Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
File: 2scQMP4IHgK6tII9BWj_sqMyZeE.mft (raw, json)
Hash identifier: mY2HNBQs4ozNycDKhiYnNUDn2N9V34xNJ/IGxwqIivk=
Subject key identifier: B7:5B:25:ED:02:78:15:46:D2:C5:93:5C:BF:1D:EB:73:88:31:F1:59
Authority key identifier: DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1
Certificate issuer: /CN=dac71030fe081e02bab4823d0568ffb2a33265e1
Certificate serial: 01967C450AC85D43BCC7AB28236E77A7D2A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
Manifest number: 04A8
Signing time: Mon 28 Apr 2025 12:00:21 +0000
Manifest this update: Mon 28 Apr 2025 12:00:21 +0000
Manifest next update: Tue 29 Apr 2025 12:00:21 +0000
Files and hashes: 1: 2scQMP4IHgK6tII9BWj_sqMyZeE.crl (hash: nltcl8U9wR2D2f5tPqcPxFgqZdBwrFRZw6k7mODrvVw=)
2: _aLDkeMiUI-Lqjzdkv0G6nDIZPI.roa (hash: tmIepxlUbHTd8KHj3iQSk+aTVIsaYnnddWmvrPeDuVM=)
3: cOPYQsOeCFDIc7qGbdrCMUud3Jc.roa (hash: BKdHxeFxd4fi3NghqoltBHVl5UTtuhA/jAVO3pAU5j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:45:0a:c8:5d:43:bc:c7:ab:28:23:6e:77:a7:d2:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac71030fe081e02bab4823d0568ffb2a33265e1
Validity
Not Before: Apr 28 12:00:21 2025 GMT
Not After : Apr 29 12:00:21 2025 GMT
Subject: CN=b75b25ed02781546d2c5935cbf1deb738831f159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ee:20:76:32:66:7e:52:d1:0e:d5:9d:82:a8:
7a:64:d9:db:18:13:d9:56:c2:05:d4:97:20:ca:77:
e0:89:55:eb:62:4e:66:55:09:03:b5:02:97:ec:77:
de:3b:93:cd:40:ae:1b:b1:e8:fd:a7:cb:e8:2b:61:
76:e7:db:5b:15:87:d0:8b:12:2e:4e:e8:c0:8b:01:
ff:f8:9a:d3:90:ce:27:5f:4b:e0:3c:0e:1c:b6:94:
46:72:df:f5:45:81:dd:41:c3:22:96:d8:40:5b:73:
37:ed:d0:b0:3d:a7:ef:9f:89:bd:31:f2:ab:e9:f1:
ba:4f:09:18:7d:c1:7d:c2:6d:99:1b:8e:5a:98:9e:
f3:49:c6:81:2d:e8:f0:39:21:88:e7:aa:9e:d7:65:
30:83:ff:13:5d:05:a4:dd:5c:29:55:4a:93:39:3f:
64:f2:96:21:8a:66:d4:ac:82:51:14:9e:59:90:8d:
8e:ce:08:7b:6b:b8:16:1b:0d:26:de:f7:66:bf:0a:
a9:46:9b:1f:36:91:c5:65:a5:2d:d9:a0:2f:13:55:
fe:9f:50:db:ee:bb:bb:1f:38:f5:66:d5:55:91:ca:
9c:b3:f2:7a:67:0f:a0:31:8b:29:08:9a:5f:00:d0:
9e:9c:1c:87:09:82:73:94:05:ee:ad:bf:a3:16:da:
0f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:5B:25:ED:02:78:15:46:D2:C5:93:5C:BF:1D:EB:73:88:31:F1:59
X509v3 Authority Key Identifier:
keyid:DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ac:c7:2c:f1:f8:48:fc:c2:70:bd:66:8f:8c:81:00:64:90:
ad:a3:2d:43:c4:65:b4:1b:5e:04:e2:50:40:f5:53:28:f9:9c:
37:44:29:d4:24:f8:8a:02:11:c8:2b:c3:5c:0b:47:0d:29:eb:
57:b0:1f:2e:58:c6:7a:16:88:11:9f:4a:8d:20:d7:9a:4a:2f:
6d:c3:ed:cb:b5:f0:0f:2e:ab:2d:0a:b0:5b:1f:de:2a:ea:40:
b6:eb:13:89:d2:1a:da:34:89:1b:be:ce:d7:cb:77:54:3d:91:
d4:06:29:de:b6:78:94:f6:62:85:49:c6:94:54:e0:a9:f2:84:
a1:bc:8f:89:99:44:0a:79:ff:15:cd:f0:dd:8c:ba:28:5c:4d:
38:f9:0a:5d:01:c8:30:06:6c:5f:91:a0:f3:43:df:d0:e9:e8:
ec:96:4b:68:7e:7e:26:17:eb:85:a2:8c:be:1a:a3:38:a7:cf:
03:ff:c1:02:d4:06:5a:70:55:6f:9a:d9:dc:28:cd:ae:f0:11:
56:42:0a:78:7e:3c:16:bd:0c:a0:b9:d4:73:03:f6:df:55:79:
7f:94:db:a8:65:86:b8:1e:19:bb:ab:6e:30:fd:06:5b:ec:85:
a8:dd:d8:f1:97:fb:64:5b:75:f9:d4:f1:31:df:71:60:9c:93:
47:74:c9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:23:28 2025 by rpki-client