Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
File: M-oI76mz94ye-dt2etwh3WGDTg8.mft (raw, json)
Hash identifier: w5/+pd3dWxU01E/CQq4ugqcn65KTpJScRi+M3xeESKg=
Subject key identifier: 31:B9:90:81:71:51:DC:13:87:87:04:4E:E2:07:8B:E3:D1:29:C6:BD
Authority key identifier: 33:EA:08:EF:A9:B3:F7:8C:9E:F9:DB:76:7A:DC:21:DD:61:83:4E:0F
Certificate issuer: /CN=33ea08efa9b3f78c9ef9db767adc21dd61834e0f
Certificate serial: 01975AC9A242BFB040BFA01F8BB64D7F4630
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
Manifest number: 1586
Signing time: Tue 10 Jun 2025 17:00:52 +0000
Manifest this update: Tue 10 Jun 2025 17:00:52 +0000
Manifest next update: Wed 11 Jun 2025 17:00:52 +0000
Files and hashes: 1: 9pGdNh0dkqM5WJr2d64Db3VyTiU.roa (hash: YFjcGwYG51ckAsTGEaarqbVHwri0cUu+NrZNkgCyAVM=)
2: M-oI76mz94ye-dt2etwh3WGDTg8.crl (hash: 32/1vm7gqFLmslN7H27+W3cMT61gy692ISsdHVcK6y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 14:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:c9:a2:42:bf:b0:40:bf:a0:1f:8b:b6:4d:7f:46:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33ea08efa9b3f78c9ef9db767adc21dd61834e0f
Validity
Not Before: Jun 10 17:00:52 2025 GMT
Not After : Jun 11 17:00:52 2025 GMT
Subject: CN=31b990817151dc138787044ee2078be3d129c6bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f4:10:41:ae:c1:ba:d9:bc:46:c3:a5:51:d9:
68:22:ec:fa:4e:14:fc:fd:31:bf:cd:28:ec:6c:31:
12:c0:7a:81:10:8a:16:69:54:b9:8a:06:43:1f:c6:
d6:95:40:75:39:65:07:d0:a0:2e:7a:75:7d:a0:ee:
86:51:d1:56:16:f8:8e:e2:4a:5b:a4:4d:de:6d:75:
07:06:88:27:0e:b8:e7:49:d8:5b:c6:e0:f8:46:60:
48:e9:c4:1c:f8:69:28:70:b7:b8:cf:0f:d5:7d:92:
dd:8f:61:68:7b:5e:5f:49:cf:94:c4:13:ad:64:cc:
a4:b7:5d:01:dd:61:9d:35:ff:61:ee:68:6c:2f:60:
d0:6d:6d:8f:5d:ca:82:8b:bc:1c:03:28:1c:a4:b6:
f1:01:87:64:98:8d:d8:3c:42:f0:3d:85:58:a1:e4:
b7:19:d1:01:3c:76:e8:48:07:c5:c5:02:48:e2:8b:
aa:54:8f:2e:e3:ec:b7:f3:c8:67:1a:22:97:38:30:
3a:83:f6:28:0a:ff:2f:f3:8a:8b:94:47:8b:4b:e8:
51:85:ac:73:d9:98:36:b2:95:3b:0e:94:35:11:fd:
ef:da:4b:09:fd:3b:ee:4a:f4:0a:e5:fc:bb:e1:1e:
fd:77:10:05:33:6e:56:45:fa:b1:aa:e8:e7:54:70:
7d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B9:90:81:71:51:DC:13:87:87:04:4E:E2:07:8B:E3:D1:29:C6:BD
X509v3 Authority Key Identifier:
keyid:33:EA:08:EF:A9:B3:F7:8C:9E:F9:DB:76:7A:DC:21:DD:61:83:4E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:d8:ec:38:db:be:d5:23:12:93:fb:06:78:6b:94:12:c7:66:
1b:9a:84:3d:4d:2f:37:3d:bd:35:63:40:bf:bd:30:20:bf:3f:
66:f8:e3:24:71:4c:e2:b6:d1:02:8d:5f:ae:8b:3a:89:4e:0c:
c7:b5:a4:5b:b3:e1:ff:ef:62:c1:5b:81:b9:3e:86:4d:bf:73:
91:de:51:3b:fc:54:f1:1c:5a:4a:2e:d2:df:e2:6e:07:4c:48:
06:2b:3a:8b:7a:97:e3:0f:f1:e6:7a:eb:ab:bf:18:d4:df:10:
2a:3d:c7:0c:f2:78:98:a7:b9:71:fd:3e:41:65:b5:33:87:df:
3d:39:b6:bd:d0:b0:5b:ef:1f:cb:58:96:bb:4b:e1:51:6e:9f:
c3:89:28:b7:3e:70:a8:9d:9c:b9:b9:fe:de:d8:7b:84:80:04:
73:3c:46:f2:96:31:62:d3:46:ec:22:c5:74:bb:f3:13:fb:41:
1e:ff:97:64:98:e7:77:b0:84:86:24:5b:5a:dd:6b:03:cd:98:
a3:6d:29:49:39:5b:24:0c:26:01:cb:f0:17:96:c7:ce:38:de:
7a:fa:ff:7c:78:1e:3b:1f:52:2e:ee:8e:08:7e:fd:38:a5:92:
60:3c:8d:7b:47:7c:f3:4e:5a:7c:21:b3:ff:f6:f9:33:dc:3b:
12:4a:9b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 22:51:00 2025 by rpki-client