Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier: a9PBedczydwKB+AAeOK2fYsJCdIADoA7ZjB+2M3GMAQ=
Subject key identifier: 59:0F:B2:5A:1D:9E:8B:04:7F:AA:27:2E:7B:3F:6E:30:82:30:AA:B9
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial: 0197CDCDCA4C8239C952936D14B96F6C1F0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number: 059B
Signing time: Thu 03 Jul 2025 01:01:44 +0000
Manifest this update: Thu 03 Jul 2025 01:01:44 +0000
Manifest next update: Fri 04 Jul 2025 01:01:44 +0000
Files and hashes: 1: KGg38ybeN3fvyEo89Wp9trP-DE4.roa (hash: o4s5h0G+Hrss7Tf1oF8r4jzhp+l0giYxBrA89MUtebs=)
2: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: 0b1Q3Y52EwH6HPk6wi9PZT+59uvbsretUG3VNFJ9818=)
3: P4Ok1kDh3dB-OfcpRjQxiOoay-8.roa (hash: KIn/EsS9ND9RtV2Bj6/EsO8jeh9wAaPztupLYU69+Mk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 01:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cd:cd:ca:4c:82:39:c9:52:93:6d:14:b9:6f:6c:1f:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Validity
Not Before: Jul 3 01:01:44 2025 GMT
Not After : Jul 4 01:01:44 2025 GMT
Subject: CN=590fb25a1d9e8b047faa272e7b3f6e308230aab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5d:f9:b9:d0:e3:ee:ab:87:db:9e:86:d4:b7:
eb:12:9c:da:0e:54:16:b5:6a:ad:33:35:58:4d:cc:
35:e3:55:fe:04:d2:74:a1:61:70:31:c2:49:89:6a:
ec:24:56:27:2f:63:d1:f9:ee:45:ee:fe:b2:4f:2a:
82:71:bb:a7:3d:b6:43:a6:7a:8e:a0:82:f8:e7:05:
c1:31:58:6f:ac:a5:56:11:87:12:53:c5:70:48:fa:
c0:ef:40:a8:82:65:2e:50:d7:95:2f:cb:a0:6d:43:
ed:fc:bb:d4:61:e0:03:09:32:06:4c:c5:59:9e:be:
1e:e0:65:3c:42:f3:b4:d4:b0:c9:cd:b9:f2:e7:76:
43:8f:b0:0b:7a:de:2b:35:1b:e0:b3:58:aa:0f:b6:
b6:dd:e5:11:c8:f0:5d:d8:31:d7:d2:82:c3:5e:d3:
5d:bc:1d:4e:91:f5:3c:f0:3f:1d:23:04:67:d7:a6:
de:89:b7:0a:1c:7b:1b:64:bc:cd:69:bd:a4:3e:bd:
e2:d6:74:5b:99:15:30:c5:e3:c8:e6:5d:ae:7d:cb:
31:8a:9c:a3:be:86:40:bd:dd:af:26:10:4d:18:d6:
f8:c0:ec:02:fa:2b:d7:17:c5:92:c1:36:11:3c:46:
5f:a5:4b:93:83:b1:ff:da:9a:34:13:ea:cb:ad:5b:
43:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:0F:B2:5A:1D:9E:8B:04:7F:AA:27:2E:7B:3F:6E:30:82:30:AA:B9
X509v3 Authority Key Identifier:
keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:24:0c:3c:b8:09:db:b9:43:e9:2f:f6:fc:38:9a:df:e8:be:
5c:3e:9d:d9:12:a6:21:2e:a7:81:5f:d6:90:4e:60:96:8f:db:
1e:e9:8d:4f:5a:84:d0:fc:3d:43:fe:15:8a:fa:ea:c2:7c:04:
be:71:14:82:2a:19:0c:41:c2:0b:9b:41:c0:61:e8:77:22:50:
ea:da:c9:cb:8f:ca:e1:8f:18:ca:ff:a6:23:58:b0:22:cd:fc:
10:54:29:c2:8d:e4:e1:6e:7f:88:cc:2f:ac:9a:ef:75:df:eb:
73:e5:c4:12:92:a4:82:55:4c:3d:64:c4:05:38:1d:7d:1f:33:
79:df:13:24:b9:b2:e9:06:40:08:cc:88:b9:2e:1f:2f:e6:df:
b1:9c:6d:11:fd:86:b0:13:0b:47:52:d6:60:4b:43:87:be:d0:
db:0b:b2:62:80:e0:97:26:17:61:4a:08:69:39:5a:6b:c5:db:
5d:0c:35:cf:31:1a:3f:f8:01:b0:2b:b4:83:a1:27:6f:5d:43:
c2:cc:a1:5f:37:0d:ef:49:d8:82:0e:1b:9d:ca:a3:89:75:dd:
54:b6:21:ce:e5:8c:19:21:15:89:5f:8a:ac:90:32:4b:60:8a:
e2:16:a1:80:20:ce:c0:6d:7b:00:03:ad:c6:73:dc:02:1c:d3:
6c:d1:5b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:07:01 2025 by rpki-client