Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier: NEnuD0/93/ILNpsqGOqxaAqadhhL4J2jY88Lu+53dA8=
Subject key identifier: 6C:F5:5F:C2:B8:47:43:C1:9C:18:EE:7C:A3:05:FC:98:7F:94:9B:7A
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial: 0198D4732ABB101BE2081F0D62CCD7829686
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number: 0623
Signing time: Sat 23 Aug 2025 01:02:54 +0000
Manifest this update: Sat 23 Aug 2025 01:02:54 +0000
Manifest next update: Sun 24 Aug 2025 01:02:54 +0000
Files and hashes: 1: KGg38ybeN3fvyEo89Wp9trP-DE4.roa (hash: o4s5h0G+Hrss7Tf1oF8r4jzhp+l0giYxBrA89MUtebs=)
2: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: 66YKHo9kGz1BB2T1Swox/Q4IbeqJ/z2/XnD3ZdzkY/c=)
3: P4Ok1kDh3dB-OfcpRjQxiOoay-8.roa (hash: KIn/EsS9ND9RtV2Bj6/EsO8jeh9wAaPztupLYU69+Mk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:2a:bb:10:1b:e2:08:1f:0d:62:cc:d7:82:96:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Validity
Not Before: Aug 23 01:02:54 2025 GMT
Not After : Aug 24 01:02:54 2025 GMT
Subject: CN=6cf55fc2b84743c19c18ee7ca305fc987f949b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4b:6b:66:89:5a:21:3a:99:14:d3:76:cd:ef:
2e:2a:a2:5b:c8:c3:8e:c2:73:55:d2:7e:1d:9c:37:
37:6b:5e:2e:aa:32:21:62:19:ff:05:1c:bd:0d:0b:
b0:d6:00:ec:d4:a3:75:96:d0:9d:b8:6f:de:43:39:
4b:bc:d0:f6:1b:aa:e2:bb:ca:2b:64:a7:fe:f6:f1:
cd:c8:09:e9:ae:f7:91:96:35:88:b4:6e:60:a9:93:
06:7e:f9:dc:dd:1c:49:21:a2:4c:41:f4:b8:fa:72:
73:ca:60:85:23:f2:eb:11:14:5b:43:88:b4:2b:80:
f3:3a:57:9d:3d:c0:90:bb:f5:2a:16:b5:df:98:58:
ff:c9:a3:8c:d8:d5:a8:12:1b:e8:01:d4:cc:ad:00:
1b:20:a7:8e:f6:ea:64:5f:ea:3c:2a:9e:71:7e:50:
35:2e:bc:b8:e8:02:6b:43:e4:ea:20:18:04:76:b9:
30:e4:29:c3:fc:30:05:77:7f:2d:03:79:93:52:da:
b0:45:5c:c3:4b:6a:5d:49:76:1e:30:57:54:b5:08:
7c:8d:4d:e0:2a:e5:3f:0d:6a:fc:b5:89:a9:13:e0:
b3:a4:3f:56:48:c5:48:fd:7c:12:39:a7:ad:8e:46:
71:25:63:24:f4:0d:39:db:f1:dc:22:86:67:90:0e:
f1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F5:5F:C2:B8:47:43:C1:9C:18:EE:7C:A3:05:FC:98:7F:94:9B:7A
X509v3 Authority Key Identifier:
keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:a3:30:1f:e9:be:5e:59:14:c5:2d:8d:8e:27:08:3b:a9:92:
6a:06:ea:34:19:ab:62:04:cf:88:0b:a7:fe:47:8b:39:e9:69:
73:04:bc:29:e5:98:0b:ca:06:53:55:bc:23:5b:82:1e:74:06:
08:23:40:d9:8d:67:4b:de:4f:35:a6:05:61:59:ec:79:e0:09:
ba:30:0c:12:c7:79:f2:62:76:49:a0:b9:c1:87:5e:06:01:d2:
94:b4:24:7b:fe:07:fe:4e:e9:cf:2c:08:2e:56:1e:12:a9:e3:
09:fb:e6:74:16:c7:10:79:7b:9b:19:1f:6c:bb:3c:b7:7c:e6:
f2:5d:70:5e:d2:29:37:41:c3:b4:cd:1e:c3:88:03:49:85:87:
96:b7:d0:47:34:6f:8c:ca:76:b1:b3:42:d8:b3:9e:4f:02:38:
59:27:71:ed:8e:06:82:c8:9b:46:b2:da:23:01:3e:06:ef:31:
ee:06:12:dc:d9:74:cc:08:7d:5d:13:08:95:24:28:90:a2:14:
78:58:d7:a1:ce:9f:23:a6:42:72:9a:1f:83:62:71:c2:0b:75:
5f:4c:5a:13:cc:dc:65:0b:1b:d8:95:5d:32:83:cf:98:1f:05:
7b:c1:85:d6:58:ae:1e:48:1d:5c:3a:dc:e9:63:b4:cc:ec:2a:
de:82:58:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:30:55 2025 by rpki-client