Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft
File: M-J4uigmGi0eVT2-9t-ECaIcGu8.mft (raw, json)
Hash identifier: Th8Uh2KZfc3dDMuiJcaBDJhbERccgNTkcAzhnfV4zN4=
Subject key identifier: F4:DE:6B:6F:CC:4D:4F:27:66:95:96:3E:89:73:28:7F:B1:0F:03:BA
Authority key identifier: 33:E2:78:BA:28:26:1A:2D:1E:55:3D:BE:F6:DF:84:09:A2:1C:1A:EF
Certificate issuer: /CN=33e278ba28261a2d1e553dbef6df8409a21c1aef
Certificate serial: 0198499C4DB4702E7816C6108908D39F8C56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-J4uigmGi0eVT2-9t-ECaIcGu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 02:00:36 +0000
Manifest this update: Sun 27 Jul 2025 02:00:36 +0000
Manifest next update: Mon 28 Jul 2025 02:00:36 +0000
Files and hashes: 1: M-J4uigmGi0eVT2-9t-ECaIcGu8.crl (hash: sOwDyqIBfz7H34GAjn7AaKSscgyVlj8HHexLPN7phhI=)
2: ty50ARtEa_FQbzkrRRpK05YUuG4.roa (hash: 6J3WVG0rq9sH9p5MoSA7/o/5BVS9JnWdKFb+LiKqGs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/M-J4uigmGi0eVT2-9t-ECaIcGu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:4d:b4:70:2e:78:16:c6:10:89:08:d3:9f:8c:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33e278ba28261a2d1e553dbef6df8409a21c1aef
Validity
Not Before: Jul 27 02:00:36 2025 GMT
Not After : Jul 28 02:00:36 2025 GMT
Subject: CN=f4de6b6fcc4d4f276695963e8973287fb10f03ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a5:37:14:93:f5:4c:16:91:f8:53:b3:f6:0e:
6c:68:36:9d:1a:6b:5b:01:f4:5f:20:ea:4c:5d:c1:
a2:cd:0c:95:c7:6e:43:b8:88:87:0c:b2:bb:73:c1:
28:40:6e:56:60:b4:b5:c8:c9:50:ad:8e:33:df:63:
82:21:89:9a:a2:b5:3a:b5:34:4f:7f:0f:88:92:b8:
f8:6d:97:97:d8:71:c7:92:5b:4b:4c:ed:58:d3:6d:
46:84:ea:dd:af:fc:75:d1:03:0e:78:30:c6:f6:20:
47:bd:ea:e1:e4:16:c6:fc:73:c9:33:1c:9d:0c:13:
3d:1c:04:80:c6:17:63:ca:cb:67:96:8d:a6:ad:cc:
00:b5:fa:c5:5e:d7:f2:6f:60:74:ad:a6:6e:4b:4e:
64:34:cd:ca:82:ab:49:6d:39:3d:f8:6e:75:a6:69:
13:e9:c1:a1:49:ab:d8:d5:3e:97:b0:fc:cd:4c:6b:
b8:bc:8d:db:72:df:bc:26:23:6b:07:b4:8d:18:7f:
ac:90:8b:7d:a2:9a:d8:bf:a5:40:81:0e:39:80:9d:
39:0e:62:dd:fd:17:49:b7:05:17:e5:95:3b:6a:bb:
f4:59:ae:41:bf:b1:5e:98:8a:ee:fc:15:ee:fb:62:
20:8c:6e:e8:f1:b3:ab:ab:68:15:80:29:f7:f9:58:
03:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:DE:6B:6F:CC:4D:4F:27:66:95:96:3E:89:73:28:7F:B1:0F:03:BA
X509v3 Authority Key Identifier:
keyid:33:E2:78:BA:28:26:1A:2D:1E:55:3D:BE:F6:DF:84:09:A2:1C:1A:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-J4uigmGi0eVT2-9t-ECaIcGu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:4d:45:b7:2f:59:f2:e9:1f:85:f6:00:f2:2b:52:2e:2a:61:
7f:93:46:38:1f:d6:b5:b6:22:83:a8:da:fd:8d:76:57:d0:28:
5d:27:de:c8:ea:5c:ea:b7:dc:8d:26:55:1e:0c:c5:04:74:9c:
41:08:c0:83:e7:29:b2:00:79:05:8f:a6:c8:80:19:88:c1:5b:
20:23:5b:cb:c1:2c:3b:8d:05:ee:10:8c:6d:08:05:8c:25:7d:
b9:bd:0a:af:1b:5c:b8:29:2f:30:b7:ea:ec:a4:7a:15:12:e7:
6b:cd:cc:db:09:53:9f:fa:14:16:ff:58:d2:42:2b:0f:a1:b0:
4d:58:c4:7c:9e:c3:08:9f:61:4b:6c:95:b9:3a:a8:bd:e4:b9:
2a:33:95:b5:4f:e3:96:41:29:ec:f3:53:68:67:c9:3a:6e:25:
2f:dd:cb:a0:48:8c:a4:13:bc:ec:4c:0e:0a:29:1f:34:fb:90:
9e:9a:d0:dd:ba:00:e3:93:2e:78:70:b7:ab:0e:e3:8a:d6:80:
23:83:a6:42:53:40:67:a1:87:f2:3e:b0:90:3c:ea:8c:4e:70:
0d:87:a3:df:c4:57:3e:83:cc:a6:29:7b:5d:ef:2a:53:46:c9:
88:1d:5e:86:91:0f:aa:0f:f1:64:58:14:96:4d:0b:0e:b7:1e:
03:00:84:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:54:45 2025 by rpki-client