Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
File: M1wzNuLOO9daspzoHlT_gexW8do.mft (raw, json)
Hash identifier: DbMNP/VJoj8xhez9JZZsVK7+8IBXpr0u4Y1dpv5iG9Q=
Subject key identifier: D3:4A:0C:2C:42:5F:CF:E5:7C:6D:2D:FA:6D:44:4B:32:20:31:14:E4
Authority key identifier: 33:5C:33:36:E2:CE:3B:D7:5A:B2:9C:E8:1E:54:FF:81:EC:56:F1:DA
Certificate issuer: /CN=335c3336e2ce3bd75ab29ce81e54ff81ec56f1da
Certificate serial: 0197470C3C34C144265E1378C534AD073520
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
Manifest number: 157D
Signing time: Fri 06 Jun 2025 21:01:13 +0000
Manifest this update: Fri 06 Jun 2025 21:01:13 +0000
Manifest next update: Sat 07 Jun 2025 21:01:13 +0000
Files and hashes: 1: M1wzNuLOO9daspzoHlT_gexW8do.crl (hash: Wx6ffUQudXOl9PZqmYN4zDeKbG9UXNRi+r9izDt+KWo=)
2: RYELhtEFcsCmVORqbpstU7Crut0.roa (hash: aIhBm/rb3wVRspojE1k+QXWmo713Q+h8iYk1yzSNDKA=)
3: wFOiJmPx91gFud4szSTNVGIfLik.roa (hash: KJL3tTISnToS4chRnmNiRq6jQUDoMI15K3mK8EPpyi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0c:3c:34:c1:44:26:5e:13:78:c5:34:ad:07:35:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=335c3336e2ce3bd75ab29ce81e54ff81ec56f1da
Validity
Not Before: Jun 6 21:01:13 2025 GMT
Not After : Jun 7 21:01:13 2025 GMT
Subject: CN=d34a0c2c425fcfe57c6d2dfa6d444b32203114e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:14:ff:30:44:84:6d:52:b2:66:c5:f6:f3:fc:
02:73:9c:f1:a5:3e:8e:9f:70:9a:ee:07:3a:5a:91:
d5:49:44:25:9b:7a:f3:39:09:34:23:89:5c:cb:bc:
81:ed:4c:70:39:df:52:31:41:b2:3c:01:6a:b4:69:
39:34:ad:00:c4:26:51:98:45:3e:40:d6:da:c4:1b:
e6:3c:62:29:c5:d0:4a:7c:4e:39:48:ea:26:f2:f2:
fa:24:a9:4e:4d:ca:69:01:31:28:67:f8:be:54:46:
e1:f8:86:97:7b:2a:26:02:25:d7:66:76:bd:1a:d2:
df:e2:fd:63:29:e5:e3:1d:7d:88:3e:4a:b0:f4:ac:
cb:0e:28:16:b3:cf:04:8d:68:57:43:d4:70:bb:36:
e0:f1:dc:39:e0:35:38:35:d2:cf:c6:d6:95:a3:b5:
50:8d:a8:dc:87:6f:ac:2e:79:3f:16:55:55:5f:5d:
1f:24:e8:89:d6:ae:d6:23:e4:b4:df:30:33:f8:cb:
64:c9:80:96:81:f7:75:e7:e5:c5:53:a1:1b:15:50:
53:11:e8:e4:7d:e1:5b:f8:1b:24:35:eb:c7:af:e5:
e0:0f:89:87:23:08:2d:b5:33:11:f5:1a:4d:3b:65:
02:85:53:6a:6c:d4:c8:bf:67:f6:69:b1:c9:aa:6d:
12:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:4A:0C:2C:42:5F:CF:E5:7C:6D:2D:FA:6D:44:4B:32:20:31:14:E4
X509v3 Authority Key Identifier:
keyid:33:5C:33:36:E2:CE:3B:D7:5A:B2:9C:E8:1E:54:FF:81:EC:56:F1:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:50:d8:8b:d9:5c:39:2a:7d:ba:d3:db:a3:f6:25:18:55:46:
5b:8f:5e:86:96:13:9d:f4:da:62:b5:91:97:83:7b:28:25:ce:
09:e0:89:71:9b:a1:74:68:2a:b2:2d:44:d8:59:80:a7:cf:39:
f8:12:f6:a2:c3:57:4a:e2:aa:13:13:69:93:30:a2:1c:0e:d5:
30:7f:c1:3c:03:d1:98:ed:62:45:40:b9:6d:50:1e:35:3d:db:
08:24:d9:89:a8:04:cd:4d:21:b9:19:8c:08:d0:66:49:ed:0b:
79:17:2d:d8:42:03:df:4b:8c:a7:9f:72:67:87:dd:dd:75:07:
9d:56:41:af:86:84:a1:9f:b1:e1:3f:08:1c:f7:94:fa:6b:30:
8c:52:c8:11:80:9e:71:1b:c2:ca:c6:f3:93:b6:cc:4d:23:87:
e9:d9:43:15:63:0f:c0:57:7b:ab:12:d7:32:2f:64:52:54:1e:
ae:06:ad:db:0c:7f:b2:fe:9c:f4:22:0b:fa:24:29:a6:bd:47:
95:5b:65:6f:05:50:55:78:ae:64:61:ea:ae:11:ee:fe:48:01:
da:f2:49:05:c0:13:2e:a8:0e:b4:cf:c9:07:1f:c2:17:40:3e:
c2:a2:6f:e2:ed:50:b4:c5:3f:35:47:1a:17:07:fe:e7:ba:de:
78:ec:e1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:08:30 2025 by rpki-client