Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
File: M7GzE5YIPOntUeRiiY4pTtghWuc.mft (raw, json)
Hash identifier: i/0bq56xCIrzo7tPy2U3JPhnl5xZF/bQQ9Edu8w4Vn0=
Subject key identifier: 8C:E3:F5:B6:0E:09:A2:0D:5A:3A:25:48:97:5C:A5:9E:20:AD:98:B3
Authority key identifier: 33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
Certificate issuer: /CN=33b1b31396083ce9ed51e462898e294ed8215ae7
Certificate serial: 01974967DE07B34340BC962D85DDD8E3FB24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
Manifest number: 081D
Signing time: Sat 07 Jun 2025 08:00:33 +0000
Manifest this update: Sat 07 Jun 2025 08:00:33 +0000
Manifest next update: Sun 08 Jun 2025 08:00:33 +0000
Files and hashes: 1: M7GzE5YIPOntUeRiiY4pTtghWuc.crl (hash: X6EXst8qW0d+rduJPLevZXTZksNRJ3huyNQHeHdK6gA=)
2: VQEhZHRI_51L-qPYAqsPHPNhngo.roa (hash: x+W3XCRbSsqe5EAx2dK2PnCFHJSGnsA8p+6YOIwEtcI=)
3: yZau-DwfbVfRH1H5nBnznu-Gh04.roa (hash: u7wjmjDpMKVCur/XQ8T5dAncaG/iDqX0/1UwHJhY4Us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:de:07:b3:43:40:bc:96:2d:85:dd:d8:e3:fb:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b1b31396083ce9ed51e462898e294ed8215ae7
Validity
Not Before: Jun 7 08:00:33 2025 GMT
Not After : Jun 8 08:00:33 2025 GMT
Subject: CN=8ce3f5b60e09a20d5a3a2548975ca59e20ad98b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9f:04:5e:b8:93:c7:41:c6:d8:d5:5d:f2:9e:
dc:51:f8:48:ab:a0:2e:9f:c3:8f:74:52:41:ea:ef:
af:af:60:29:b2:13:fe:c4:9d:c5:60:b8:6a:8b:8c:
d2:93:c9:6c:81:f0:21:46:d7:8d:82:c6:be:0c:1c:
e6:b3:f4:00:cc:c8:33:56:4f:b6:8e:85:a2:a1:80:
6c:12:0d:ff:3c:a2:60:3d:99:10:39:7a:17:1d:b8:
c7:40:66:46:c4:3a:55:00:87:df:32:21:2a:0d:6c:
de:f9:03:0d:38:09:b4:29:4f:d7:2c:09:4f:9d:32:
74:1f:b8:b9:05:26:41:1e:d0:9e:47:9d:cc:3c:8c:
74:a5:e0:42:c2:5f:75:39:7a:9d:cc:03:65:0e:03:
35:84:82:9f:bb:99:dc:cb:12:94:98:98:a5:38:25:
5f:dc:a1:71:3a:57:76:6a:10:86:ba:4b:cb:4c:c7:
ed:54:9e:7e:97:c0:cf:17:69:ad:af:c8:33:37:b6:
cb:0e:88:de:09:41:a5:af:b3:ba:ba:bf:7d:eb:fd:
8e:3d:81:c4:55:85:eb:90:71:2f:bb:a1:82:aa:ab:
31:fe:a2:c4:a4:65:49:64:1a:ff:66:9a:09:27:c5:
e7:5e:75:10:e1:f7:32:26:80:02:4c:2f:90:75:5b:
db:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E3:F5:B6:0E:09:A2:0D:5A:3A:25:48:97:5C:A5:9E:20:AD:98:B3
X509v3 Authority Key Identifier:
keyid:33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:68:d7:c1:eb:0c:0e:65:62:eb:11:98:38:52:43:2a:46:20:
a1:12:33:90:16:ab:c2:cf:bc:11:cd:13:5d:e8:4f:ac:9c:7a:
b3:fd:5a:90:2c:45:da:2c:4a:56:c7:ee:34:d3:c1:9d:66:f5:
1c:c3:df:0b:0d:4d:63:7b:34:5d:53:97:59:6c:2c:2d:b8:62:
9f:e1:32:68:ab:5c:5d:d4:d6:3f:70:44:4a:30:64:e5:75:78:
5c:e5:bb:68:a6:97:be:3f:38:ed:49:d4:b9:47:42:50:bd:18:
91:86:fe:38:1a:14:8b:76:eb:e7:d4:8e:31:a5:d7:51:85:23:
6e:3b:d6:bf:19:54:49:18:fc:d8:18:59:35:cf:87:73:f7:f8:
89:d5:02:8a:60:b9:75:d9:7b:c8:f8:9f:9c:75:60:7d:1c:d6:
06:84:6f:32:96:a8:38:ec:7e:68:87:a4:0e:6a:60:f3:a3:17:
05:34:24:dc:19:28:32:8e:f9:16:a6:a7:54:4a:5a:f6:16:31:
12:a4:a5:42:30:54:9a:0b:26:9f:3c:d8:f0:30:6d:15:82:21:
09:3e:eb:06:87:3e:0c:1b:d2:81:40:63:a8:84:7b:85:34:41:
ec:c5:81:b6:27:bf:d6:6a:f2:b5:4a:a7:94:49:e4:0b:4f:f2:
9a:f5:2b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:53:40 2025 by rpki-client