Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft
File: M7psC8yhbGhdx7myfxmbQrS-7uk.mft (raw, json)
Hash identifier: zq8loTDsFMQrHfSUmpC0/UdStswwsy3+ewyH7p8Vj18=
Subject key identifier: E2:A2:EF:1B:B2:2F:0A:69:FB:21:73:3E:C4:5E:A4:39:22:89:C9:DB
Authority key identifier: 33:BA:6C:0B:CC:A1:6C:68:5D:C7:B9:B2:7F:19:9B:42:B4:BE:EE:E9
Certificate issuer: /CN=33ba6c0bcca16c685dc7b9b27f199b42b4beeee9
Certificate serial: 0198548D9D95EBA68A4F4A5335BE1A6EE8DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7psC8yhbGhdx7myfxmbQrS-7uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft
Manifest number: 0D64
Signing time: Tue 29 Jul 2025 05:00:23 +0000
Manifest this update: Tue 29 Jul 2025 05:00:23 +0000
Manifest next update: Wed 30 Jul 2025 05:00:23 +0000
Files and hashes: 1: M7psC8yhbGhdx7myfxmbQrS-7uk.crl (hash: 8ntAYwg1msFUpb+bX1a+PhOBmMrsGHPLYZKK5vsaqo8=)
2: YsLZoqZw6u24llC00PtDDR7Qp3Q.roa (hash: xyGbGlbgzc0VPKZXK9Mhkv3PJ7Wng5W2DCI8eLTmYC0=)
3: kPhGzXODbRD6DaiKt_1D_SiuRQ8.roa (hash: 9eEDMcEOBSRwouzuH08DzSkvaYWRY3j//V52rGTuy7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7psC8yhbGhdx7myfxmbQrS-7uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:8d:9d:95:eb:a6:8a:4f:4a:53:35:be:1a:6e:e8:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33ba6c0bcca16c685dc7b9b27f199b42b4beeee9
Validity
Not Before: Jul 29 05:00:23 2025 GMT
Not After : Jul 30 05:00:23 2025 GMT
Subject: CN=e2a2ef1bb22f0a69fb21733ec45ea4392289c9db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9f:f7:69:bd:b0:09:ca:a7:23:e1:7a:14:4a:
98:86:95:36:04:0d:4d:a8:df:2e:78:c2:fc:25:cd:
b5:2f:aa:7e:93:f3:16:68:e6:ce:79:52:51:df:f4:
9a:a1:58:b5:94:1f:76:36:fd:4c:e8:b6:41:e9:1a:
6a:6d:a6:c8:18:66:6a:54:e7:11:5f:47:68:d2:0b:
62:14:a9:ac:1c:ab:cf:ed:1e:a1:2e:b3:5a:19:fa:
90:a2:7b:0d:0a:6d:75:c8:14:8c:73:21:81:63:62:
bf:2d:ac:27:55:ff:75:ae:60:b0:44:32:d6:5a:a4:
1e:c5:6b:4e:06:36:20:1d:db:d7:2b:13:13:cc:ac:
53:34:41:7a:0d:e4:60:af:64:33:f2:5b:74:eb:01:
5c:1a:82:dd:89:59:d4:58:63:d6:12:99:ac:c9:61:
a1:fd:22:9d:83:d5:f8:fb:82:ef:ea:01:c6:d0:d5:
4f:43:02:ca:8c:8c:27:35:04:1c:8d:b2:c6:d6:10:
9f:dc:03:96:4e:64:52:d6:e1:af:97:4f:64:32:ed:
ad:16:0c:27:7f:0a:0d:ff:49:52:91:13:87:86:66:
d4:e6:b1:b8:1b:3f:5f:08:55:17:b8:03:a7:42:0c:
74:f6:cc:f4:d9:03:89:25:0e:fd:4b:a7:ce:28:3a:
56:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A2:EF:1B:B2:2F:0A:69:FB:21:73:3E:C4:5E:A4:39:22:89:C9:DB
X509v3 Authority Key Identifier:
keyid:33:BA:6C:0B:CC:A1:6C:68:5D:C7:B9:B2:7F:19:9B:42:B4:BE:EE:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7psC8yhbGhdx7myfxmbQrS-7uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:8f:11:41:63:46:aa:c0:85:17:10:35:aa:f1:73:53:6e:e1:
97:65:55:50:5e:5b:6d:ba:1b:1d:38:1f:87:22:b8:07:ce:39:
52:5f:48:c1:5e:c8:d6:17:64:55:f0:07:5b:1a:1c:e1:f2:3f:
83:0d:1e:b7:3c:f5:0e:3b:64:88:22:94:05:8f:3e:e8:69:e8:
92:0b:23:28:31:e3:da:1a:58:45:92:8b:54:a1:f8:3f:b0:c5:
f4:3a:1f:82:49:8a:05:b0:00:d2:65:57:33:53:7f:c0:42:a0:
8b:8e:2b:e7:aa:9d:be:63:8a:30:6a:1c:e0:9b:e1:7b:3c:22:
e5:7d:fd:df:3a:37:30:92:76:34:8c:78:fd:14:5b:8d:02:5f:
cb:60:a9:e5:75:f1:b3:b5:2c:b6:95:b4:78:57:05:30:8c:01:
6a:48:68:ac:05:fd:37:0b:6c:53:19:6a:c9:af:96:56:18:15:
5a:84:e1:e4:7b:c9:5b:1a:8b:a6:0c:94:df:fe:e7:dd:21:55:
fa:1e:cc:80:9d:cb:2a:ae:c1:4b:dd:d0:9b:fd:24:49:53:46:
4d:aa:09:51:41:1a:ca:1b:88:2a:69:73:42:34:d3:ed:06:c1:
d7:e6:25:3f:0a:9c:e5:6e:2b:da:14:52:8a:1c:2e:b8:ab:63:
9c:1e:d6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:46:58 2025 by rpki-client