
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
File: 2scQMP4IHgK6tII9BWj_sqMyZeE.mft (raw, json)
Hash identifier: u6ln6UiNv71dpOXytl8kKu6C1HxtNPGDdcxAdhUvjZg=
Subject key identifier: 29:4D:0F:87:20:27:9D:72:26:3F:8F:3F:8A:E0:70:D9:38:D6:E9:2B
Authority key identifier: DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1
Certificate issuer: /CN=dac71030fe081e02bab4823d0568ffb2a33265e1
Certificate serial: 019874502A0D8213FB25CCC2F1B39F7F0E50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
Manifest number: 05AD
Signing time: Mon 04 Aug 2025 09:01:07 +0000
Manifest this update: Mon 04 Aug 2025 09:01:07 +0000
Manifest next update: Tue 05 Aug 2025 09:01:07 +0000
Files and hashes: 1: 2scQMP4IHgK6tII9BWj_sqMyZeE.crl (hash: MsfG+cSBNad1ddF2XRc7bMNrRywxDuFHQwgL3ppvWeE=)
2: _aLDkeMiUI-Lqjzdkv0G6nDIZPI.roa (hash: tmIepxlUbHTd8KHj3iQSk+aTVIsaYnnddWmvrPeDuVM=)
3: cOPYQsOeCFDIc7qGbdrCMUud3Jc.roa (hash: BKdHxeFxd4fi3NghqoltBHVl5UTtuhA/jAVO3pAU5j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:2a:0d:82:13:fb:25:cc:c2:f1:b3:9f:7f:0e:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac71030fe081e02bab4823d0568ffb2a33265e1
Validity
Not Before: Aug 4 09:01:07 2025 GMT
Not After : Aug 5 09:01:07 2025 GMT
Subject: CN=294d0f8720279d72263f8f3f8ae070d938d6e92b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:23:6c:25:f4:10:a6:a1:b5:b4:f5:1d:b7:9b:
84:b0:13:4d:3c:50:71:16:20:04:77:49:93:4e:a4:
62:f1:4f:66:d0:dc:23:7a:d7:7c:8e:cc:ea:48:21:
27:51:31:f1:26:3c:83:de:1e:8e:7d:d2:c3:9e:01:
b6:60:1a:03:3a:e9:c0:29:97:5c:a0:d8:51:8f:f5:
77:62:e5:09:df:7d:33:da:e0:1e:b6:6a:78:f3:1e:
da:11:39:9a:89:42:b0:6a:d4:7a:11:e0:16:59:77:
7d:9b:91:ce:79:b3:e1:0b:71:79:1f:27:16:a9:4c:
f6:6f:06:a2:49:72:72:ea:64:1b:cd:2c:87:4b:c8:
88:65:a1:d3:b5:37:00:88:36:e3:28:a2:fb:a2:99:
9a:4b:d9:fd:73:d3:7e:38:c7:71:c2:f6:7a:81:c1:
6b:bb:2a:d9:45:91:d2:0f:6d:05:bb:8e:1f:bd:1e:
b7:45:76:ca:93:8d:08:93:fd:f8:a5:f1:00:89:d6:
9f:0e:54:8c:23:2b:56:b0:dc:5d:f1:15:9c:0f:84:
eb:0e:bf:02:2d:75:af:85:17:01:58:ac:c1:41:3c:
4b:54:a0:6b:22:19:d5:1c:ee:b1:00:8d:6f:ac:0e:
c7:86:e7:13:53:66:d1:ef:8f:a3:a1:da:74:a1:9f:
ba:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:4D:0F:87:20:27:9D:72:26:3F:8F:3F:8A:E0:70:D9:38:D6:E9:2B
X509v3 Authority Key Identifier:
keyid:DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:be:12:85:75:44:30:f2:45:aa:21:53:93:a4:77:75:77:4e:
89:44:b5:77:fe:ae:bb:85:ea:8b:cf:e4:62:72:4c:97:b1:ee:
26:83:ee:4e:00:ba:49:17:65:e5:22:d7:23:84:37:73:27:27:
49:56:7f:53:a9:c1:ab:74:2f:d2:36:2f:25:de:bd:fc:f4:24:
36:42:4e:76:d7:14:0c:a2:bd:eb:79:d5:c2:23:e8:a2:9b:c0:
e8:72:cd:56:00:12:22:65:c2:22:7c:80:36:e2:e7:2e:65:10:
78:d2:78:fd:c9:3a:80:99:07:59:9f:0b:6c:a7:b7:fd:6a:54:
bb:72:b2:82:12:bf:b2:29:3b:94:51:d5:a1:92:5b:4f:e1:26:
f0:bf:db:9a:7e:ae:42:57:f2:e0:b4:8d:68:72:96:ad:44:bf:
3b:cd:d0:b4:b6:91:df:ec:04:ea:61:21:1a:25:40:dd:cc:96:
84:14:f4:6a:92:8d:71:77:ba:94:0a:83:81:7d:31:bd:a7:b7:
60:ec:33:88:ff:fa:0d:5f:f9:6b:d8:eb:db:23:ef:83:9a:fb:
8b:68:0c:65:71:e8:6d:43:6a:cd:e1:99:fe:25:be:39:e5:92:
b3:c3:93:36:c3:f3:c9:55:5e:8f:b8:12:91:30:60:c0:ae:2c:
27:f8:ba:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:39 2025 by rpki-client