Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.mft
File: Mss8BdaixRwv9S3Z3LnitVxASPk.mft (raw, json)
Hash identifier: VH3rkgcPaohWmXLJ9sqCu4BRaOze7qpMFtE9hbcdF3Y=
Subject key identifier: A1:2B:9F:14:EE:5B:57:20:BB:EA:5E:90:D7:E5:F6:33:89:B9:04:4B
Authority key identifier: 32:CB:3C:05:D6:A2:C5:1C:2F:F5:2D:D9:DC:B9:E2:B5:5C:40:48:F9
Certificate issuer: /CN=32cb3c05d6a2c51c2ff52dd9dcb9e2b55c4048f9
Certificate serial: 0197B70EC8F8B5F3229315E5E3FB64D1C649
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mss8BdaixRwv9S3Z3LnitVxASPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 15:01:28 +0000
Manifest this update: Sat 28 Jun 2025 15:01:28 +0000
Manifest next update: Sun 29 Jun 2025 15:01:28 +0000
Files and hashes: 1: Mss8BdaixRwv9S3Z3LnitVxASPk.crl (hash: oeuaV/3Mt21i/fZNxXsaMmxoqobi0QyQ2cd273eaGwQ=)
2: pkl1dG1Tn-y8sIzafCzQdaxLGO0.roa (hash: +t+HSalevZKgrBOwo+A1WYwHvxUsDh9dx8CrhAZYnCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mss8BdaixRwv9S3Z3LnitVxASPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:c8:f8:b5:f3:22:93:15:e5:e3:fb:64:d1:c6:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32cb3c05d6a2c51c2ff52dd9dcb9e2b55c4048f9
Validity
Not Before: Jun 28 15:01:28 2025 GMT
Not After : Jun 29 15:01:28 2025 GMT
Subject: CN=a12b9f14ee5b5720bbea5e90d7e5f63389b9044b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:08:c9:b6:df:74:6c:3e:01:4d:6e:1a:cd:6e:
a4:89:46:ca:bd:65:66:48:0b:47:64:63:ef:4f:d3:
ce:9f:07:31:ff:24:27:3e:56:cb:54:54:83:df:ab:
dc:df:b1:64:15:8d:c9:4a:97:43:5f:e6:63:8a:01:
f4:81:50:4d:8c:89:99:5a:ce:27:e0:d9:b8:7c:a3:
b0:6e:14:97:f8:ea:37:8d:0f:e6:48:8b:1d:d1:e3:
22:59:31:6e:86:d4:1a:b6:e0:28:06:44:eb:83:1c:
f1:13:b0:26:82:bf:6c:e5:9a:8e:d9:d5:b0:1d:c6:
6b:1d:3e:c8:21:ad:6b:9c:0c:28:d1:83:45:e3:f5:
aa:7f:1d:d2:a8:4a:2d:8c:5d:df:55:3a:61:2a:4c:
04:67:e7:fb:70:c2:a9:70:e5:a6:e0:5b:9e:78:45:
58:8c:43:17:df:e5:c5:76:91:e6:19:bf:a1:a4:8a:
71:bc:e9:e4:72:c2:9f:f0:4d:0a:64:5c:ee:98:ba:
e4:6b:4d:80:07:21:56:0d:ae:e6:38:a7:ff:16:98:
7b:11:3d:65:ae:56:4f:9a:28:92:9d:71:75:6d:af:
ba:23:3e:96:a9:d3:57:32:3e:0c:2a:d7:ef:73:e5:
2a:a9:f1:af:09:a7:96:e8:28:73:b6:95:c5:b8:fa:
54:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:2B:9F:14:EE:5B:57:20:BB:EA:5E:90:D7:E5:F6:33:89:B9:04:4B
X509v3 Authority Key Identifier:
keyid:32:CB:3C:05:D6:A2:C5:1C:2F:F5:2D:D9:DC:B9:E2:B5:5C:40:48:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mss8BdaixRwv9S3Z3LnitVxASPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:1e:43:73:de:ba:a5:9d:6b:0a:ee:f4:62:83:81:cf:b1:40:
f9:c6:bf:1e:0c:5c:c4:4f:c4:34:ab:fb:7d:88:46:04:08:99:
f4:74:4b:32:a5:d4:b2:88:dd:f2:51:7e:93:bc:98:31:02:9a:
00:fd:d0:9a:87:db:a0:ca:c8:72:a5:62:28:19:18:e9:3e:9b:
98:10:f7:6a:3e:54:28:6d:98:0e:74:de:9b:ff:99:df:ff:2d:
cb:7c:9b:ed:a5:a2:28:bb:40:4c:e9:89:fc:8d:b5:8a:59:18:
fa:4a:58:6c:65:d0:8a:67:9d:4f:3f:6f:e2:4d:e7:dd:10:05:
40:19:ff:99:6d:da:a2:49:e1:85:ce:02:57:46:8d:fb:6d:72:
39:80:fc:7d:43:1d:a6:b9:2f:08:87:64:ca:92:4b:9e:a4:2f:
84:32:e3:66:54:51:2a:4c:d9:87:47:d9:2c:78:13:c3:fc:66:
f3:46:91:cd:c1:82:c2:94:01:46:dc:b4:a8:01:d8:6d:24:ce:
3f:e8:ad:75:b6:5f:0c:76:66:fd:58:1d:e5:01:21:b4:57:0c:
aa:ac:28:e9:c6:5d:be:90:97:86:64:03:d5:4f:81:2f:f7:97:
86:9e:17:1b:88:01:59:0d:f5:52:b5:dc:c6:04:20:25:94:2f:
69:77:53:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:23:36 2025 by rpki-client