Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
File: M8-_vy7M05OqMMIhNplluEcZLag.mft (raw, json)
Hash identifier: UKNYMclOkA1tC5PFd9rGpK9ALPGB+SDI9G0HYXJ6nv0=
Subject key identifier: 29:80:63:F1:12:7F:5B:6A:07:E7:80:16:14:6E:27:2E:B6:94:63:9A
Authority key identifier: 33:CF:BF:BF:2E:CC:D3:93:AA:30:C2:21:36:99:65:B8:47:19:2D:A8
Certificate issuer: /CN=33cfbfbf2eccd393aa30c221369965b847192da8
Certificate serial: 0197C8DDAE6E8B87E839D7913B2C9501177C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
Manifest number: 1137
Signing time: Wed 02 Jul 2025 02:01:00 +0000
Manifest this update: Wed 02 Jul 2025 02:01:00 +0000
Manifest next update: Thu 03 Jul 2025 02:01:00 +0000
Files and hashes: 1: M8-_vy7M05OqMMIhNplluEcZLag.crl (hash: gmeuvfhk8HhI4bM0rRWMztD5zScm46qXbBNjbVqypZM=)
2: MMfXFIBTN4EF53B-qz6xr0lTa60.roa (hash: PppBDUKwa5tmMVRDOOI/PKjma94X0CuRbdLOVWnm99g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:dd:ae:6e:8b:87:e8:39:d7:91:3b:2c:95:01:17:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33cfbfbf2eccd393aa30c221369965b847192da8
Validity
Not Before: Jul 2 02:01:00 2025 GMT
Not After : Jul 3 02:01:00 2025 GMT
Subject: CN=298063f1127f5b6a07e78016146e272eb694639a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8c:76:f5:1d:d4:8d:6b:1f:3a:c4:0b:fc:14:
10:17:4e:5b:e2:46:44:d1:4b:91:00:f2:ec:24:d4:
b7:95:7c:13:66:b5:81:90:a1:a1:27:26:a7:29:02:
b2:11:c3:92:f0:99:29:22:94:3a:54:a3:8c:00:5a:
2c:14:34:79:b1:bd:f5:25:2a:d6:e9:8b:18:73:bc:
1f:48:bd:83:a9:1b:59:58:66:76:b3:05:c3:f5:f5:
df:01:8c:b6:d5:53:b9:db:7f:4c:89:1c:5a:ba:8e:
46:59:c6:9e:ce:65:1f:eb:49:be:12:3c:aa:aa:59:
c6:ab:ec:d2:4d:39:bf:4f:a0:58:c2:fa:60:85:58:
b3:78:34:a8:67:4c:09:46:cd:56:10:06:4e:f8:67:
df:9c:53:81:4b:46:a8:f1:e6:b1:d1:23:b1:2e:3b:
ae:91:d8:ab:74:00:93:41:cc:f5:6a:82:4a:4b:2b:
0c:b8:a8:b9:af:e9:2a:e1:8a:93:58:2f:9d:3a:95:
85:fe:a2:5d:72:2a:dc:9b:3c:76:2c:1e:3d:36:9b:
e9:b3:b2:8e:05:13:27:b2:de:72:b0:0c:a6:77:84:
0f:6d:10:88:d9:42:8c:1a:89:0c:6b:65:f4:f6:16:
89:47:29:e5:b8:54:94:f1:59:6a:89:df:0f:1e:a0:
48:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:80:63:F1:12:7F:5B:6A:07:E7:80:16:14:6E:27:2E:B6:94:63:9A
X509v3 Authority Key Identifier:
keyid:33:CF:BF:BF:2E:CC:D3:93:AA:30:C2:21:36:99:65:B8:47:19:2D:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:bf:f3:7f:c0:0f:7d:18:ae:e1:39:c9:46:e5:1a:c0:73:0e:
4a:39:89:e9:cd:41:53:b6:c2:26:ea:2b:0d:0c:90:71:ad:c5:
e0:ea:f7:7b:85:44:65:e2:15:f4:87:fa:7f:99:ea:67:d5:19:
96:94:90:7e:4b:7a:f1:42:fa:ce:25:d8:22:47:ee:28:59:8d:
33:db:9a:64:98:13:e1:64:c7:98:d9:d8:72:79:cd:25:52:78:
79:73:57:12:2e:0d:42:84:dd:7e:c1:e3:da:c7:86:9d:60:c4:
18:51:81:6b:58:c6:fd:69:55:f6:60:d0:7e:1d:37:79:ea:f1:
fc:f8:54:46:45:1e:0a:0f:84:c0:1b:b0:81:d8:f7:f8:cc:6a:
4c:87:3a:b1:b7:34:69:46:e3:a2:86:3c:24:48:29:e2:49:8e:
a5:74:7b:0d:c8:4c:c7:d8:86:61:07:3a:24:5f:21:5d:6a:fa:
04:2b:dd:45:8a:6e:9e:f6:0e:2c:3e:0a:a3:a1:cc:3e:0a:b5:
6e:90:c1:57:f4:5d:ad:0f:f3:39:af:7e:b6:67:31:b1:f6:54:
a2:e0:1e:6f:29:7f:43:97:e4:1b:28:d0:75:91:a6:4a:cb:c9:
f8:da:66:84:cf:53:78:d1:98:85:65:d4:1b:f1:30:fb:a2:36:
cc:78:6f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 10:50:49 2025 by rpki-client