Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
File: 2scQMP4IHgK6tII9BWj_sqMyZeE.mft (raw, json)
Hash identifier: TvFl8qnk0f7Lq6uQnTbNY7Z5LVspeBSLvP2Li5RvAUM=
Subject key identifier: 60:E8:A7:2C:90:44:B8:43:93:7D:19:17:96:66:EF:87:DB:53:33:BF
Authority key identifier: DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1
Certificate issuer: /CN=dac71030fe081e02bab4823d0568ffb2a33265e1
Certificate serial: 01976BBD1B7E8097B125FE55BDE2AD9B7616
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
Manifest number: 0524
Signing time: Sat 14 Jun 2025 00:00:44 +0000
Manifest this update: Sat 14 Jun 2025 00:00:44 +0000
Manifest next update: Sun 15 Jun 2025 00:00:44 +0000
Files and hashes: 1: 2scQMP4IHgK6tII9BWj_sqMyZeE.crl (hash: JjzX6v7YSllzSQrDWO3F3pSaXToVzNdX6sO/bxJZCR4=)
2: _aLDkeMiUI-Lqjzdkv0G6nDIZPI.roa (hash: tmIepxlUbHTd8KHj3iQSk+aTVIsaYnnddWmvrPeDuVM=)
3: cOPYQsOeCFDIc7qGbdrCMUud3Jc.roa (hash: BKdHxeFxd4fi3NghqoltBHVl5UTtuhA/jAVO3pAU5j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:1b:7e:80:97:b1:25:fe:55:bd:e2:ad:9b:76:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac71030fe081e02bab4823d0568ffb2a33265e1
Validity
Not Before: Jun 14 00:00:44 2025 GMT
Not After : Jun 15 00:00:44 2025 GMT
Subject: CN=60e8a72c9044b843937d19179666ef87db5333bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:54:d5:7f:68:3d:45:91:cf:77:e4:28:17:16:
aa:98:3f:6c:18:23:01:5c:51:d5:d6:c5:82:c3:c3:
06:c2:6b:48:1f:8a:d1:b3:b1:85:1b:43:de:60:58:
6e:14:41:68:c1:93:58:74:5c:1d:53:30:a1:61:29:
a4:f9:f9:72:c0:a5:cf:15:91:db:8a:6a:99:94:d1:
0f:f9:32:24:c1:d4:d7:8f:df:3f:17:cf:19:45:27:
bc:95:8d:3d:bf:b0:bf:b8:c2:6a:d3:e7:61:94:59:
a7:cb:77:55:21:24:03:0b:29:f4:e4:22:7c:b3:18:
f8:5f:9b:cb:ed:30:3b:9c:26:c7:02:58:43:0f:a6:
06:67:ed:63:93:44:4b:87:4e:e0:f1:a3:18:ae:0d:
ea:ef:38:61:cf:06:57:9c:f1:9d:36:c1:3d:1c:bd:
7e:21:81:7b:c7:5e:25:00:63:74:8d:d1:2b:9c:94:
9a:23:0e:15:7f:0e:72:0c:ac:de:64:7d:dc:d3:83:
e7:a1:e6:c0:5d:fb:49:7d:16:10:0a:3f:6f:66:18:
3f:a2:a5:09:49:76:f4:d0:b1:24:14:0a:90:1b:21:
c0:f1:e5:d4:39:c3:25:34:d2:6d:8b:df:14:82:42:
19:d4:04:59:77:80:50:63:f3:e0:50:1c:d7:03:3a:
05:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E8:A7:2C:90:44:B8:43:93:7D:19:17:96:66:EF:87:DB:53:33:BF
X509v3 Authority Key Identifier:
keyid:DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:00:06:30:a0:be:93:2a:29:c0:69:39:e6:bc:ce:73:a5:ff:
41:ad:12:26:65:f3:40:02:8b:d7:8b:fc:a7:84:eb:68:bd:9a:
f6:34:0e:ef:e7:bf:82:e9:1c:ae:c4:69:f3:69:3f:bf:83:75:
10:45:15:1c:47:12:26:8f:81:89:b8:aa:4f:af:69:d6:6a:e5:
c9:a3:3f:83:74:ae:ec:78:38:b9:4d:16:de:d6:6d:7f:f8:53:
a1:f2:cd:01:df:03:be:78:0d:cb:61:3e:30:b6:c4:df:ff:2b:
e8:63:6a:b0:ad:e5:e2:4e:8a:cf:b2:99:ff:98:32:5c:14:e6:
0a:93:0a:87:1b:f1:35:ef:01:01:8c:03:65:03:3e:ca:3f:b2:
69:fd:6f:b5:f1:ed:6f:7d:93:82:25:26:b9:9d:c5:a7:09:e0:
94:1a:67:3c:8d:11:21:01:2f:e8:4c:84:88:22:40:e7:c6:a1:
ee:db:1d:49:19:14:02:b0:85:09:2c:03:20:cb:7b:2a:b2:6d:
8a:a2:59:80:78:b9:d8:45:6b:85:51:21:b8:47:1c:74:d6:53:
57:d8:44:87:00:69:ea:ca:5f:2b:ab:7b:38:bb:04:af:42:f8:
f2:4c:9d:d0:49:fc:99:dc:62:1b:1b:63:0c:f9:1a:c0:c1:ce:
2c:47:25:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:14:48 2025 by rpki-client