Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
File: M-oI76mz94ye-dt2etwh3WGDTg8.mft (raw, json)
Hash identifier: v5bjO5ZQ8OV6NDFXdE/nFjoiczfhosKp/e7708/WVuw=
Subject key identifier: 8B:F6:F0:5C:A2:23:0E:78:92:45:B6:87:DA:84:B7:7F:6E:12:A3:42
Authority key identifier: 33:EA:08:EF:A9:B3:F7:8C:9E:F9:DB:76:7A:DC:21:DD:61:83:4E:0F
Certificate issuer: /CN=33ea08efa9b3f78c9ef9db767adc21dd61834e0f
Certificate serial: 01976C2AAD5F5AC6E3F3F4818F60180B6E00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 02:00:25 +0000
Manifest this update: Sat 14 Jun 2025 02:00:25 +0000
Manifest next update: Sun 15 Jun 2025 02:00:25 +0000
Files and hashes: 1: 9pGdNh0dkqM5WJr2d64Db3VyTiU.roa (hash: YFjcGwYG51ckAsTGEaarqbVHwri0cUu+NrZNkgCyAVM=)
2: M-oI76mz94ye-dt2etwh3WGDTg8.crl (hash: lKx2I8y/paB/B4JAnIcFBmKVIZG69V4dA+4KMo9EeCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:ad:5f:5a:c6:e3:f3:f4:81:8f:60:18:0b:6e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33ea08efa9b3f78c9ef9db767adc21dd61834e0f
Validity
Not Before: Jun 14 02:00:25 2025 GMT
Not After : Jun 15 02:00:25 2025 GMT
Subject: CN=8bf6f05ca2230e789245b687da84b77f6e12a342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:69:a0:cc:20:60:53:4b:17:83:a4:99:e7:63:
3d:57:fd:0d:64:0a:b9:e4:93:55:b2:ca:fb:33:2a:
93:70:6f:7c:07:8b:af:0f:a6:cd:82:01:08:79:91:
83:aa:43:4d:77:06:6c:e9:4f:72:6f:14:47:d8:33:
20:38:00:6a:53:37:95:05:e6:2b:9a:a4:b6:78:6d:
82:fb:95:bd:e2:37:d1:69:58:b1:9a:65:64:23:a8:
0e:f2:b0:cd:2c:47:13:90:61:6a:42:2f:b2:43:52:
62:e3:3c:65:77:6b:00:5c:50:eb:7d:83:f1:20:d7:
d9:8d:66:14:2e:6c:f5:04:2a:0c:73:74:b4:47:90:
10:11:a8:a9:26:93:f0:3e:c7:26:ff:37:99:c1:66:
3b:eb:14:13:4d:7a:1e:d7:a7:61:96:b6:d4:1c:bf:
76:d9:fa:8b:75:0a:2e:5a:f9:4e:29:b4:7d:67:b2:
fb:aa:e1:57:12:d1:d5:a1:6c:08:4a:bf:db:5f:6c:
3b:54:67:b7:ba:44:02:6a:ac:7d:11:2c:28:c4:1b:
cc:89:2f:10:97:9b:0d:55:24:6e:ba:2e:fb:66:64:
dd:aa:a1:13:67:8a:f8:8f:dd:29:fa:a6:4c:f1:4f:
cc:0e:73:98:4d:fe:cc:b0:3f:21:be:61:36:7b:a4:
8b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F6:F0:5C:A2:23:0E:78:92:45:B6:87:DA:84:B7:7F:6E:12:A3:42
X509v3 Authority Key Identifier:
keyid:33:EA:08:EF:A9:B3:F7:8C:9E:F9:DB:76:7A:DC:21:DD:61:83:4E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:63:a0:24:84:af:49:ef:68:89:c0:e0:e7:34:18:f1:cc:ae:
ab:0c:4e:7b:f4:5c:cf:38:e5:c0:1a:49:8d:56:b0:21:1c:fc:
42:23:4e:7d:4f:e4:9d:19:e0:4d:81:61:b3:80:49:94:d5:ce:
0c:db:ef:47:73:7f:cc:73:8d:75:96:ea:a4:94:2b:af:cc:5c:
87:48:24:9e:8e:3c:3d:a1:8e:16:ac:2c:22:03:f8:15:ea:d2:
bf:ed:91:16:22:e2:1b:c2:41:f7:06:23:9c:25:26:82:ba:a0:
d4:5c:89:8e:69:8f:47:3e:16:7b:2e:be:18:5d:81:2e:99:a1:
b8:b6:1c:5d:a9:5f:11:04:50:4e:af:b5:f4:ca:1f:27:74:25:
b0:e2:0f:1a:bc:02:f0:45:d8:e7:8a:9c:24:bd:50:f7:84:6b:
ed:1b:e6:01:57:c9:a4:5c:cf:78:45:29:67:de:68:2b:9c:95:
38:d1:30:44:78:2f:b7:6f:77:52:01:0c:8e:05:19:11:6d:90:
7d:11:0b:ce:da:fe:ae:27:e3:56:a6:bb:97:35:e1:66:e5:de:
ea:7e:09:a4:25:e2:87:1e:67:45:80:a9:d0:f2:7c:20:66:12:
77:1a:bd:23:2c:2c:7c:b7:ea:39:c8:ed:97:10:e9:ab:03:34:
05:00:21:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:36:52 2025 by rpki-client