Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier: ZTJEPb43lRtbwGERZD3L9BAaIQ8slKgZXgx8qZrCVno=
Subject key identifier: 16:6E:62:70:BD:51:7A:7B:DD:6A:F4:0A:E7:F0:2B:0E:BD:44:21:AC
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial: 01991809646F0FD50A00D381F14D1899BEB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number: 0646
Signing time: Fri 05 Sep 2025 04:01:32 +0000
Manifest this update: Fri 05 Sep 2025 04:01:32 +0000
Manifest next update: Sat 06 Sep 2025 04:01:32 +0000
Files and hashes: 1: KGg38ybeN3fvyEo89Wp9trP-DE4.roa (hash: o4s5h0G+Hrss7Tf1oF8r4jzhp+l0giYxBrA89MUtebs=)
2: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: KqDey9mQseX+RBGNWuZZ98rSojCeBzdApuM+x+UA61g=)
3: P4Ok1kDh3dB-OfcpRjQxiOoay-8.roa (hash: KIn/EsS9ND9RtV2Bj6/EsO8jeh9wAaPztupLYU69+Mk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:09:64:6f:0f:d5:0a:00:d3:81:f1:4d:18:99:be:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Validity
Not Before: Sep 5 04:01:32 2025 GMT
Not After : Sep 6 04:01:32 2025 GMT
Subject: CN=166e6270bd517a7bdd6af40ae7f02b0ebd4421ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b0:8b:f4:ea:75:1c:db:5f:5d:11:8f:20:7c:
7e:07:2d:0e:b7:3e:ae:da:e4:01:8a:ca:09:87:b3:
de:c4:37:50:97:e9:a9:c8:7b:40:50:56:56:66:d7:
e4:33:93:1f:09:16:bd:2c:c8:2c:aa:40:81:46:15:
49:aa:01:2f:f6:e6:a0:69:5f:8d:45:dd:42:d3:b4:
ec:1f:70:16:0d:aa:1a:62:19:49:09:3d:77:53:de:
54:8c:46:27:c7:b8:86:0e:7a:4a:c7:f2:38:fb:84:
9f:29:4f:39:0e:7a:ac:33:df:b4:80:35:05:de:76:
23:fd:b5:07:b6:19:3a:f2:1f:01:d5:3a:6f:65:ad:
b2:d4:e6:92:82:23:db:ef:e4:72:61:3a:6f:a5:42:
7f:77:ac:5b:a4:0c:db:c4:5a:35:e5:95:2a:9d:4f:
03:cf:25:16:82:29:0a:22:1a:3a:39:97:ee:a7:61:
94:70:49:23:4f:e3:65:33:e8:6f:2c:f5:91:1e:41:
c5:d3:e0:d0:c0:e3:6b:96:38:bb:d9:9c:06:1e:ac:
71:4e:17:39:48:dc:91:22:97:79:58:90:e7:16:90:
d7:89:a8:d3:32:a7:cd:98:72:56:1a:4c:8d:ae:7d:
f6:5c:1d:d9:d7:22:35:f9:c0:c7:7d:1a:fc:2a:a6:
c2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:6E:62:70:BD:51:7A:7B:DD:6A:F4:0A:E7:F0:2B:0E:BD:44:21:AC
X509v3 Authority Key Identifier:
keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:88:0c:15:15:b0:67:ca:c6:c9:22:0c:f5:99:4d:36:7e:97:
7d:0b:a0:74:9d:0d:0b:26:ad:15:bc:b0:6f:b3:db:fb:2f:9c:
1c:26:5e:21:8d:1e:58:e6:4c:ba:2b:31:5b:c6:20:88:dc:ba:
8a:87:dc:c3:24:dc:ab:06:a8:b0:de:99:45:63:b7:3b:c0:38:
86:12:56:41:06:1a:4a:95:3a:93:3b:5b:20:5e:73:55:e2:5c:
08:12:ba:a6:46:d4:ed:ce:9e:e2:97:b4:85:96:83:d1:08:86:
28:aa:ae:e3:29:2c:e4:d5:0a:31:f7:7e:2a:5b:54:08:f6:c7:
1d:6c:2d:f6:54:53:8a:b4:9c:38:f0:42:b8:2a:0a:2a:ed:ab:
9f:4e:d8:93:3b:b0:41:23:8e:cd:93:fa:07:23:6c:0e:28:2e:
b1:75:b0:0e:84:2e:c2:69:ac:a4:07:da:c0:55:32:3f:59:27:
01:4b:9f:80:c7:8e:52:68:ab:84:de:f1:16:de:40:40:86:1d:
82:d8:25:cc:1d:72:d9:76:42:fc:62:b8:c8:93:27:24:a5:b8:
45:4b:3f:fe:f4:dd:d1:3e:b2:5e:ee:00:ec:d0:c8:9e:4c:69:
a1:76:36:22:60:1e:89:44:95:80:ae:4c:13:52:c0:8f:ed:8d:
66:ca:a5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 11:33:07 2025 by rpki-client