Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.mft
File: M1etQG35k0tQSLX6Id4xRQuTb6k.mft (raw, json)
Hash identifier: xuIcHZGFo2+hw2vABn+NNcpGijv3GgrEDwO/bMF2PD8=
Subject key identifier: CE:EF:8E:D6:4D:C3:0F:8A:0D:D9:73:E1:A1:DC:18:9E:36:95:C5:23
Authority key identifier: 33:57:AD:40:6D:F9:93:4B:50:48:B5:FA:21:DE:31:45:0B:93:6F:A9
Certificate issuer: /CN=3357ad406df9934b5048b5fa21de31450b936fa9
Certificate serial: 019845894C7A29EB743A131BE53554616227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1etQG35k0tQSLX6Id4xRQuTb6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 07:01:22 +0000
Manifest this update: Sat 26 Jul 2025 07:01:22 +0000
Manifest next update: Sun 27 Jul 2025 07:01:22 +0000
Files and hashes: 1: M1etQG35k0tQSLX6Id4xRQuTb6k.crl (hash: Ay6FYLKhCvtvzJSVlYZx/2jv/hY2bFd+Ngbf2gmAMOw=)
2: m9KlvtpTq4Ql79O_O_rULA1w-zY.roa (hash: +h4/STkGCXYgH/sIOVE5dquJUDdEfzAIpbql2yKK20U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/M1etQG35k0tQSLX6Id4xRQuTb6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:4c:7a:29:eb:74:3a:13:1b:e5:35:54:61:62:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3357ad406df9934b5048b5fa21de31450b936fa9
Validity
Not Before: Jul 26 07:01:22 2025 GMT
Not After : Jul 27 07:01:22 2025 GMT
Subject: CN=ceef8ed64dc30f8a0dd973e1a1dc189e3695c523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:45:6d:22:e1:74:0a:0e:e8:97:39:03:cf:22:
58:01:10:f4:a3:11:f1:9c:5d:41:d4:2a:7c:20:ec:
8b:9a:57:9e:47:47:57:63:cf:4c:77:fb:e4:57:43:
e0:45:4b:37:a9:02:15:62:54:72:6c:91:75:83:f8:
06:61:ff:d8:84:8a:da:1c:30:7a:3f:17:74:ad:ba:
b2:e2:00:3f:33:58:3e:f2:33:d3:1f:2c:18:77:f0:
cb:b4:47:e4:7d:f8:4f:57:cb:fb:ae:b1:e3:1a:2f:
8a:cd:4d:14:72:73:80:fe:56:21:fa:21:5c:e3:0d:
31:8a:8a:ed:3f:ac:96:40:0a:0f:66:fa:f9:5e:3c:
fb:e2:60:95:2d:4d:ee:ed:fe:7d:03:63:90:b4:9d:
e0:e7:36:1d:0b:b4:da:90:c4:23:aa:10:94:d2:12:
04:5e:81:c2:24:5e:5b:37:c5:5b:de:b5:0c:a9:54:
98:d1:ba:0f:d7:54:ed:30:e7:78:c2:86:9b:34:80:
d4:d7:6b:49:84:42:fd:7a:f6:3f:61:6c:51:07:dc:
3a:0e:a5:94:ea:31:38:2f:25:df:06:43:70:c8:9d:
cc:be:b8:0e:37:89:0d:f9:38:9f:ed:4a:3d:0a:e4:
8b:98:7e:b0:71:ab:0d:56:86:ad:96:c3:f9:f1:09:
3b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:EF:8E:D6:4D:C3:0F:8A:0D:D9:73:E1:A1:DC:18:9E:36:95:C5:23
X509v3 Authority Key Identifier:
keyid:33:57:AD:40:6D:F9:93:4B:50:48:B5:FA:21:DE:31:45:0B:93:6F:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1etQG35k0tQSLX6Id4xRQuTb6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:e2:8d:e2:05:af:fd:ef:70:82:a4:8e:80:09:fc:8e:d9:09:
e9:b4:6c:db:1d:db:4d:1d:a9:13:2a:aa:85:b3:75:f2:19:31:
b7:ce:fd:6a:c0:e5:36:c9:f7:57:46:96:59:59:a0:96:2c:e0:
e8:8e:30:e4:28:d8:31:e3:69:85:cb:1d:10:7a:d2:2d:e1:10:
f7:4f:8d:b9:56:19:7e:fc:f1:c1:3d:53:bf:4f:58:ad:2a:dc:
1c:e0:2c:ac:87:e4:2f:9e:44:bd:70:49:6f:19:e0:5e:28:b2:
18:2f:04:67:95:13:6d:ec:7b:a6:ad:c3:4f:90:d1:96:ff:49:
e7:23:d4:b8:9d:2d:96:2c:08:c1:df:4b:bb:c4:80:ea:ee:a3:
d0:32:97:ca:10:37:04:0b:e7:3d:87:5c:cd:0b:7a:de:e8:21:
b9:ef:ad:8a:f6:4c:b1:5c:ab:5e:d3:d1:eb:b4:93:fd:4a:41:
3c:e1:2c:68:8a:6a:c3:c5:fc:e8:a5:71:8c:83:d2:89:d6:08:
0f:f9:db:2f:ab:a5:e9:af:7e:de:ad:a1:c1:72:4d:8e:3c:c5:
00:6a:de:f0:6b:6c:2f:44:0d:56:0a:5c:5b:fa:5e:43:1e:ad:
a4:0e:32:06:b3:32:c3:77:53:1d:9b:90:cc:e4:7f:8e:2a:93:
0d:ab:44:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:10:55 2025 by rpki-client