Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
File: M7n5GBbdTYImpB47TDsJx73MZKk.mft (raw, json)
Hash identifier: eB6J4Npd63M+Jt3plkJ4DfP4WD/rw9J+Rd8NmKcnhaw=
Subject key identifier: 66:A3:8B:15:D0:B3:A7:A3:57:18:9A:AE:3B:53:08:26:83:EA:88:3D
Authority key identifier: 33:B9:F9:18:16:DD:4D:82:26:A4:1E:3B:4C:3B:09:C7:BD:CC:64:A9
Certificate issuer: /CN=33b9f91816dd4d8226a41e3b4c3b09c7bdcc64a9
Certificate serial: 01984965F87F5C32968500B08C8F946A57E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 01:01:16 +0000
Manifest this update: Sun 27 Jul 2025 01:01:16 +0000
Manifest next update: Mon 28 Jul 2025 01:01:16 +0000
Files and hashes: 1: M7n5GBbdTYImpB47TDsJx73MZKk.crl (hash: T+UBHTrGkno4m/X0kVPAiNDvD1egIL9b+JdLlJlqd1A=)
2: r8v_y5CgKRJYVb0efXm40LZehP4.roa (hash: RKFUmKgDYqrRW6TXR7G+/oNe9iSAV+m90qk1jsY/Or0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:f8:7f:5c:32:96:85:00:b0:8c:8f:94:6a:57:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b9f91816dd4d8226a41e3b4c3b09c7bdcc64a9
Validity
Not Before: Jul 27 01:01:16 2025 GMT
Not After : Jul 28 01:01:16 2025 GMT
Subject: CN=66a38b15d0b3a7a357189aae3b53082683ea883d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e4:d6:97:e6:c1:a9:e8:88:1e:42:fa:c2:f7:
fd:bc:3e:1c:1a:08:a5:2f:35:12:cb:84:27:09:11:
46:2b:f9:8d:4d:c8:24:d1:4c:2f:2e:a3:2c:03:4f:
01:51:60:0c:5e:a4:92:94:d9:d9:f3:65:1f:ce:fd:
de:4c:26:9a:f8:30:a7:96:0f:56:d5:06:7c:0d:f2:
0e:e8:02:17:bf:96:ce:38:1b:27:7e:2e:cb:16:45:
85:39:2e:75:00:2b:32:99:40:a7:04:9b:f6:c3:22:
0a:cf:fd:b4:92:4b:6c:67:ba:75:01:d4:a5:f3:52:
43:ac:11:c2:83:96:37:3d:66:ee:15:ca:f6:e9:b2:
77:34:09:e3:3d:7f:20:bc:eb:56:21:98:94:b8:e0:
ef:36:86:28:f6:d4:e5:08:cc:f4:f5:48:da:66:f5:
18:37:62:52:3c:ae:25:46:33:ea:82:ef:a3:55:b9:
01:df:70:52:75:92:a0:fd:93:e1:1a:03:a5:df:fa:
d1:f3:a8:53:01:c6:94:87:92:15:a8:c6:7a:77:2d:
25:7e:cd:aa:f5:2f:4a:90:d1:b1:79:e3:c3:37:51:
07:ec:ec:44:c7:fa:65:24:79:79:93:9b:21:ed:19:
4a:72:32:b2:1b:01:29:1c:b8:a9:a4:15:a9:fd:2b:
53:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A3:8B:15:D0:B3:A7:A3:57:18:9A:AE:3B:53:08:26:83:EA:88:3D
X509v3 Authority Key Identifier:
keyid:33:B9:F9:18:16:DD:4D:82:26:A4:1E:3B:4C:3B:09:C7:BD:CC:64:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:d9:11:af:ce:35:c5:28:a8:3e:db:0b:2d:30:a2:7f:0c:db:
6c:e8:43:1b:b5:5b:b0:03:ee:ec:87:41:5e:7b:22:26:e4:79:
c9:87:64:11:f9:d1:bf:fa:ed:85:5f:20:4e:55:e6:17:d5:63:
26:5c:a2:4f:6c:fc:1f:16:95:43:d0:ce:b0:9a:13:ac:1e:fd:
3d:84:48:74:ee:0e:3e:25:81:4e:14:76:7a:9b:5c:a6:86:2b:
68:a5:54:41:fb:80:58:d1:0f:d6:89:44:43:65:f3:6c:5a:d5:
69:b1:e3:e8:99:b9:9c:b0:43:bf:53:e3:99:de:e4:74:10:67:
8c:74:70:5c:c4:3d:f9:7b:02:6b:ac:26:45:4b:20:3d:63:ec:
91:f9:f5:c6:63:e4:fc:b4:69:5c:1c:9a:0d:94:2c:28:70:d2:
9d:c2:48:32:93:09:5a:88:84:bc:24:62:ad:75:e1:aa:35:1b:
b2:ec:ec:76:ab:b1:f7:42:73:99:6c:dd:32:9d:2a:97:42:a3:
e2:f4:db:ce:ab:67:4e:5c:24:1d:23:0d:45:b8:8d:57:5f:4a:
2a:ff:55:86:c3:64:29:c4:47:0a:f2:9b:38:83:24:dc:15:83:
fc:8c:50:33:ad:fa:44:15:30:d6:ee:67:b6:cb:ef:ce:48:f9:
e9:0c:35:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:22:03 2025 by rpki-client