
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.mft
File: M4YMg3IhmQcJz1rqKduBaJU-feA.mft (raw, json)
Hash identifier: JqVViWduL6aDeW6xdd19VEoWPLCyx9C5yrQ7idiWhrE=
Subject key identifier: 31:1D:6A:01:89:76:F6:A9:58:8F:E7:BC:89:28:EE:FB:88:54:FF:4C
Authority key identifier: 33:86:0C:83:72:21:99:07:09:CF:5A:EA:29:DB:81:68:95:3E:7D:E0
Certificate issuer: /CN=33860c837221990709cf5aea29db8168953e7de0
Certificate serial: 0198D6CD1A73863099497F6ABB45874A2162
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4YMg3IhmQcJz1rqKduBaJU-feA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.mft
Manifest number: 0781
Signing time: Sat 23 Aug 2025 12:00:22 +0000
Manifest this update: Sat 23 Aug 2025 12:00:22 +0000
Manifest next update: Sun 24 Aug 2025 12:00:22 +0000
Files and hashes: 1: M4YMg3IhmQcJz1rqKduBaJU-feA.crl (hash: Ijvv1rePkoFi5dS+MHvvh/Du3ec+AwXH3LAPab2Sl/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.mft
rsync://rpki.ripe.net/repository/DEFAULT/M4YMg3IhmQcJz1rqKduBaJU-feA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:1a:73:86:30:99:49:7f:6a:bb:45:87:4a:21:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33860c837221990709cf5aea29db8168953e7de0
Validity
Not Before: Aug 23 12:00:22 2025 GMT
Not After : Aug 24 12:00:22 2025 GMT
Subject: CN=311d6a018976f6a9588fe7bc8928eefb8854ff4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d4:37:3a:19:42:99:92:40:62:d6:53:a0:a9:
47:55:cf:8f:da:c3:05:e4:76:94:01:55:c0:80:ad:
69:da:48:f5:d0:cf:67:5f:2c:6f:95:e9:90:1d:3b:
3c:c5:11:87:7a:7a:a7:08:da:8e:2d:9f:1b:8c:3d:
45:fe:8f:21:02:84:d6:33:31:cb:ed:85:2c:e4:7e:
27:06:e6:a3:b8:0e:b1:f2:01:23:c1:6f:c1:d1:ab:
5a:da:02:6b:72:12:1c:38:0d:8d:af:c0:5e:e7:80:
12:50:57:38:a8:88:bb:5e:12:6e:e9:79:2b:a3:65:
b0:29:81:61:55:35:d3:25:c0:fd:0a:e2:a9:7f:32:
6e:d5:e0:cd:8f:1b:e2:8d:45:bd:29:a9:19:79:27:
c4:a1:56:17:b1:f5:8b:1c:1c:c0:bb:5e:e2:9d:9c:
57:c5:05:f3:2a:51:39:fb:36:13:d9:79:1c:a1:68:
58:1d:8e:02:b1:51:7d:76:a5:ce:a3:8b:ce:13:58:
cc:1f:81:60:37:ab:e9:f9:9c:f9:8f:30:0c:df:3d:
18:4f:0d:da:a7:c8:19:3c:43:d8:2b:71:ec:eb:42:
cd:25:59:57:d4:13:38:12:74:71:e1:56:ad:1c:20:
8e:b4:78:f5:f3:ab:29:bd:2e:7d:e2:08:6e:eb:d1:
2b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:1D:6A:01:89:76:F6:A9:58:8F:E7:BC:89:28:EE:FB:88:54:FF:4C
X509v3 Authority Key Identifier:
keyid:33:86:0C:83:72:21:99:07:09:CF:5A:EA:29:DB:81:68:95:3E:7D:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4YMg3IhmQcJz1rqKduBaJU-feA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:e2:c8:29:3f:95:f2:88:ad:3c:49:07:13:46:11:34:05:72:
f3:38:c0:ee:c8:7a:67:94:f5:5d:48:90:d3:ed:61:ef:08:18:
73:b8:7b:22:7a:3d:78:21:74:25:41:95:f5:fe:84:5c:2a:ac:
bb:0e:b8:52:c2:06:85:d4:d0:f8:d4:88:af:b4:4b:7e:b9:20:
bb:1f:d8:0a:15:31:5a:10:e2:1e:ba:f0:56:fe:f2:9f:a1:52:
e7:94:f1:ce:a1:b6:a9:e6:a9:b0:05:de:89:57:0c:5f:83:3a:
48:e1:3b:3c:43:ca:e1:ba:11:d4:ec:46:87:af:c4:44:bd:20:
58:97:5f:69:a8:09:5c:b7:73:25:cc:aa:29:6a:ba:5d:d6:e2:
9b:4d:6d:b6:e7:32:a4:fc:18:46:eb:1a:4e:82:5b:87:61:3a:
62:5d:42:c5:e6:14:23:53:e3:fe:2d:85:64:26:d0:b5:87:6a:
ba:d1:6a:56:97:d6:31:36:85:84:2b:35:3a:95:99:de:6b:79:
83:e7:ac:38:e7:e4:83:72:15:fa:94:47:96:b0:27:74:c3:fd:
95:3a:16:74:69:42:a8:c1:e7:7b:61:66:f4:ec:3f:5e:41:63:
ff:70:1e:9e:c7:83:77:d9:e5:af:d1:c8:35:c5:51:ea:b1:4c:
28:df:e4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:25:49 2025 by rpki-client