Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft
File: M1M9nu9agSjcQ10C8iMygDSNwrY.mft (raw, json)
Hash identifier: J8Ox5f0vjf9XBhRyO/t0bz7H4nRbVJ54Yf34CuxprYU=
Subject key identifier: 8F:46:48:8A:1D:3B:0B:15:9D:AE:2E:D0:BB:27:52:22:57:4F:5A:39
Authority key identifier: 33:53:3D:9E:EF:5A:81:28:DC:43:5D:02:F2:23:32:80:34:8D:C2:B6
Certificate issuer: /CN=33533d9eef5a8128dc435d02f2233280348dc2b6
Certificate serial: 0197B82133D12608E112D17D4C86F1EADE56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1M9nu9agSjcQ10C8iMygDSNwrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft
Manifest number: 1248
Signing time: Sat 28 Jun 2025 20:01:13 +0000
Manifest this update: Sat 28 Jun 2025 20:01:13 +0000
Manifest next update: Sun 29 Jun 2025 20:01:13 +0000
Files and hashes: 1: M1M9nu9agSjcQ10C8iMygDSNwrY.crl (hash: q+awpwlXOdmx8DZHolg6zAii+gU7cChJ5xNlGVpmrXw=)
2: w5RgxPZJeCHJ32aZdxHuHtsDhQo.roa (hash: Uc4RlDE0xm/vlOwUXxqVD6EiTzssOmMkcQ4YcA/6FLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/M1M9nu9agSjcQ10C8iMygDSNwrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:33:d1:26:08:e1:12:d1:7d:4c:86:f1:ea:de:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33533d9eef5a8128dc435d02f2233280348dc2b6
Validity
Not Before: Jun 28 20:01:13 2025 GMT
Not After : Jun 29 20:01:13 2025 GMT
Subject: CN=8f46488a1d3b0b159dae2ed0bb275222574f5a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:43:ac:5b:0f:9d:5e:2f:90:5d:a5:aa:64:16:
77:a9:b0:73:e4:a0:8b:0c:f4:b0:e1:dc:49:68:e8:
3a:07:96:2e:1e:f1:a7:30:b9:31:bf:fe:78:90:96:
90:7e:20:1e:86:b8:b9:e2:73:aa:21:c4:0a:aa:bd:
d4:e1:ea:70:11:be:af:71:89:93:21:6c:4b:16:d5:
dc:a8:3a:90:82:35:f7:77:ef:2e:4a:2c:7b:08:59:
97:54:e3:ba:ce:87:a2:31:2f:fe:83:83:b3:6a:f0:
5e:2c:10:b9:c2:a0:f5:b8:58:20:fb:bf:62:54:5c:
d6:cc:bd:c4:85:f2:47:70:53:c0:a6:ff:bc:e5:87:
35:6d:9c:ed:b7:8f:ef:9a:40:05:b7:d6:c1:d6:dd:
da:87:68:f2:26:84:8a:cc:bf:d4:50:b8:e9:c3:f8:
d6:93:2c:cb:fb:c7:be:c7:91:4f:64:78:d0:71:7a:
f7:5a:46:32:99:c5:50:78:28:c0:5d:12:7e:9f:2c:
1c:76:f0:d4:61:ce:32:44:6c:21:68:da:0e:11:89:
01:2a:7f:e2:40:f3:b6:9a:e2:8f:13:4b:01:d5:01:
b3:96:41:eb:dd:d9:15:c1:ef:94:9b:6a:ac:0d:2f:
5c:01:bb:8d:25:a3:4f:73:21:cf:3a:6b:68:58:35:
04:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:46:48:8A:1D:3B:0B:15:9D:AE:2E:D0:BB:27:52:22:57:4F:5A:39
X509v3 Authority Key Identifier:
keyid:33:53:3D:9E:EF:5A:81:28:DC:43:5D:02:F2:23:32:80:34:8D:C2:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1M9nu9agSjcQ10C8iMygDSNwrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:af:d0:8c:59:f6:19:eb:17:0d:83:44:2c:ef:9f:76:59:1f:
ce:7f:fa:c3:f8:96:1b:a5:f3:dd:c2:8d:76:85:fc:b7:19:8c:
75:18:17:7b:2b:c7:fa:16:6d:ca:42:96:e9:1d:41:32:e9:ca:
a9:04:69:7f:9a:8b:01:a8:2b:c4:cb:a5:16:8c:b8:14:a0:22:
05:71:ae:3b:cb:65:fc:60:37:fa:70:b3:63:e6:c2:99:f1:f2:
7f:cc:de:4c:b6:a0:92:76:81:a0:52:dc:89:ab:ed:5a:a4:55:
0f:fd:eb:b5:29:62:7c:58:6d:33:08:63:a9:1f:3d:4b:e5:62:
35:a3:4a:a6:3e:4d:0e:48:13:03:e3:42:1e:10:58:4d:6a:73:
2a:88:60:7f:a6:5d:e8:7f:fc:65:ae:ed:d1:9c:ee:53:c7:b3:
7a:56:48:10:c4:e4:e6:31:bf:1a:c4:a6:bb:7f:57:af:e6:88:
08:48:d0:12:c7:f1:7b:28:80:b5:5a:96:ea:ba:b4:65:33:a6:
c4:92:40:c3:02:cb:59:ae:5c:78:4e:04:c7:dc:44:72:7f:50:
3a:ea:21:a2:b5:48:d5:b2:6e:c1:e1:1f:7d:ec:50:c1:dc:6e:
ec:89:90:60:96:bd:ec:eb:b8:6d:11:98:9b:99:01:b1:ad:c0:
ba:40:d2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:08:10 2025 by rpki-client