Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/M6Udf_AtIfrBk65K7R8MOVbORRU.mft
File: M6Udf_AtIfrBk65K7R8MOVbORRU.mft (raw, json)
Hash identifier: GFIY2bSdUJtWHWnhZHZFVy7bc9dmjBQzD0gGeW4BOPU=
Subject key identifier: 17:B7:14:73:A2:8F:8D:BD:F6:C4:33:0B:8D:37:C1:8F:27:62:A8:19
Authority key identifier: 33:A5:1D:7F:F0:2D:21:FA:C1:93:AE:4A:ED:1F:0C:39:56:CE:45:15
Certificate issuer: /CN=33a51d7ff02d21fac193ae4aed1f0c3956ce4515
Certificate serial: 01992BFD4669D3ABC6E89ADD44AE4DBA334A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M6Udf_AtIfrBk65K7R8MOVbORRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/M6Udf_AtIfrBk65K7R8MOVbORRU.mft
Manifest number: 1608
Signing time: Tue 09 Sep 2025 01:00:42 +0000
Manifest this update: Tue 09 Sep 2025 01:00:42 +0000
Manifest next update: Wed 10 Sep 2025 01:00:42 +0000
Files and hashes: 1: H2UoMEQTfVfxYbD6DFEWnWSxzqY.roa (hash: oJCJ/WCUnFQh0GodJuWi0NgjkG4tPt6myP/qxDdyB6E=)
2: M6Udf_AtIfrBk65K7R8MOVbORRU.crl (hash: wrQISF3pq521qeO0bnPP6kjqarXUYfv/Wvq1zd0P62c=)
3: OcsKAT2NPT0ZOF4-_8aYdFedfrQ.roa (hash: hRZG/6yJi8ntHxlEybLhU4Ft+uUUaPLYRTeNmVj2zdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/M6Udf_AtIfrBk65K7R8MOVbORRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/M6Udf_AtIfrBk65K7R8MOVbORRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/M6Udf_AtIfrBk65K7R8MOVbORRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2b:fd:46:69:d3:ab:c6:e8:9a:dd:44:ae:4d:ba:33:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33a51d7ff02d21fac193ae4aed1f0c3956ce4515
Validity
Not Before: Sep 9 01:00:42 2025 GMT
Not After : Sep 10 01:00:42 2025 GMT
Subject: CN=17b71473a28f8dbdf6c4330b8d37c18f2762a819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5c:b4:6b:73:90:cb:70:d0:33:de:9e:98:bc:
be:79:68:d2:d5:51:e5:b9:44:56:fa:96:9f:bc:b9:
35:fe:3e:69:a4:de:dc:31:e7:b0:4f:df:79:c4:9b:
81:ee:61:bb:67:a2:63:d0:68:13:69:a3:e6:2a:5a:
ae:cf:65:b2:95:08:d6:b6:0c:79:9e:c3:e0:6b:e6:
e5:5e:29:30:9e:f4:1e:6e:e1:3a:21:c0:3b:ba:e0:
f9:eb:36:b8:e2:3e:15:8f:0c:0d:35:f8:92:af:4d:
4e:89:ad:9d:a7:cb:f5:47:4a:0f:9a:72:bf:06:10:
46:b5:a5:81:97:b0:75:69:e2:06:f4:c9:c6:e9:de:
49:b1:71:f3:24:d3:f0:05:db:b9:c4:a2:b4:03:58:
aa:0e:37:23:a6:a7:e9:64:16:6f:94:2e:97:af:5f:
27:20:9b:40:ab:db:53:e0:7a:fc:6d:c6:73:a5:bb:
6b:7e:98:db:75:7f:b9:57:c0:b4:2f:ca:21:5a:b2:
87:36:20:e0:dd:5a:bd:12:ab:de:9b:3b:18:ee:8e:
cf:32:94:84:bd:d2:6a:57:73:85:b9:b1:e1:9f:01:
a4:28:71:1c:93:0f:ee:d6:a0:c0:90:82:2d:ad:2b:
d3:c4:16:24:83:cf:e4:7b:a1:c7:9e:70:3f:88:be:
87:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B7:14:73:A2:8F:8D:BD:F6:C4:33:0B:8D:37:C1:8F:27:62:A8:19
X509v3 Authority Key Identifier:
keyid:33:A5:1D:7F:F0:2D:21:FA:C1:93:AE:4A:ED:1F:0C:39:56:CE:45:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6Udf_AtIfrBk65K7R8MOVbORRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/M6Udf_AtIfrBk65K7R8MOVbORRU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/M6Udf_AtIfrBk65K7R8MOVbORRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:1d:ea:76:56:56:2e:be:71:d1:44:86:36:91:e6:51:a0:83:
b9:d8:1f:11:8e:38:a1:a5:ac:ce:46:57:a8:76:32:66:c6:d3:
a1:f2:e3:41:be:c5:22:a2:9d:62:cd:45:a1:a8:48:01:6a:ee:
44:bc:64:0a:74:ee:97:f9:cd:e3:31:cf:1d:4c:30:af:d0:23:
0c:42:89:5d:37:e5:4a:c0:65:ca:ee:11:68:74:fe:8f:26:8b:
c2:5b:42:ee:c4:6c:cf:3f:76:26:93:07:77:57:5b:05:e0:85:
09:5d:3c:68:8b:a7:e8:a7:d2:6a:5b:6b:38:b2:e8:99:a2:a8:
5c:68:e6:57:bb:85:9c:80:dd:ff:ba:46:22:e2:f2:37:9e:6c:
dd:09:97:31:2e:ef:f7:19:53:94:a7:9e:8b:17:05:02:9d:05:
d2:42:f4:2e:80:47:b3:ee:ec:d4:98:47:4f:e8:7b:0c:77:a6:
f9:23:d9:1b:22:5a:36:fb:ad:5d:e3:84:43:e1:c6:a2:99:d1:
cd:ee:ae:cc:ba:d0:f4:ef:64:86:36:d0:06:52:26:3d:54:3e:
b0:28:e8:30:ae:13:cb:dd:10:65:3c:22:a6:41:31:90:b6:90:
79:03:57:36:da:66:45:60:ba:1f:ce:bf:1c:f8:f2:fa:9f:02:
ab:18:02:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 09:15:37 2025 by rpki-client