Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.mft
File: M5VDMDSfV1Aqdq5umZh-_D47gQk.mft (raw, json)
Hash identifier: x61kTTj7i/J7usiMeM5nJFkH3QGvbhvwTJ5s6nGrHvs=
Subject key identifier: 00:3D:AA:9F:93:EF:35:6C:27:1C:56:43:2D:4A:1B:25:C8:6A:9C:00
Authority key identifier: 33:95:43:30:34:9F:57:50:2A:76:AE:6E:99:98:7E:FC:3E:3B:81:09
Certificate issuer: /CN=33954330349f57502a76ae6e99987efc3e3b8109
Certificate serial: 01974D0D9361AC6571C244A9D663C69A086E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M5VDMDSfV1Aqdq5umZh-_D47gQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.mft
Manifest number: 1586
Signing time: Sun 08 Jun 2025 01:00:24 +0000
Manifest this update: Sun 08 Jun 2025 01:00:24 +0000
Manifest next update: Mon 09 Jun 2025 01:00:24 +0000
Files and hashes: 1: M5VDMDSfV1Aqdq5umZh-_D47gQk.crl (hash: MXs7HgjAlRZAf59ZTk7owzelYoLu6FqE5h/IiH52zDc=)
2: dZXpVyrQ8VbKvAp5COr0Cumw1Ew.roa (hash: tReFkDEyNqbnnxeZucnGGCRzuWm3mLRotTGRZWTwBCk=)
3: lq6yBpxyj8mQu1pcN8Yet01eUsA.roa (hash: jOVFBLabQ2MHZZoWNADP7Z+CInLcq/pubwpgW9d7+lE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/M5VDMDSfV1Aqdq5umZh-_D47gQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0d:93:61:ac:65:71:c2:44:a9:d6:63:c6:9a:08:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33954330349f57502a76ae6e99987efc3e3b8109
Validity
Not Before: Jun 8 01:00:24 2025 GMT
Not After : Jun 9 01:00:24 2025 GMT
Subject: CN=003daa9f93ef356c271c56432d4a1b25c86a9c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:de:6a:38:97:aa:71:83:8b:a0:c9:d2:cb:4c:
b3:c0:ea:6a:3d:d0:e4:37:11:d2:12:10:68:dd:cb:
ff:ac:b5:a3:02:c1:1b:37:6a:68:b2:13:3e:49:92:
65:84:b5:f0:98:26:f1:f9:5d:ca:35:6f:2b:19:9b:
9c:b1:f7:01:1d:3c:ae:5c:c7:8d:8d:6a:a9:9b:c6:
c1:a1:de:89:25:60:bf:96:3f:51:73:15:69:11:d2:
b6:93:aa:3a:cf:d7:35:ff:20:7e:7c:ec:3d:71:85:
92:3a:38:39:22:e8:e1:b4:7a:11:08:62:70:b0:79:
b8:49:c0:83:be:ef:64:8f:c3:3f:59:10:de:35:90:
78:03:eb:3f:ed:03:52:68:49:4d:1b:83:d1:96:fc:
c0:19:e8:82:d3:5a:85:53:c8:8d:ec:82:9e:35:96:
91:f2:8a:e5:fd:43:50:2e:0a:5e:4a:53:c5:fa:e8:
64:47:60:5e:8f:39:00:bd:f3:0d:28:a8:8b:98:a2:
75:fa:17:8b:d3:6e:47:58:d8:b6:8d:24:5e:33:1e:
3d:24:63:25:a5:8a:84:be:6d:a3:56:7c:c9:94:95:
bb:0a:61:b6:a2:ca:7d:7b:be:fa:8c:52:9f:65:e8:
66:03:57:d9:cd:7a:00:10:64:ea:93:16:fa:99:05:
f5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:3D:AA:9F:93:EF:35:6C:27:1C:56:43:2D:4A:1B:25:C8:6A:9C:00
X509v3 Authority Key Identifier:
keyid:33:95:43:30:34:9F:57:50:2A:76:AE:6E:99:98:7E:FC:3E:3B:81:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M5VDMDSfV1Aqdq5umZh-_D47gQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:86:5e:2b:2b:99:0c:28:b7:8a:80:51:af:e8:ca:94:c6:fe:
94:72:d8:e9:51:ce:ff:01:5f:22:d4:1f:ca:95:0b:15:ec:67:
b7:df:54:75:7c:1d:a5:0a:28:14:2a:5b:47:d2:3d:11:32:e1:
60:76:bd:6f:0f:92:fb:9e:57:cd:3f:25:23:10:bd:43:04:c4:
f6:87:75:b6:89:2b:d1:69:d0:1e:32:41:75:e0:55:4d:2b:5f:
ad:70:f6:11:d4:8c:c4:b1:52:df:33:45:3f:01:4d:9f:3c:8c:
72:ce:17:16:80:dc:a7:0a:f5:fe:53:e8:f2:86:2d:15:7e:63:
6a:69:4f:2a:b8:87:d9:15:9b:6e:94:5d:18:17:ff:1b:50:53:
47:5d:df:7f:91:15:fc:9b:0a:cf:53:87:51:ec:49:fe:4d:e0:
ba:50:ec:37:fb:2d:2d:3b:10:e8:70:5d:f7:b5:8d:02:1a:3f:
37:b3:cf:c9:c0:e5:e5:8c:11:2d:d8:84:23:20:25:f0:e3:2a:
92:4b:54:20:37:67:bb:e9:20:a0:ab:7e:98:2f:18:1f:41:84:
7a:a9:74:95:1e:79:59:da:f2:6f:a9:e0:56:09:0f:52:b4:f0:
d1:f7:59:d2:df:d9:6f:71:6f:24:ad:92:71:d8:50:7a:bd:86:
5b:76:22:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:17:11 2025 by rpki-client