Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
File: M-oI76mz94ye-dt2etwh3WGDTg8.mft (raw, json)
Hash identifier: ZOxZbbLfpqpEJ+3kBMpkzWxJtNvT0jPvBijLFJBo8jU=
Subject key identifier: 0F:FA:DC:EE:C6:EF:7B:5A:DA:3F:C4:07:80:72:21:60:83:8B:8D:3D
Authority key identifier: 33:EA:08:EF:A9:B3:F7:8C:9E:F9:DB:76:7A:DC:21:DD:61:83:4E:0F
Certificate issuer: /CN=33ea08efa9b3f78c9ef9db767adc21dd61834e0f
Certificate serial: 019762832AAAD9878DF150E33C4CE53D06AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
Manifest number: 158A
Signing time: Thu 12 Jun 2025 05:00:52 +0000
Manifest this update: Thu 12 Jun 2025 05:00:52 +0000
Manifest next update: Fri 13 Jun 2025 05:00:52 +0000
Files and hashes: 1: 9pGdNh0dkqM5WJr2d64Db3VyTiU.roa (hash: YFjcGwYG51ckAsTGEaarqbVHwri0cUu+NrZNkgCyAVM=)
2: M-oI76mz94ye-dt2etwh3WGDTg8.crl (hash: /3gOXHk07Z0tzqqgmcCR+zT3mAu69SkDWJhj9ofC5fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:83:2a:aa:d9:87:8d:f1:50:e3:3c:4c:e5:3d:06:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33ea08efa9b3f78c9ef9db767adc21dd61834e0f
Validity
Not Before: Jun 12 05:00:52 2025 GMT
Not After : Jun 13 05:00:52 2025 GMT
Subject: CN=0ffadceec6ef7b5ada3fc40780722160838b8d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1a:0d:b7:f9:e7:f4:0b:a7:2a:c7:52:6d:ec:
28:15:71:51:1a:29:c3:8e:30:b8:ef:bf:f0:32:3f:
3e:dc:a6:3c:af:60:8c:11:07:02:ab:19:2a:22:c8:
5c:2a:73:f3:ee:6a:00:f5:8b:c0:ef:b7:7a:df:60:
b2:eb:af:fd:8f:8b:e3:d2:5d:80:a2:9b:e3:2f:b1:
3a:9f:db:ee:70:f3:b0:63:b2:96:c0:72:ce:c5:69:
71:43:d5:a2:4a:89:05:e6:1f:2b:72:4f:7e:2d:85:
7f:38:cf:d1:50:1c:0d:53:8a:c7:ed:a8:94:40:3a:
de:c7:4e:7a:d6:5e:6b:38:b4:c3:a9:5f:bf:9c:a5:
15:0a:03:1c:f8:f8:8b:59:da:93:68:90:f9:14:3e:
96:39:5e:95:5e:07:a5:19:8c:1a:48:f4:8d:7b:91:
30:0f:b9:93:74:13:41:87:a7:1f:ab:fc:4b:08:2c:
22:ef:37:27:49:87:e6:03:9f:1b:fa:73:f1:fa:9b:
3b:b0:ae:24:96:4b:aa:11:e6:15:96:d7:f5:66:9d:
e1:a9:e2:d5:6e:62:bd:f9:7a:c9:88:57:6f:6b:d3:
d7:af:ab:fd:ce:83:9d:c0:f6:f9:93:ac:41:d0:56:
ed:90:7d:6b:a7:6f:dc:78:b7:69:5d:b7:27:a5:f2:
d6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:FA:DC:EE:C6:EF:7B:5A:DA:3F:C4:07:80:72:21:60:83:8B:8D:3D
X509v3 Authority Key Identifier:
keyid:33:EA:08:EF:A9:B3:F7:8C:9E:F9:DB:76:7A:DC:21:DD:61:83:4E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:12:44:a6:59:ea:d8:27:3d:fb:dc:73:5b:a4:fc:61:8b:e2:
9f:d1:23:d2:71:31:0d:cb:3f:7c:5a:6b:e8:1f:00:54:b2:7c:
15:b7:44:7e:de:a6:f6:a3:3f:95:d0:e5:ce:b6:1e:ee:8f:34:
e9:8a:e9:a4:bb:dd:df:5b:bb:cb:6a:b8:6c:32:0e:21:db:9a:
b2:e8:8d:dd:ef:0e:32:ae:ee:60:03:9f:13:29:51:2b:79:e4:
21:fa:bf:da:0d:77:6b:49:ab:fe:d1:4b:42:30:d3:7c:da:6f:
fe:8f:c6:64:a4:c7:98:fc:cb:3c:80:df:eb:71:05:2b:8c:c2:
4c:5f:3d:e8:ce:74:4a:07:73:b5:ad:2f:27:64:f4:4c:b8:8d:
af:cd:a9:19:75:9d:66:b4:40:8c:af:80:56:c0:ff:2b:2a:94:
6c:5e:08:d0:4a:58:2b:7c:c7:99:2a:8a:20:5a:8f:d7:65:21:
c8:51:f8:05:30:40:24:de:98:c5:8f:e7:c4:97:2f:67:1d:30:
1b:64:a3:5f:33:96:69:ed:80:b1:7f:60:e5:af:86:34:9a:00:
4b:5b:21:45:35:84:b0:74:13:c0:f3:0d:1a:e4:50:89:ab:36:
e5:26:49:c7:71:5d:78:13:47:95:df:ca:16:74:c2:f4:a2:9f:
73:d9:88:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 08:39:55 2025 by rpki-client