Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft
File: Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft (raw, json)
Hash identifier: NFsGOHJ17rmVd3RdUhJ6wSQ49kBHYmnDN+glvlkNRPE=
Subject key identifier: FF:F6:7D:65:42:50:25:6A:FF:35:32:04:9A:36:37:7E:6C:D6:18:E9
Authority key identifier: 33:1E:77:84:F6:0A:C8:D9:69:B8:1C:F5:23:1C:D9:DC:08:7C:ED:32
Certificate issuer: /CN=331e7784f60ac8d969b81cf5231cd9dc087ced32
Certificate serial: 0197B933E908D7259FEF1888F7A6A52CE09C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft
Manifest number: 15BB
Signing time: Sun 29 Jun 2025 01:01:16 +0000
Manifest this update: Sun 29 Jun 2025 01:01:16 +0000
Manifest next update: Mon 30 Jun 2025 01:01:16 +0000
Files and hashes: 1: Mx53hPYKyNlpuBz1IxzZ3Ah87TI.crl (hash: kA6GC4Mpd4k857nmF3VoqKZA34SizV/sMxzuHcfQDtI=)
2: qzYfqleKMXziWfjI2OhKWSLGXWI.roa (hash: TK9bijwIRNWSf6A7SMNJb8WGXN3cTGP9yogtHb8815I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:e9:08:d7:25:9f:ef:18:88:f7:a6:a5:2c:e0:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331e7784f60ac8d969b81cf5231cd9dc087ced32
Validity
Not Before: Jun 29 01:01:16 2025 GMT
Not After : Jun 30 01:01:16 2025 GMT
Subject: CN=fff67d654250256aff3532049a36377e6cd618e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3c:82:0c:37:fb:ac:e6:d4:92:d3:e7:de:8a:
b5:71:df:1b:c9:e1:68:73:84:e7:6a:39:77:07:78:
18:98:83:2f:33:f9:57:51:6b:64:02:bd:f6:cc:77:
9c:25:0a:5d:7c:f2:56:a8:fd:f4:c2:21:e9:8d:8c:
a5:c6:04:fb:42:71:e3:47:04:7d:bb:e2:fa:34:d7:
98:18:70:a0:20:b0:aa:e6:fc:83:83:fe:a4:aa:2a:
3f:7d:93:16:dc:59:2c:c3:44:6a:c6:13:d4:d0:de:
a2:53:d1:e5:57:ff:1f:5a:7c:2f:68:46:51:62:31:
8b:88:fc:18:3e:4f:e7:69:95:87:01:58:3a:12:65:
bf:3d:74:49:d5:68:2b:77:0d:af:1b:c8:88:2a:e7:
09:92:57:ee:5c:ea:4f:a1:7d:af:6a:d4:8e:1b:25:
8e:d8:f8:57:cc:26:53:7a:03:bd:8f:17:00:d3:3d:
5d:90:96:6e:0e:b9:b3:20:f7:c3:ae:d9:a6:84:ad:
70:de:6b:0e:27:87:7b:37:2c:68:1f:b4:a5:a7:36:
75:d3:72:37:91:77:92:70:5b:7e:1b:b8:94:f5:14:
96:ed:1b:0c:79:c7:45:22:0d:28:a5:2e:4d:a5:96:
16:ef:20:cd:46:a8:eb:b8:24:a6:57:99:88:9d:0e:
2c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F6:7D:65:42:50:25:6A:FF:35:32:04:9A:36:37:7E:6C:D6:18:E9
X509v3 Authority Key Identifier:
keyid:33:1E:77:84:F6:0A:C8:D9:69:B8:1C:F5:23:1C:D9:DC:08:7C:ED:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a3:4f:2c:46:84:bc:92:30:0a:07:00:26:67:41:1e:42:ee:
14:ba:1b:c0:d6:1e:6c:a4:9e:60:ed:6a:bb:9d:5a:6e:49:b6:
a9:5e:ad:c8:46:45:aa:49:ec:51:03:90:07:28:1e:5a:b2:97:
21:55:9d:c8:c5:4d:c5:56:28:41:b3:24:e8:e1:d1:1c:78:5f:
52:a3:47:07:97:1e:73:8e:fe:0e:d1:fa:8b:72:83:ff:20:6b:
e1:63:05:94:b1:de:08:db:bf:1d:eb:46:db:1a:93:10:b8:c4:
1f:e1:b8:4a:89:87:77:64:9b:ed:8d:f4:c3:df:e0:e5:61:24:
ca:48:4c:61:95:1d:98:92:6f:f9:1a:b4:9f:96:4c:23:d5:1f:
19:6d:90:e3:a8:68:29:f4:8d:9e:fa:22:fe:ca:a4:8f:e6:2b:
fa:01:1a:2c:a1:42:98:3d:c0:d1:55:05:fa:11:a6:f9:51:aa:
ef:c0:71:6e:c1:1f:5e:35:85:bc:69:e7:5d:f4:e6:7d:f7:8f:
b3:a9:e7:96:cb:f5:70:87:a4:eb:4c:86:46:6d:23:7e:71:15:
91:90:99:b0:60:9b:2f:1b:ed:f4:8e:6d:bf:ad:11:37:b5:5a:
96:0a:8a:8a:c1:fe:bb:43:01:76:af:3b:9d:de:8a:3a:51:f5:
e2:88:da:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:33:04 2025 by rpki-client