Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.mft
File: M4YMg3IhmQcJz1rqKduBaJU-feA.mft (raw, json)
Hash identifier: QAKF4MudadHA438SLt3Kr2nKY+FFWihG9kp5ny8PnN8=
Subject key identifier: 24:AD:41:1E:51:EB:33:1E:43:82:47:D1:D2:05:B7:50:27:85:02:00
Authority key identifier: 33:86:0C:83:72:21:99:07:09:CF:5A:EA:29:DB:81:68:95:3E:7D:E0
Certificate issuer: /CN=33860c837221990709cf5aea29db8168953e7de0
Certificate serial: 019845F6312D700CD67579C9E5DEE3C1FEB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4YMg3IhmQcJz1rqKduBaJU-feA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.mft
Manifest number: 0736
Signing time: Sat 26 Jul 2025 09:00:18 +0000
Manifest this update: Sat 26 Jul 2025 09:00:18 +0000
Manifest next update: Sun 27 Jul 2025 09:00:18 +0000
Files and hashes: 1: M4YMg3IhmQcJz1rqKduBaJU-feA.crl (hash: iGw0zeB0ogHn9X5nOKspaM39p1/9Jhc7H2BPV8WpZHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.mft
rsync://rpki.ripe.net/repository/DEFAULT/M4YMg3IhmQcJz1rqKduBaJU-feA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:31:2d:70:0c:d6:75:79:c9:e5:de:e3:c1:fe:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33860c837221990709cf5aea29db8168953e7de0
Validity
Not Before: Jul 26 09:00:18 2025 GMT
Not After : Jul 27 09:00:18 2025 GMT
Subject: CN=24ad411e51eb331e438247d1d205b75027850200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8b:e1:e9:aa:1a:bf:fb:1a:95:48:0b:67:32:
ca:f8:5e:26:a5:4f:1b:dc:74:8a:20:d6:ac:b6:7f:
09:5f:a6:04:f1:22:15:96:fd:72:40:35:0f:f3:46:
83:8b:7e:db:f0:f2:26:81:4f:ab:d9:75:26:71:6b:
01:1c:ce:54:5f:bc:51:38:c9:85:63:31:b5:65:d2:
9c:4e:90:b1:98:e4:f4:fb:a1:77:3c:c2:38:f3:b7:
ff:c2:24:3b:bb:af:13:f7:f8:08:07:f9:ab:05:02:
b5:e7:da:dc:ab:fa:09:df:5a:95:91:28:b1:14:aa:
3b:e2:b0:9f:74:55:20:8e:33:27:c2:6f:99:2c:7a:
ef:e5:1a:1c:d3:a9:69:af:a8:79:db:bc:51:a7:c8:
00:71:34:ba:1b:ef:68:85:7b:22:ff:8e:da:29:2c:
57:f9:4e:83:4e:47:15:a3:88:1a:23:38:ee:91:7d:
a3:c5:19:a6:c6:fa:56:00:3e:a8:4c:65:de:22:4c:
4b:0a:1d:21:b2:97:ba:e5:c6:6d:d0:77:c8:c0:71:
be:55:09:be:92:07:4f:60:fe:6d:b1:15:8f:b0:97:
64:63:6c:98:ab:d7:2d:0a:d8:82:c0:e8:f3:a4:d5:
5d:25:64:61:bd:23:3b:d3:74:ee:3a:26:d7:b8:32:
f3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:AD:41:1E:51:EB:33:1E:43:82:47:D1:D2:05:B7:50:27:85:02:00
X509v3 Authority Key Identifier:
keyid:33:86:0C:83:72:21:99:07:09:CF:5A:EA:29:DB:81:68:95:3E:7D:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4YMg3IhmQcJz1rqKduBaJU-feA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:7a:50:3c:2e:59:b4:dc:e1:00:cc:26:48:c9:2f:5f:94:7b:
9a:fe:16:05:a9:df:2c:6e:7e:22:d6:63:eb:44:ae:98:7a:41:
67:44:46:90:99:fb:ae:db:d6:a0:21:52:7d:9b:fa:a5:df:3c:
19:d9:b7:2a:34:3d:db:ed:bf:32:79:87:e6:e5:97:c6:8d:7e:
80:9a:54:86:44:d7:c2:1e:ca:0d:5d:43:8a:c9:da:71:64:e7:
fc:dc:17:8d:85:7d:93:6d:57:76:69:9c:83:38:c5:c5:88:21:
a4:06:41:aa:d9:1f:49:ea:fd:c6:e7:7f:e5:0e:a0:5f:5c:b8:
1f:4e:5a:f9:10:f1:99:04:23:73:20:95:c4:9e:5d:1e:ab:aa:
3d:19:c8:45:bc:9c:43:70:5c:46:cf:a1:d1:f1:d3:dc:f5:b6:
37:4d:c6:ec:dd:3c:4e:f9:57:fe:63:86:d0:b3:57:cb:bb:7d:
ef:37:01:27:5e:f3:2f:85:7a:5c:d8:00:e0:fa:03:e0:00:05:
6b:72:ce:ae:53:24:06:41:f3:79:00:cc:99:e9:12:3e:85:03:
cf:52:e3:d9:c7:6f:03:29:6d:38:79:6d:4c:94:9d:b5:8a:b4:
c6:3b:50:12:a9:d8:fb:80:58:c5:80:7d:92:32:87:8a:a7:23:
1e:ce:bc:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 12:13:41 2025 by rpki-client