31:01:af:6a:76:0e:5a:3b:82:30:92:
9f:dc:3c:df:a4:a2:5e:9d:f5:02:6a:d6:b6:41:bc:
55:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:30:87:84:94:CD:17:60:D5:C3:B1:43:D1:C3:3C:AE:CF:B4:0A:E5
X509v3 Authority Key Identifier:
keyid:B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:02:4b:78:fd:71:d9:04:bc:1e:a5:02:7a:88:09:53:70:37:
44:d0:16:0e:a8:69:c8:81:25:6c:cd:6b:63:e6:43:67:1b:52:
6f:b4:57:29:2d:e3:24:5c:ae:bd:1b:94:9b:10:4b:15:9e:29:
ad:92:82:81:f2:ca:79:7f:5f:29:0e:0f:a1:00:1a:0a:77:90:
af:ff:82:d3:40:38:2b:13:59:fd:ed:51:3d:fd:22:03:9a:33:
ba:53:92:ce:85:d3:0b:97:73:89:93:ee:cb:49:a2:af:be:f7:
0a:1e:3b:01:dc:34:04:ea:61:74:a2:65:29:83:9e:29:bf:97:
c2:97:bb:87:1e:f7:9d:f8:9f:af:09:77:49:2c:10:ee:35:b3:
15:67:27:8b:95:c6:3e:d8:71:b6:71:82:d7:fd:bd:ab:a1:f4:
93:b1:88:d0:04:10:ab:53:a1:0a:cb:1b:38:43:a2:5d:68:fe:
0e:79:3f:b0:32:0a:c1:36:28:eb:55:65:c2:25:75:2a:7b:26:
4e:ec:e7:51:42:81:68:cd:21:49:ff:c1:61:24:44:66:d7:d6:
c3:8e:89:fb:ef:99:73:e3:0a:27:14:0d:73:c9:a2:cf:12:03:
9a:3b:db:53:cb:7d:1a:e3:6a:c9:90:e9:32:0b:c4:94:34:91:
23:cc:9e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:56:00 2025 by rpki-client