Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft
File: M35ja6YMcU_-h1SrnQTG0e7bm4k.mft (raw, json)
Hash identifier: 3ZaUHWpgzfJQ/ZmdQFlR15AB5VhAIBSNT1fLvL6fD3s=
Subject key identifier: BD:D6:71:F9:E5:77:15:3C:C1:91:B1:EB:F4:11:69:3E:06:EC:CE:48
Authority key identifier: 33:7E:63:6B:A6:0C:71:4F:FE:87:54:AB:9D:04:C6:D1:EE:DB:9B:89
Certificate issuer: /CN=337e636ba60c714ffe8754ab9d04c6d1eedb9b89
Certificate serial: 0197D7E2EAE1ABB5542420E2FA46F87DB761
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft
Manifest number: 0244
Signing time: Sat 05 Jul 2025 00:01:02 +0000
Manifest this update: Sat 05 Jul 2025 00:01:02 +0000
Manifest next update: Sun 06 Jul 2025 00:01:02 +0000
Files and hashes: 1: M35ja6YMcU_-h1SrnQTG0e7bm4k.crl (hash: 17qG6zjJOnnrEZh7hQygL5c0msYBR+qmwqPct6gBc9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 00:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d7:e2:ea:e1:ab:b5:54:24:20:e2:fa:46:f8:7d:b7:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=337e636ba60c714ffe8754ab9d04c6d1eedb9b89
Validity
Not Before: Jul 5 00:01:02 2025 GMT
Not After : Jul 6 00:01:02 2025 GMT
Subject: CN=bdd671f9e577153cc191b1ebf411693e06ecce48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6f:af:54:bf:2b:c0:83:ec:79:ae:e6:51:1c:
e8:7d:92:e5:1d:53:1f:92:64:3c:ed:24:f6:e7:4f:
57:3e:b7:67:9e:8f:61:a9:71:09:58:98:80:9b:f3:
0a:4f:2e:b5:66:a1:2a:28:f4:91:e8:fa:9d:01:ee:
82:7f:af:0a:69:62:b9:9c:70:be:77:08:f2:9b:ee:
1b:fd:58:4a:ab:f8:f2:8b:1a:84:fc:fc:25:8e:4b:
dd:59:18:32:40:32:eb:a2:5e:8f:d3:ef:b1:6c:fc:
23:8d:fb:58:05:e6:3b:40:8a:71:f9:aa:9e:c5:ac:
e9:c5:53:66:db:91:01:27:cc:d5:64:ee:b2:72:22:
0d:bc:c4:c2:26:8b:5f:c3:88:d4:1d:a7:48:e5:7f:
b6:45:06:f4:71:6c:14:97:e0:c1:8f:04:b2:a5:77:
30:9f:0c:19:c0:72:08:0c:35:2e:fe:25:cf:72:ca:
76:5d:93:a3:34:ef:d4:3e:a6:df:e4:f4:75:e4:69:
de:a4:6e:a3:55:4e:8b:99:9a:50:55:b5:25:b2:19:
b2:1f:d9:5e:2e:9e:5d:15:b4:bb:dd:f0:62:18:97:
55:f7:f7:58:7e:3a:45:74:0e:8b:d3:8b:ea:c3:28:
75:26:51:44:14:dd:df:65:c6:ea:57:fa:64:b5:56:
80:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D6:71:F9:E5:77:15:3C:C1:91:B1:EB:F4:11:69:3E:06:EC:CE:48
X509v3 Authority Key Identifier:
keyid:33:7E:63:6B:A6:0C:71:4F:FE:87:54:AB:9D:04:C6:D1:EE:DB:9B:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:34:4f:6a:24:fd:8c:f6:2e:d4:53:ec:18:63:d3:e8:60:fd:
70:12:57:ce:bb:3f:36:92:69:e3:e4:08:db:5f:0f:72:30:5b:
17:8c:a7:08:26:b5:96:7a:be:5f:e1:9d:7e:2d:bb:30:5c:64:
68:9c:11:ea:65:40:ce:93:40:cf:72:0a:74:cb:ec:d1:e8:15:
82:e6:fe:99:cb:fc:bc:87:20:b8:fc:e6:89:be:59:53:da:78:
57:80:8c:67:f1:04:79:0c:40:3b:c2:7c:66:c1:62:1e:f7:e6:
78:01:98:b6:1b:e1:eb:25:0f:3c:81:d8:d0:76:fd:c0:9f:92:
f2:9b:9b:58:94:85:3e:ff:14:c0:49:13:c3:b6:d6:7b:d0:d7:
c8:7f:87:8f:d0:d1:c8:3e:36:a7:75:35:35:49:09:ba:08:5d:
dd:32:0a:30:61:8c:1f:35:e2:30:33:e9:3d:a3:29:50:a5:3c:
4a:b4:2c:c9:32:66:cb:03:73:89:11:58:13:06:b1:3b:e5:d4:
ac:ed:11:5e:4a:29:98:d1:ea:17:cb:df:85:92:05:46:9f:43:
3b:46:52:a4:c1:bd:e4:90:f9:a2:69:da:c9:ee:15:95:fa:76:
e5:e7:0d:89:44:90:69:ca:28:79:7c:76:a8:c5:cb:d4:e5:d2:
6c:53:9b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 06:47:41 2025 by rpki-client