Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft
File: M7Zai666T_YhSS6-5vweiK2yGwM.mft (raw, json)
Hash identifier: 0/fKj0RYYKfwVtd5f7mZ5iv2caOQCxWUFAYoesuLKnQ=
Subject key identifier: 1D:48:E3:55:D2:DF:1E:C0:B1:4C:00:A2:1E:D6:46:16:4B:C1:18:B5
Authority key identifier: 33:B6:5A:8B:AE:BA:4F:F6:21:49:2E:BE:E6:FC:1E:88:AD:B2:1B:03
Certificate issuer: /CN=33b65a8baeba4ff621492ebee6fc1e88adb21b03
Certificate serial: 0199221EF9D31E410151B506F3A92CD5932A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft
Manifest number: 0289
Signing time: Sun 07 Sep 2025 03:01:19 +0000
Manifest this update: Sun 07 Sep 2025 03:01:19 +0000
Manifest next update: Mon 08 Sep 2025 03:01:19 +0000
Files and hashes: 1: KOqyp8DhhZD3JH6K0j1zl6aQKBk.roa (hash: CehIyyDTNH2XPwU/dxmXRsBi9Cc/OKe00kUQqRs/maU=)
2: M7Zai666T_YhSS6-5vweiK2yGwM.crl (hash: 4pJOne7TSEIMT/LHv/gpzHkYYFHHdvH+tY0rnmDvHlE=)
3: YCOxnrJZzRohN18jKfSDMAOgQUI.roa (hash: /PrVwAluwlwegI08mKBtFGWqwyRlaqAj4wNKvuzMcSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:f9:d3:1e:41:01:51:b5:06:f3:a9:2c:d5:93:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b65a8baeba4ff621492ebee6fc1e88adb21b03
Validity
Not Before: Sep 7 03:01:19 2025 GMT
Not After : Sep 8 03:01:19 2025 GMT
Subject: CN=1d48e355d2df1ec0b14c00a21ed646164bc118b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:70:28:a7:46:ff:c9:c5:06:10:8e:97:d3:bf:
44:01:fa:76:99:a5:65:5f:34:45:78:fe:c7:1f:9a:
a6:fe:5c:b8:a5:67:fc:73:61:1a:aa:99:75:6b:c4:
6e:86:87:a5:3d:66:38:a2:3a:ea:49:4f:f6:43:fe:
99:11:58:9e:04:5b:62:93:0d:64:ce:86:d6:5f:a4:
62:ec:ed:fa:5d:76:68:27:b6:3c:81:53:14:7a:52:
e9:6a:25:61:49:e1:76:e7:d8:e8:5a:83:b6:24:96:
bb:6a:29:1f:bc:3b:4c:a6:67:4b:05:6b:fd:98:de:
b3:a0:0e:43:94:49:93:b3:ee:7c:65:6c:c7:cf:b1:
b8:e8:18:6b:b5:13:b8:3d:47:7b:ed:2d:28:ee:2e:
96:72:7d:31:91:17:11:1d:96:8b:96:83:b0:84:14:
d3:66:0f:30:5f:35:35:ba:33:8b:4f:41:0d:53:fa:
de:2b:4b:f4:7a:29:d8:66:a0:d9:96:7d:7b:a8:f7:
20:02:6a:bb:e9:78:b4:88:27:df:9f:33:d1:5a:13:
83:85:1c:72:48:98:e9:3d:9a:fa:37:6f:a1:cb:be:
27:67:70:51:f5:f3:be:4e:44:b3:89:07:ac:e6:12:
83:30:33:16:cc:cc:af:28:78:59:c5:cd:ab:28:5d:
0b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:48:E3:55:D2:DF:1E:C0:B1:4C:00:A2:1E:D6:46:16:4B:C1:18:B5
X509v3 Authority Key Identifier:
keyid:33:B6:5A:8B:AE:BA:4F:F6:21:49:2E:BE:E6:FC:1E:88:AD:B2:1B:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c1:4e:22:2c:8c:bb:97:d3:bc:44:18:64:d4:30:53:b5:4f:
8c:bd:3b:86:18:e5:1a:b6:67:cd:a6:e9:de:06:9a:c6:42:d0:
17:99:bc:61:65:44:8b:f0:01:eb:6c:01:e0:5e:c1:a8:0f:a5:
1b:58:70:48:d7:dd:89:f6:d4:ac:35:7c:a7:4a:1f:28:23:94:
21:99:84:e9:4c:d9:c5:73:29:34:49:18:08:85:ae:af:56:f5:
fe:1c:dd:a5:d0:e2:53:44:20:c4:06:10:af:a6:db:f5:82:96:
af:e6:cf:d2:2b:14:d6:d3:4f:12:10:3c:29:5b:26:0a:47:ff:
ca:ce:0d:73:c1:d2:33:a9:eb:f8:a5:c5:c4:26:d3:76:24:9c:
7c:a3:1f:de:19:31:bc:b7:db:7a:55:dd:63:42:a0:70:12:6b:
28:e4:12:30:14:c5:17:11:ff:f3:8f:7e:fe:7f:da:0b:e4:29:
0c:c1:db:26:0e:28:5f:ce:c2:97:4b:3b:7e:a7:70:8f:1f:55:
b5:63:57:fa:69:60:96:1b:e1:e9:ee:f4:b4:f8:a1:20:cf:b1:
28:5c:f6:df:40:16:63:5e:74:3e:2c:ac:cd:85:61:87:6b:a4:
31:87:6a:f8:3e:cd:00:0a:09:97:a4:d9:4d:e2:5d:67:0d:e1:
70:38:9c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:28:06 2025 by rpki-client