Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
File: M29qyC9vKOPT5bZkdVlNgxjnWrM.mft (raw, json)
Hash identifier: 3sot8AFdX5ZISIPDj8MJKvapbkkWyjTGtwOIISCKVjI=
Subject key identifier: E2:18:86:A3:E0:C5:C6:52:5C:9E:BE:EE:56:81:87:2D:5F:E6:72:E2
Authority key identifier: 33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3
Certificate issuer: /CN=336f6ac82f6f28e3d3e5b66475594d8318e75ab3
Certificate serial: 01975E38D62EF852EAC893DA0BE3947A1561
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
Manifest number: 0D43
Signing time: Wed 11 Jun 2025 09:01:12 +0000
Manifest this update: Wed 11 Jun 2025 09:01:12 +0000
Manifest next update: Thu 12 Jun 2025 09:01:12 +0000
Files and hashes: 1: M29qyC9vKOPT5bZkdVlNgxjnWrM.crl (hash: mMMrXqKU6SZPQ6PSvJnXCKqfYsv5sMD72rcg/yE03Fs=)
2: dEZ5raqBPXnkqzr9_S0vwZwMrcc.roa (hash: A8CtSs9BqkWswlRrqESpgq4uIozS5L7wmlKnC6IFKQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:38:d6:2e:f8:52:ea:c8:93:da:0b:e3:94:7a:15:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=336f6ac82f6f28e3d3e5b66475594d8318e75ab3
Validity
Not Before: Jun 11 09:01:12 2025 GMT
Not After : Jun 12 09:01:12 2025 GMT
Subject: CN=e21886a3e0c5c6525c9ebeee5681872d5fe672e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fc:26:67:f2:8c:a9:df:ad:32:11:9d:58:85:
5e:ee:d8:b5:6e:5b:3f:ef:26:5a:6b:cf:2d:f0:39:
2e:f5:dd:89:2b:d1:a8:30:1b:4f:12:d7:70:bc:fc:
f3:4a:f4:4a:36:42:a0:40:18:79:6c:5f:f4:9f:27:
99:58:24:7c:97:30:5d:6a:a4:1c:4b:d5:1c:be:a6:
31:4f:42:35:da:ba:30:7b:14:7f:ec:a8:05:cb:b6:
80:51:bf:5b:e6:1a:47:7e:41:ab:fd:48:28:f6:02:
e1:d2:60:8c:bb:2c:af:47:6e:2b:91:cd:0b:8b:aa:
b8:8e:69:71:cf:39:c2:6d:c8:02:02:6c:36:df:ab:
cc:e1:d9:85:80:0f:6c:cb:dd:29:27:08:e5:24:78:
a0:a1:0c:67:61:94:60:2c:b6:f4:1c:26:35:36:17:
a8:dc:0a:c9:7a:43:a2:96:a1:9d:53:c5:45:03:dd:
18:ac:24:49:5b:f3:b3:25:e6:08:be:19:8e:d6:1e:
dc:02:96:a7:dd:6b:13:bc:aa:1b:54:68:59:8a:2f:
42:01:aa:46:b3:83:c4:94:e7:80:b3:f3:04:c7:2b:
28:71:ef:ac:68:0c:1a:90:0a:e2:32:ae:3b:ee:6f:
ad:f3:f0:b1:b0:38:8c:74:d7:f7:99:1f:41:a5:dd:
3c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:18:86:A3:E0:C5:C6:52:5C:9E:BE:EE:56:81:87:2D:5F:E6:72:E2
X509v3 Authority Key Identifier:
keyid:33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:c7:5a:9a:59:66:a4:08:42:88:b7:ad:a0:ca:4a:94:44:92:
d2:20:b9:c8:63:92:f9:a4:33:7b:24:a0:c3:19:91:00:15:ec:
a1:0d:88:f0:dc:d8:9f:8f:60:3a:44:eb:93:77:07:da:a8:37:
b5:c9:bf:38:f2:07:02:82:98:c0:5e:fe:a5:a2:20:84:fe:c3:
b0:f9:1d:9f:96:53:e4:e9:ac:7b:76:d2:57:f6:67:77:05:fd:
e7:5c:31:72:e9:93:1d:f3:03:2e:61:3a:fb:19:17:11:42:04:
56:58:1e:2b:11:bf:9c:4c:24:ff:2c:2e:af:1c:5a:26:47:aa:
32:fa:6f:d4:85:ba:86:ed:37:5c:99:21:6c:0b:8f:7b:19:ca:
a1:b6:7b:56:4c:41:23:7f:95:6f:45:80:4c:88:d8:fa:a8:07:
d4:ee:b2:af:7f:d5:58:2f:ea:b4:c9:40:31:8c:44:a0:0b:ef:
30:80:6d:85:1f:03:39:04:4a:b2:25:55:04:e3:cc:3b:3b:e6:
7e:df:b0:35:4d:55:da:b1:b2:1f:5f:c0:b7:55:17:03:43:e5:
fc:fa:6a:ea:73:8c:20:53:71:ca:60:32:cb:eb:f4:7b:00:70:
5a:20:0b:6e:d3:1d:b2:4e:5e:71:ba:0c:98:35:48:a9:2e:41:
cd:c8:3d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 12:23:01 2025 by rpki-client