Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft
File: M7psC8yhbGhdx7myfxmbQrS-7uk.mft (raw, json)
Hash identifier: FEH7G9lnzjEjYIzI/rgStaj3EdIehvKw/EXNBmPzHqs=
Subject key identifier: 67:AE:4E:4F:E0:72:97:24:77:1A:DC:2B:B9:19:07:1C:7E:E5:CE:3F
Authority key identifier: 33:BA:6C:0B:CC:A1:6C:68:5D:C7:B9:B2:7F:19:9B:42:B4:BE:EE:E9
Certificate issuer: /CN=33ba6c0bcca16c685dc7b9b27f199b42b4beeee9
Certificate serial: 0198D5F1570368E61809887871C2466BDC3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7psC8yhbGhdx7myfxmbQrS-7uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft
Manifest number: 0DA7
Signing time: Sat 23 Aug 2025 08:00:20 +0000
Manifest this update: Sat 23 Aug 2025 08:00:20 +0000
Manifest next update: Sun 24 Aug 2025 08:00:20 +0000
Files and hashes: 1: M7psC8yhbGhdx7myfxmbQrS-7uk.crl (hash: Y0p3cNPNd9niLjGP+RqPnn8bhH//x2Awj3ZmlKFPZWY=)
2: YsLZoqZw6u24llC00PtDDR7Qp3Q.roa (hash: xyGbGlbgzc0VPKZXK9Mhkv3PJ7Wng5W2DCI8eLTmYC0=)
3: kPhGzXODbRD6DaiKt_1D_SiuRQ8.roa (hash: 9eEDMcEOBSRwouzuH08DzSkvaYWRY3j//V52rGTuy7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7psC8yhbGhdx7myfxmbQrS-7uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:57:03:68:e6:18:09:88:78:71:c2:46:6b:dc:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33ba6c0bcca16c685dc7b9b27f199b42b4beeee9
Validity
Not Before: Aug 23 08:00:20 2025 GMT
Not After : Aug 24 08:00:20 2025 GMT
Subject: CN=67ae4e4fe0729724771adc2bb919071c7ee5ce3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b5:d6:66:45:3f:12:c2:2e:7e:6e:da:c7:08:
d8:91:6d:84:98:58:6d:d1:e4:78:6a:ef:b7:c5:d5:
b1:5b:00:e4:55:db:71:6c:25:a7:dd:2e:cc:34:36:
b2:88:91:f7:36:48:7f:24:3d:5d:fd:5e:79:6a:c6:
1f:5f:75:4e:b5:65:3a:e0:4d:c4:90:5a:28:7e:af:
a4:30:36:48:c7:cd:a4:15:1b:db:3d:06:52:d3:9d:
e5:e3:3e:ad:7f:d5:de:46:0f:ca:da:9b:3e:c9:f1:
f5:e0:b6:c7:ce:7a:43:2b:03:8c:f5:81:7b:28:30:
c2:a5:b9:a4:e6:bf:a0:fb:0c:cf:ce:65:55:6d:a1:
05:85:8b:2d:d9:ad:2b:d9:15:0c:3c:92:2d:68:6b:
1b:2d:c4:ad:88:11:3e:d3:dc:32:fd:d8:6a:94:20:
de:0c:fb:f3:d2:08:f4:42:5d:0b:62:02:ba:aa:a6:
fb:51:da:af:34:6d:fd:d4:30:8e:0b:ee:3a:e3:88:
14:89:d7:73:1a:81:db:cd:89:a3:89:32:87:07:d8:
5b:3d:ca:4e:79:97:be:8d:d9:f1:3b:b6:0d:7e:05:
fd:67:62:22:1f:45:d6:7b:2a:41:a7:fe:2c:56:6b:
9f:18:04:e8:3a:3e:d7:39:f3:45:16:23:57:3f:de:
45:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:AE:4E:4F:E0:72:97:24:77:1A:DC:2B:B9:19:07:1C:7E:E5:CE:3F
X509v3 Authority Key Identifier:
keyid:33:BA:6C:0B:CC:A1:6C:68:5D:C7:B9:B2:7F:19:9B:42:B4:BE:EE:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7psC8yhbGhdx7myfxmbQrS-7uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:d9:5c:cf:0f:71:5c:ec:64:2d:3c:1e:51:3b:ed:1f:23:39:
ad:4e:55:03:c5:43:a0:05:c1:f7:a2:73:e8:a0:07:dc:05:35:
52:e2:ad:67:5a:cd:da:2e:a0:dd:11:de:b1:73:ea:d7:12:17:
fe:81:97:c6:4c:0f:4f:f9:b6:49:af:25:3b:ce:96:30:5e:49:
0b:c6:00:d4:27:98:97:3a:a2:69:96:f3:93:14:e2:72:df:8a:
a8:29:0a:09:8c:56:2a:75:8d:ac:73:27:2b:47:a9:45:c9:e0:
59:70:35:11:2d:44:cd:a1:fb:17:9d:96:eb:d1:63:9c:d1:20:
02:54:73:93:de:3d:db:3f:3d:ec:e1:3e:95:49:6e:c8:fd:a2:
4a:22:3d:96:01:1d:3b:ef:bb:4f:d2:c3:c6:34:df:0d:c7:61:
ca:b9:69:7f:56:cd:cc:e8:99:e9:af:6d:c8:7e:9e:26:22:74:
84:80:c1:83:57:ee:8d:0a:1b:8e:e3:5d:3e:53:76:3b:1c:94:
25:71:57:11:42:52:69:f5:4b:88:7f:e0:b6:52:a6:d2:0b:d5:
bb:36:a3:b9:d0:24:da:f8:92:47:1b:1a:e9:14:3b:15:c3:57:
7e:b5:4a:90:c9:06:6d:60:67:29:10:3a:7c:3e:e5:5e:6f:4f:
36:a9:3b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:45:44 2025 by rpki-client