Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier: s6fRVigQ9x/UODFdA5Z2lsA+3S3F/0LTnINUEG1TM7g=
Subject key identifier: 10:F3:01:02:13:BB:56:CB:49:F3:F0:2F:90:6C:85:D0:6B:56:5C:03
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial: 0197B89006BC25B19AC0D958291C8B3CBD79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number: 0590
Signing time: Sat 28 Jun 2025 22:02:16 +0000
Manifest this update: Sat 28 Jun 2025 22:02:16 +0000
Manifest next update: Sun 29 Jun 2025 22:02:16 +0000
Files and hashes: 1: KGg38ybeN3fvyEo89Wp9trP-DE4.roa (hash: o4s5h0G+Hrss7Tf1oF8r4jzhp+l0giYxBrA89MUtebs=)
2: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: bBLnVzx7G/8Ze71+9WyHsA7iB7669DR7b2GEyeFJKQs=)
3: P4Ok1kDh3dB-OfcpRjQxiOoay-8.roa (hash: KIn/EsS9ND9RtV2Bj6/EsO8jeh9wAaPztupLYU69+Mk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:06:bc:25:b1:9a:c0:d9:58:29:1c:8b:3c:bd:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Validity
Not Before: Jun 28 22:02:16 2025 GMT
Not After : Jun 29 22:02:16 2025 GMT
Subject: CN=10f3010213bb56cb49f3f02f906c85d06b565c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:00:e4:4d:5c:ff:9f:72:ba:6c:b9:92:f1:26:
da:8f:1e:91:e3:4d:49:b3:6a:10:2b:45:07:df:d9:
c0:8f:8b:32:ab:d9:5c:96:51:c8:28:df:bd:d0:19:
87:39:73:1c:a3:c5:18:81:31:a5:71:f8:68:e2:05:
7b:88:55:9d:57:eb:ba:a9:ca:00:64:15:b7:5d:20:
26:fc:32:ce:04:ac:a1:23:a3:c1:db:41:52:ec:74:
e8:f6:d5:be:24:17:62:07:0f:d3:43:09:e9:52:45:
ef:6c:9a:24:4a:ec:47:cd:99:a1:64:42:bf:74:28:
8a:81:44:e6:45:6b:82:20:5b:b1:12:47:c1:a9:62:
db:65:9c:bb:9e:9c:ab:ed:0a:7b:3f:e2:9e:15:03:
d8:e6:00:09:49:87:d2:df:72:1a:2f:f6:fb:48:2a:
ce:0c:c2:f9:29:ab:e4:15:81:31:77:b7:05:04:dd:
4f:cf:d0:0a:86:b8:e9:5b:eb:3c:b2:9c:24:18:7d:
56:0b:0f:89:90:ac:e7:78:ba:33:b4:3b:61:7a:08:
9f:7d:68:26:ee:69:5a:63:b5:86:08:9a:7f:1b:b4:
09:3e:78:bf:e6:fb:01:5b:65:25:df:3d:e4:52:03:
f9:d1:46:27:56:c2:b8:90:b7:25:3c:1c:62:97:8f:
86:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F3:01:02:13:BB:56:CB:49:F3:F0:2F:90:6C:85:D0:6B:56:5C:03
X509v3 Authority Key Identifier:
keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:78:db:9e:59:a0:19:45:42:9d:6a:c4:34:be:5d:8b:51:f8:
0d:32:d1:ff:9f:4a:90:7d:04:16:ce:c8:e7:22:53:31:d2:9c:
7d:e5:c1:3c:f9:1f:1f:e1:13:8f:1d:87:fb:75:92:cc:67:10:
53:77:ce:5d:36:01:10:b7:da:41:58:92:e5:4d:49:00:ca:1c:
65:a8:88:32:bb:c1:e7:60:6e:eb:fc:94:02:a3:d8:84:b6:95:
fb:a2:2b:dc:ec:f0:1b:d7:2e:40:ed:48:82:5d:d1:a5:ed:5d:
4e:31:db:b7:bb:e1:ab:a6:35:8d:d7:86:05:3a:0a:8e:9f:48:
a0:0b:53:d0:d0:0b:0b:88:29:c0:b4:bb:35:db:30:3e:a0:ff:
f0:b4:54:10:7e:79:6e:20:47:b1:90:93:ec:4a:62:9d:da:f1:
44:83:26:19:23:0a:4d:fd:f9:39:6a:53:73:c2:90:80:3d:6d:
57:e7:5a:ac:2c:9d:9e:39:47:15:c1:d7:9a:b3:25:6e:32:0d:
75:b0:c7:e0:56:17:0b:2c:77:15:e3:61:17:cc:59:94:b4:8c:
5b:b3:57:05:f0:43:cb:5b:b1:1a:d9:79:86:10:18:7c:22:8c:
42:08:9f:b3:55:3b:f4:1c:bd:16:fd:59:a9:9c:f2:fb:a1:bb:
37:fa:f9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:30:04 2025 by rpki-client