Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.mft
File: 57M-njyTL3pULrAhBWzpSx6Ljws.mft (raw, json)
Hash identifier: QurqBbnaEUPXGm5Xt3Wg/63xa2SClSAy6nm5mT0+/iw=
Subject key identifier: 8D:4D:AE:20:0F:90:65:CE:23:C6:93:08:00:42:73:97:99:55:89:F8
Authority key identifier: E7:B3:3E:9E:3C:93:2F:7A:54:2E:B0:21:05:6C:E9:4B:1E:8B:8F:0B
Certificate issuer: /CN=e7b33e9e3c932f7a542eb021056ce94b1e8b8f0b
Certificate serial: 0198D7E10ACFF7C00058A0FCB79AE64245AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/57M-njyTL3pULrAhBWzpSx6Ljws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 17:01:46 +0000
Manifest this update: Sat 23 Aug 2025 17:01:46 +0000
Manifest next update: Sun 24 Aug 2025 17:01:46 +0000
Files and hashes: 1: 57M-njyTL3pULrAhBWzpSx6Ljws.crl (hash: 0O82aL75NKqb/fP4wrPWq9zQLj/c2K9nC8nGAe5Zsl4=)
2: 6Zhe4pOz-rb9TWMRRFPsmtYyKog.roa (hash: kI1Y/0VuhQsjj4DLuvZCMsfABY7cci9OBnCvkDAkun8=)
3: bSnWHcd-6ITx2i-OmG1T8hYUFBQ.roa (hash: 6T/s2wCU61VJFzvpy751/OsAnKk42N0ClHJAb6F+ja8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.mft
rsync://rpki.ripe.net/repository/DEFAULT/57M-njyTL3pULrAhBWzpSx6Ljws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:0a:cf:f7:c0:00:58:a0:fc:b7:9a:e6:42:45:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b33e9e3c932f7a542eb021056ce94b1e8b8f0b
Validity
Not Before: Aug 23 17:01:46 2025 GMT
Not After : Aug 24 17:01:46 2025 GMT
Subject: CN=8d4dae200f9065ce23c6930800427397995589f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:19:60:70:f5:7e:ee:22:a5:cc:90:a3:6e:70:
9b:b0:98:86:16:04:8e:f2:e7:6e:36:0d:e6:f3:e1:
0d:ec:e4:6e:8d:e0:ba:90:da:d1:3b:2e:db:f6:4f:
1f:62:54:16:4b:63:2a:3c:52:ca:e4:f2:65:9a:2b:
3d:e5:c4:e1:b0:b7:59:cd:b9:b2:71:77:89:f0:65:
75:36:c7:66:11:46:3d:a1:d2:52:d2:20:d0:89:12:
3b:97:37:6b:58:cf:5c:f8:3d:93:5a:42:d1:7f:75:
b7:df:90:6f:a7:07:da:63:0e:0e:22:3e:7e:a9:25:
e2:9e:57:f7:e7:f4:71:38:ef:57:37:a0:81:48:a5:
98:36:07:fa:bb:69:18:de:5e:f1:d5:27:c1:83:b1:
de:ee:3a:4a:9a:8a:0f:7e:af:c8:f3:cf:05:33:b6:
a2:ee:29:15:72:06:76:1a:a6:7e:11:b3:d7:13:b3:
a8:cc:56:4d:38:db:f7:c6:a6:c2:58:0a:d5:b3:5c:
8f:2a:e6:ee:64:6c:a4:90:dc:58:99:00:0f:ce:ed:
2a:cc:77:a3:f3:fe:6c:ee:ce:cc:d1:2d:4e:c0:c2:
72:13:ab:28:7d:53:a2:9f:6f:35:f2:57:4b:cc:a0:
73:20:65:ad:86:89:ac:68:dc:67:80:76:9a:4c:ad:
84:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4D:AE:20:0F:90:65:CE:23:C6:93:08:00:42:73:97:99:55:89:F8
X509v3 Authority Key Identifier:
keyid:E7:B3:3E:9E:3C:93:2F:7A:54:2E:B0:21:05:6C:E9:4B:1E:8B:8F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/57M-njyTL3pULrAhBWzpSx6Ljws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:da:bb:68:77:1a:b1:b5:e5:fd:ca:1b:81:8c:0a:c7:af:7c:
5e:93:c9:72:98:70:c5:87:5c:df:85:ca:2d:ec:bd:07:e3:eb:
16:52:90:b7:e4:2e:1a:35:52:db:6e:6b:3c:5b:ac:d8:83:ad:
6f:e8:5d:27:37:b6:e9:30:75:ed:a9:7f:19:b5:3e:ba:35:7e:
24:f2:26:84:35:c7:92:25:d1:21:4c:4a:be:a3:84:63:d4:62:
fb:e8:1f:52:cd:42:5e:cf:60:7b:f2:3c:26:99:0b:9e:94:14:
8e:03:8b:40:f4:08:4c:71:03:ce:53:90:4b:dc:3b:b4:9e:00:
77:2d:02:35:34:21:66:7f:27:ad:b9:55:29:3e:61:41:18:35:
c4:64:c5:b5:e4:1a:69:88:b8:2f:34:ba:d0:44:f4:1b:f7:5f:
0d:26:27:74:21:19:44:dd:3c:23:9b:be:bd:c0:ea:2f:45:1c:
8a:d1:68:64:05:54:52:75:23:90:ce:a6:8a:14:66:96:5d:1e:
20:57:3e:34:79:7f:a9:fe:66:ec:76:b8:80:e0:7d:3e:1c:a8:
8f:28:c4:ba:93:c4:be:ce:4e:a3:2c:ad:7e:84:84:87:67:53:
09:ad:f8:0f:48:b0:34:bc:ad:fb:e2:ce:f9:44:c0:b5:a1:dd:
05:c1:b5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:50:22 2025 by rpki-client