Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft
File: M7psC8yhbGhdx7myfxmbQrS-7uk.mft (raw, json)
Hash identifier: tFQMxKZtM6Wva0KuS39FCXubPZDvaoZln3GUyhEveJQ=
Subject key identifier: 7B:1E:41:23:FB:63:F5:BE:5A:50:A7:98:39:A2:8A:03:9D:31:40:07
Authority key identifier: 33:BA:6C:0B:CC:A1:6C:68:5D:C7:B9:B2:7F:19:9B:42:B4:BE:EE:E9
Certificate issuer: /CN=33ba6c0bcca16c685dc7b9b27f199b42b4beeee9
Certificate serial: 01974FD7DC4BA6130F6643EC503C3FBAA8A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7psC8yhbGhdx7myfxmbQrS-7uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft
Manifest number: 0CDD
Signing time: Sun 08 Jun 2025 14:00:35 +0000
Manifest this update: Sun 08 Jun 2025 14:00:35 +0000
Manifest next update: Mon 09 Jun 2025 14:00:35 +0000
Files and hashes: 1: M7psC8yhbGhdx7myfxmbQrS-7uk.crl (hash: IjRBDIxw71/kf8avtOYHnK6stzpCDEj3C3A1OI55RlA=)
2: YsLZoqZw6u24llC00PtDDR7Qp3Q.roa (hash: xyGbGlbgzc0VPKZXK9Mhkv3PJ7Wng5W2DCI8eLTmYC0=)
3: kPhGzXODbRD6DaiKt_1D_SiuRQ8.roa (hash: 9eEDMcEOBSRwouzuH08DzSkvaYWRY3j//V52rGTuy7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7psC8yhbGhdx7myfxmbQrS-7uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:d7:dc:4b:a6:13:0f:66:43:ec:50:3c:3f:ba:a8:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33ba6c0bcca16c685dc7b9b27f199b42b4beeee9
Validity
Not Before: Jun 8 14:00:35 2025 GMT
Not After : Jun 9 14:00:35 2025 GMT
Subject: CN=7b1e4123fb63f5be5a50a79839a28a039d314007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:14:3e:cb:41:e1:2d:cd:fb:5e:20:66:c6:33:
3c:9a:a9:17:80:81:71:41:2b:a9:0e:50:3b:9d:cc:
d9:e8:1e:c6:2a:5c:96:34:e4:b4:21:1f:83:e1:3c:
22:b8:6d:cb:91:90:43:40:64:e6:36:30:9d:54:d5:
ff:23:b0:ef:79:ac:47:9b:57:10:b8:dd:f0:22:18:
c1:47:d8:fb:e0:80:6c:9d:fe:c3:1b:e0:7a:b4:dd:
82:1c:c6:e7:fb:31:ab:be:97:37:65:c5:3c:bf:22:
ad:b0:5a:6f:f5:36:52:28:38:e4:13:4a:7e:db:dc:
13:63:0f:0f:64:d3:94:28:f9:c8:80:84:6a:3b:7f:
66:04:a8:ea:ba:af:a2:6c:cc:27:a1:3d:58:9b:27:
c3:43:1b:d0:8d:3c:3f:a4:13:67:64:7b:59:6f:97:
f4:f4:cc:35:37:0c:5a:f3:8e:16:ec:8a:d9:ba:cc:
0d:8c:dd:5e:88:b9:97:d0:d2:a3:24:b7:61:7b:e4:
ff:db:d4:4d:3e:89:6d:b0:fe:53:b0:ec:4f:ec:8d:
d0:9f:05:76:ea:e1:a0:f7:70:22:12:18:e7:ed:c2:
64:52:9d:eb:f0:86:ab:c9:85:9e:ed:ce:3e:bc:54:
1c:80:28:3b:7c:06:02:a0:9a:66:1a:41:61:48:ac:
3b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:1E:41:23:FB:63:F5:BE:5A:50:A7:98:39:A2:8A:03:9D:31:40:07
X509v3 Authority Key Identifier:
keyid:33:BA:6C:0B:CC:A1:6C:68:5D:C7:B9:B2:7F:19:9B:42:B4:BE:EE:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7psC8yhbGhdx7myfxmbQrS-7uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:26:5f:25:ce:ce:58:dd:e7:78:a4:72:67:31:c5:c4:91:13:
89:cd:e2:85:e7:38:f8:8f:9e:4e:fc:1a:63:6b:1b:4f:d5:45:
b1:f3:52:2e:bd:4f:6c:d0:14:57:c7:6e:df:45:c3:c9:a4:0e:
3d:62:3e:40:58:c1:b5:ae:ed:ef:11:28:72:36:1a:c1:92:c0:
65:4a:ce:96:d2:fa:e6:9f:a8:65:19:c1:b9:87:ec:ca:0f:b5:
61:94:ef:d7:1b:11:25:8f:68:48:1b:50:79:fd:13:97:18:eb:
8e:f7:b6:68:e5:e5:b7:f3:b3:79:75:49:73:ec:6d:25:d1:6b:
77:3a:a6:0a:29:6b:77:9c:79:6a:06:b6:45:1c:8d:27:c0:12:
50:10:80:d5:24:a5:ea:98:6b:a5:ba:0f:78:a5:ad:6c:fe:4c:
30:b9:a9:70:9c:27:34:77:90:68:45:c2:a2:36:9b:a8:55:e6:
3a:90:e1:66:fc:29:50:e1:d6:25:ac:ea:c1:18:ad:f9:4d:92:
0a:6b:0f:ef:2c:55:3f:74:92:39:12:f0:0f:ea:3c:e1:a4:b0:
03:4b:c9:87:28:bd:30:97:71:9e:d3:a6:a6:1a:96:2a:78:b8:
fe:14:b0:0f:e9:95:77:54:17:d9:21:14:bf:c8:dc:ba:d3:fa:
ab:67:c4:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:29:01 2025 by rpki-client