Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
File: M7n5GBbdTYImpB47TDsJx73MZKk.mft (raw, json)
Hash identifier: HhKueMBQgSuqiP5UmC3AXOUIA9kUQF0g54knsGb1pHM=
Subject key identifier: F3:8A:6E:C2:E6:7C:66:F1:64:AC:78:CA:45:05:32:1E:F8:78:C5:C6
Authority key identifier: 33:B9:F9:18:16:DD:4D:82:26:A4:1E:3B:4C:3B:09:C7:BD:CC:64:A9
Certificate issuer: /CN=33b9f91816dd4d8226a41e3b4c3b09c7bdcc64a9
Certificate serial: 0197469E199C51FB20B9673B979E5FD552AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
Manifest number: 157C
Signing time: Fri 06 Jun 2025 19:00:55 +0000
Manifest this update: Fri 06 Jun 2025 19:00:55 +0000
Manifest next update: Sat 07 Jun 2025 19:00:55 +0000
Files and hashes: 1: M7n5GBbdTYImpB47TDsJx73MZKk.crl (hash: Q4kXoF0KhjbOfA8JHga4FqbzEZFm0quyC56T8f4azbY=)
2: r8v_y5CgKRJYVb0efXm40LZehP4.roa (hash: RKFUmKgDYqrRW6TXR7G+/oNe9iSAV+m90qk1jsY/Or0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:19:9c:51:fb:20:b9:67:3b:97:9e:5f:d5:52:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b9f91816dd4d8226a41e3b4c3b09c7bdcc64a9
Validity
Not Before: Jun 6 19:00:55 2025 GMT
Not After : Jun 7 19:00:55 2025 GMT
Subject: CN=f38a6ec2e67c66f164ac78ca4505321ef878c5c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ca:ae:7a:98:8b:34:3d:1f:3d:87:79:2f:23:
98:15:a5:01:cd:0c:12:1b:8a:b8:89:b9:cb:13:31:
cc:ff:f7:0f:23:80:0c:49:56:c8:7e:5f:5b:0d:eb:
86:45:f6:4e:32:c9:13:e8:66:3a:08:44:4d:7c:0a:
bf:2f:99:6c:5b:cc:a4:6b:b6:88:72:8e:d5:03:bb:
e2:03:9b:ad:24:85:8f:e9:91:ac:f6:ff:84:b1:c4:
a6:0a:6c:14:e7:c4:62:b0:5e:76:99:aa:f1:fe:5a:
06:88:24:08:55:22:ff:dd:46:5d:05:72:92:1c:49:
09:b4:8d:b9:81:7c:25:de:a8:49:37:ba:90:cb:62:
e8:32:b0:c6:96:c5:98:d4:10:ba:00:80:c8:ca:39:
6c:9e:b9:ca:bf:69:cf:dc:57:0c:bd:a2:b4:aa:b3:
8d:4c:4f:f4:ce:19:b4:df:d2:20:31:9c:2d:67:46:
70:7a:0b:cf:99:9b:18:65:22:68:37:ee:af:79:f6:
61:f9:42:e9:cb:98:88:68:f7:a0:6a:32:80:83:5b:
8c:bc:4e:71:39:7f:a0:cd:4f:1e:02:f5:1f:b1:6e:
5f:71:1a:49:a2:31:4b:37:4d:26:2b:d5:a8:c3:c8:
e2:01:96:07:24:67:c0:b0:ec:8e:c6:f5:06:e7:28:
fd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:8A:6E:C2:E6:7C:66:F1:64:AC:78:CA:45:05:32:1E:F8:78:C5:C6
X509v3 Authority Key Identifier:
keyid:33:B9:F9:18:16:DD:4D:82:26:A4:1E:3B:4C:3B:09:C7:BD:CC:64:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:f8:76:95:f8:f9:62:93:ed:13:7f:cc:52:d1:3f:94:2f:56:
0e:23:1e:07:5e:46:fa:b3:0e:f5:12:89:df:22:76:56:8f:eb:
1f:3e:fd:22:96:32:c8:01:fc:60:5d:a2:7c:67:86:7d:e9:85:
35:49:dd:4f:b9:b2:e6:59:a5:3f:af:3a:1f:d3:15:a2:75:c9:
5d:e2:c8:7d:74:13:c7:8e:26:8a:dd:71:5c:10:35:5e:1c:53:
eb:3c:18:69:40:b1:9e:ce:4f:5e:72:30:ba:1c:d0:7e:05:e1:
df:88:8d:d8:db:e0:fb:f7:ed:43:cc:a3:4f:ec:db:6b:c3:0f:
0a:c0:92:97:8f:b5:85:4a:be:c2:45:ab:4e:78:13:66:d0:a2:
aa:4b:26:0b:e1:c9:22:7e:6c:42:e6:d6:1e:08:10:5c:57:65:
03:13:6e:59:c2:af:c1:02:4c:e1:f4:a3:1e:3a:21:90:f8:fd:
59:d4:78:59:ce:d1:b1:35:ed:53:43:f8:19:89:d3:28:ee:b8:
5e:d9:01:57:d5:99:a4:2e:39:96:d3:66:e6:28:a7:a2:96:58:
4c:6b:fc:df:9f:39:32:c1:39:53:da:93:d6:26:68:9a:6e:2a:
5f:e9:5a:ce:8b:93:12:bf:6e:15:6e:2c:02:a3:f1:d8:f6:85:
bb:8f:3f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:57:14 2025 by rpki-client