Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.mft
File: M5VDMDSfV1Aqdq5umZh-_D47gQk.mft (raw, json)
Hash identifier: EUAlsx7ZwISWRh1AA8vbI4lA6Gk88YNff3ekXZRC7LY=
Subject key identifier: 1E:BD:7D:CB:61:96:F6:C9:13:96:6F:C3:19:C2:C4:72:F3:CF:B0:CB
Authority key identifier: 33:95:43:30:34:9F:57:50:2A:76:AE:6E:99:98:7E:FC:3E:3B:81:09
Certificate issuer: /CN=33954330349f57502a76ae6e99987efc3e3b8109
Certificate serial: 0198481BB55F1C574807E041978D533FFAD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M5VDMDSfV1Aqdq5umZh-_D47gQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.mft
Manifest number: 1608
Signing time: Sat 26 Jul 2025 19:00:32 +0000
Manifest this update: Sat 26 Jul 2025 19:00:32 +0000
Manifest next update: Sun 27 Jul 2025 19:00:32 +0000
Files and hashes: 1: M5VDMDSfV1Aqdq5umZh-_D47gQk.crl (hash: 9PQ/L3tjJPhmSEj6A4dQaABT7yRab5RTD6c7vJarmVE=)
2: dZXpVyrQ8VbKvAp5COr0Cumw1Ew.roa (hash: tReFkDEyNqbnnxeZucnGGCRzuWm3mLRotTGRZWTwBCk=)
3: lq6yBpxyj8mQu1pcN8Yet01eUsA.roa (hash: jOVFBLabQ2MHZZoWNADP7Z+CInLcq/pubwpgW9d7+lE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/M5VDMDSfV1Aqdq5umZh-_D47gQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:b5:5f:1c:57:48:07:e0:41:97:8d:53:3f:fa:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33954330349f57502a76ae6e99987efc3e3b8109
Validity
Not Before: Jul 26 19:00:32 2025 GMT
Not After : Jul 27 19:00:32 2025 GMT
Subject: CN=1ebd7dcb6196f6c913966fc319c2c472f3cfb0cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:29:12:20:c9:c5:5c:80:50:fd:01:16:2f:e7:
e2:dc:32:8c:b3:23:6e:e0:ac:7d:1d:ca:90:ee:a4:
1b:69:36:6c:26:b0:56:95:70:26:29:09:aa:03:83:
63:80:8d:b9:a7:2f:46:03:a9:a4:8e:3b:49:06:fe:
6f:97:10:23:f7:46:b5:e9:2f:02:f3:b3:9e:24:74:
b7:b4:8f:ee:a5:4a:be:99:e2:f5:0e:07:5b:74:b6:
06:82:ca:47:38:60:2f:6e:45:da:96:16:51:2b:9f:
48:9c:ca:f7:c6:f0:21:e9:7d:48:09:cd:4e:31:3d:
a0:1f:84:1f:2b:49:05:3f:e1:0a:f3:d2:e5:ef:80:
23:61:2b:f6:6c:9a:ee:71:9e:1d:b5:7d:2f:8c:9e:
26:9b:01:a0:6f:02:46:9b:94:23:c4:26:98:15:81:
2a:d8:34:9f:96:e8:f5:c8:30:46:f1:72:87:ad:a0:
5a:81:5b:49:55:b1:82:0c:3d:cf:2e:40:c6:4c:ae:
fa:78:1e:fc:04:ef:44:e7:ac:39:69:e5:77:1c:f4:
aa:fc:42:02:a9:88:ff:f1:c3:5a:d5:2b:11:a9:b5:
67:61:4e:72:e4:38:a2:b4:56:5c:fc:ce:b5:e1:d7:
27:a7:bd:e2:c1:08:cd:6a:f5:9a:13:69:99:03:36:
e8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:BD:7D:CB:61:96:F6:C9:13:96:6F:C3:19:C2:C4:72:F3:CF:B0:CB
X509v3 Authority Key Identifier:
keyid:33:95:43:30:34:9F:57:50:2A:76:AE:6E:99:98:7E:FC:3E:3B:81:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M5VDMDSfV1Aqdq5umZh-_D47gQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ad:82:b7:85:f9:5b:a9:df:d3:ba:7a:72:9b:16:51:54:19:
3e:78:c0:16:8a:4d:e0:b2:66:e6:6b:9f:3a:e8:70:f5:98:b5:
b4:ac:22:c1:92:8d:89:f4:ba:45:8a:f4:c4:b1:a8:0b:f8:22:
47:36:dc:40:d6:5d:fe:d6:85:f2:64:5b:85:d2:1e:d5:fa:12:
7b:cf:dc:f9:77:4d:42:03:a9:28:e2:b7:a6:01:28:9e:c1:1f:
a5:9d:53:19:eb:9a:ee:3a:f1:86:e4:ea:62:e1:f8:fb:16:52:
b6:61:f2:cd:61:0b:75:85:70:41:d8:73:c1:31:4f:22:5f:94:
f0:a3:ba:4d:1d:f8:12:31:ef:71:c5:c1:ac:cc:d7:aa:00:44:
13:59:b7:10:68:c7:9c:ac:7b:fc:b9:e7:dd:a5:fa:4a:f7:c8:
f8:61:ea:5b:7b:e6:07:39:41:a9:f0:1a:56:2a:8e:c4:81:e0:
1d:81:98:41:ce:84:45:00:d6:f3:4f:4b:7d:1c:f1:6d:2c:e7:
84:f5:82:01:50:67:8e:53:87:ed:cf:8c:66:38:0f:2e:ac:fa:
4f:78:12:98:61:94:4c:00:44:27:5a:21:21:df:e6:d9:89:65:
e2:a0:1d:b8:7d:dd:08:70:65:0e:d8:53:0d:d0:38:65:92:3a:
af:c7:d0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:33:30 2025 by rpki-client