Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
File: M7GzE5YIPOntUeRiiY4pTtghWuc.mft (raw, json)
Hash identifier: u75ulC4rcBH0+5Uy5tSjR4/STC6o4aw5g1dJBGbLrZA=
Subject key identifier: 1B:7C:2A:77:70:94:09:61:13:76:DC:14:F9:1B:EA:69:62:9B:DA:1A
Authority key identifier: 33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
Certificate issuer: /CN=33b1b31396083ce9ed51e462898e294ed8215ae7
Certificate serial: 01984852D16E4ACC456358173A8D587B0562
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
Manifest number: 08A1
Signing time: Sat 26 Jul 2025 20:00:43 +0000
Manifest this update: Sat 26 Jul 2025 20:00:43 +0000
Manifest next update: Sun 27 Jul 2025 20:00:43 +0000
Files and hashes: 1: M7GzE5YIPOntUeRiiY4pTtghWuc.crl (hash: 5T3ihoV5KLtpVeGgyT8YX21lbRHOVY6Zlt4aOuWpdtM=)
2: VQEhZHRI_51L-qPYAqsPHPNhngo.roa (hash: x+W3XCRbSsqe5EAx2dK2PnCFHJSGnsA8p+6YOIwEtcI=)
3: yZau-DwfbVfRH1H5nBnznu-Gh04.roa (hash: u7wjmjDpMKVCur/XQ8T5dAncaG/iDqX0/1UwHJhY4Us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:d1:6e:4a:cc:45:63:58:17:3a:8d:58:7b:05:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b1b31396083ce9ed51e462898e294ed8215ae7
Validity
Not Before: Jul 26 20:00:43 2025 GMT
Not After : Jul 27 20:00:43 2025 GMT
Subject: CN=1b7c2a77709409611376dc14f91bea69629bda1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c4:dd:72:f8:34:68:6d:5b:6b:d6:ca:1c:a6:
de:43:b5:8e:e5:b7:6d:e5:b4:e8:c1:91:44:2f:5d:
35:ab:72:b9:d5:de:07:d6:cc:0f:25:0c:bd:02:ee:
43:37:e2:66:84:44:80:28:f0:a9:bb:04:4b:5b:66:
21:69:f5:61:d3:97:86:4d:a6:e2:f4:10:35:d1:e2:
3c:1e:fd:ff:45:74:9d:90:b9:2c:f0:a1:f6:89:2c:
77:4f:80:28:c0:1c:42:24:09:bd:7e:8e:b7:81:7b:
b3:14:82:3d:dc:8f:34:55:ec:24:e6:bd:d2:ce:c2:
a5:58:40:5b:f6:73:52:30:39:6c:ae:ae:3c:ca:62:
c1:f4:76:41:ff:7b:8d:a3:81:d0:aa:c8:96:d7:3e:
08:95:70:57:60:5a:83:26:c6:bd:9d:65:0a:06:c3:
c5:51:ba:8d:89:ba:ae:39:e4:59:bd:57:de:5c:99:
83:bb:8d:45:96:05:67:8a:bd:d3:1c:8e:2c:98:29:
ea:30:87:62:1a:e2:4b:62:4b:ed:8a:be:0f:77:f1:
30:eb:8d:c8:b1:2a:e0:38:f6:6c:cd:b1:0d:f6:64:
3c:d7:e6:c3:46:b4:d4:54:9e:62:fc:91:e4:35:ba:
ac:27:c2:78:75:88:4d:e4:ff:45:a2:b5:40:9b:52:
ce:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:7C:2A:77:70:94:09:61:13:76:DC:14:F9:1B:EA:69:62:9B:DA:1A
X509v3 Authority Key Identifier:
keyid:33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:8e:14:05:9d:86:b5:31:a7:63:1d:74:7f:c0:cd:bc:c5:1d:
13:4d:3f:74:ba:f9:fe:4d:ff:db:0d:f6:4e:b8:28:10:aa:2e:
51:16:9b:88:48:da:eb:4f:27:fc:2b:94:53:79:e8:45:b8:bf:
c7:76:2c:98:d3:46:2e:35:00:9d:52:5a:49:16:d3:2a:94:23:
8a:15:c0:9d:46:5b:e1:59:8a:11:b8:d6:d0:20:46:6a:4f:78:
4a:fe:a3:4c:63:81:5f:b3:aa:a7:04:56:80:06:3d:a1:61:24:
f4:09:9c:29:f7:4b:9d:e8:e2:01:78:aa:20:ee:4d:b8:f9:88:
a9:d3:78:22:b4:e9:47:0e:97:eb:ef:53:5c:0d:5a:b9:d8:a5:
82:f7:8a:f5:06:01:5c:99:76:0a:90:be:3c:13:f1:57:f1:7c:
d6:ee:c5:16:db:fe:ce:99:a2:eb:27:cf:c1:0d:ca:8c:48:85:
74:ba:7f:ec:6a:f8:54:0a:52:d3:96:dc:d7:12:e9:24:3e:28:
a7:94:ff:1e:be:a1:a4:42:07:d2:02:a5:dc:e4:45:8f:1d:4a:
51:3b:d0:63:d1:60:60:44:c7:de:15:6a:05:7a:93:72:71:84:
26:45:ca:19:f4:38:ad:1b:03:b5:fd:20:6d:48:7f:43:57:4b:
b0:ae:fc:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:23:46 2025 by rpki-client