Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
File: M29qyC9vKOPT5bZkdVlNgxjnWrM.mft (raw, json)
Hash identifier: PE6zuXkDfrld9Z2U1CNR1WVvvis6NiVFBkm8/WGHm38=
Subject key identifier: D5:1F:60:E0:30:2B:23:DD:CB:5C:14:CA:C0:4F:07:82:D6:90:7A:88
Authority key identifier: 33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3
Certificate issuer: /CN=336f6ac82f6f28e3d3e5b66475594d8318e75ab3
Certificate serial: 019847E4F5169B7B14731768B23DEC944C81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
Manifest number: 0DBC
Signing time: Sat 26 Jul 2025 18:00:43 +0000
Manifest this update: Sat 26 Jul 2025 18:00:43 +0000
Manifest next update: Sun 27 Jul 2025 18:00:43 +0000
Files and hashes: 1: M29qyC9vKOPT5bZkdVlNgxjnWrM.crl (hash: HN4kZ08DxCV7h4EYjQuSU410lf8U6tHIaM8TPVv9sx8=)
2: dEZ5raqBPXnkqzr9_S0vwZwMrcc.roa (hash: A8CtSs9BqkWswlRrqESpgq4uIozS5L7wmlKnC6IFKQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:f5:16:9b:7b:14:73:17:68:b2:3d:ec:94:4c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=336f6ac82f6f28e3d3e5b66475594d8318e75ab3
Validity
Not Before: Jul 26 18:00:43 2025 GMT
Not After : Jul 27 18:00:43 2025 GMT
Subject: CN=d51f60e0302b23ddcb5c14cac04f0782d6907a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8e:6f:89:ea:9e:15:6c:bc:3e:01:9c:50:c5:
36:f0:fa:74:92:7c:83:0c:8b:6b:08:9a:88:26:82:
df:9f:d7:e7:21:b9:7c:6c:5d:ca:d7:fc:08:17:bf:
b1:50:3f:4e:cb:ab:fd:1f:08:7f:6f:c3:f3:4e:fa:
77:54:da:b1:ef:9a:cf:82:26:88:09:6e:e5:ea:61:
00:85:21:7a:88:f3:7e:4d:d1:6d:fc:cc:f2:96:be:
74:e1:98:cf:dd:78:12:0e:93:88:2d:14:f5:2d:44:
e1:24:de:62:46:66:0b:73:a9:65:a0:43:b9:bb:18:
c3:80:0a:df:24:73:dc:ab:dc:8c:78:cc:e6:dd:94:
1c:a7:64:91:29:1f:46:8a:36:d3:1f:12:e2:be:4a:
93:e9:ff:2e:93:8b:3a:b9:6c:1d:48:5c:b4:1f:7f:
9c:75:c7:0d:c0:7a:33:7b:ed:fe:af:31:73:db:ae:
f4:00:ea:10:33:d5:6c:14:2e:5d:e0:ae:84:16:0c:
d9:72:d6:9c:ea:5d:41:05:4c:71:78:c6:ad:08:f0:
79:06:76:54:31:8f:16:db:24:81:56:9a:d5:94:87:
14:f1:21:10:85:1a:74:73:14:da:35:27:5f:41:cd:
b4:28:35:58:20:8b:fa:82:15:d8:18:ab:4d:0d:e6:
8a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:1F:60:E0:30:2B:23:DD:CB:5C:14:CA:C0:4F:07:82:D6:90:7A:88
X509v3 Authority Key Identifier:
keyid:33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:b6:d3:c6:6f:6f:69:a6:ea:40:42:b8:85:1b:5c:b0:98:2a:
7a:fb:fb:19:bb:be:57:fa:64:28:03:5d:13:d8:95:3e:e7:1b:
b1:64:b8:b5:fa:7e:40:d8:b3:75:39:ca:e7:db:16:3e:51:96:
e6:f7:37:e9:03:41:61:d4:bf:52:41:ae:e7:b2:a5:6a:b9:9a:
78:b5:89:41:07:4f:ac:55:46:90:e9:2f:49:75:7b:d4:2b:4b:
77:b1:d9:1e:aa:03:21:80:cc:8c:a2:7c:ee:dd:6c:ac:50:03:
75:4c:13:09:d1:b8:f0:f6:d3:a3:7c:6b:60:15:77:c3:36:03:
42:99:bd:fe:d5:2a:f0:7b:75:36:b8:d3:4a:92:d2:ba:3c:16:
7e:b8:06:84:70:ee:f7:4d:90:be:ce:a1:25:af:76:19:d2:3b:
51:c2:65:29:c1:2f:b5:e3:35:76:70:7b:dd:34:64:36:3c:a3:
92:35:80:d1:2c:f8:68:fa:e3:b8:88:48:5b:6c:50:fe:84:77:
b3:8d:ff:a7:d0:62:d2:f3:cb:08:b7:7a:54:41:16:41:54:ec:
81:d4:f5:f4:d4:be:f3:3b:50:91:b3:06:85:08:d6:2c:e8:24:
fc:3f:ed:28:db:d6:86:50:3a:19:35:d5:9f:6d:06:3e:43:5b:
69:ca:0b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 21:15:57 2025 by rpki-client