Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft
File: M7psC8yhbGhdx7myfxmbQrS-7uk.mft (raw, json)
Hash identifier: TFcYcCGtva2emjR5HrAStXs9eGKLJMlC31KGE4z1Kh8=
Subject key identifier: 6A:3B:2B:2A:FF:1F:05:24:EC:87:81:B4:B7:34:2A:FC:7C:7F:AA:48
Authority key identifier: 33:BA:6C:0B:CC:A1:6C:68:5D:C7:B9:B2:7F:19:9B:42:B4:BE:EE:E9
Certificate issuer: /CN=33ba6c0bcca16c685dc7b9b27f199b42b4beeee9
Certificate serial: 0197B821031829C1C10B1C6A0E5EF521AA20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7psC8yhbGhdx7myfxmbQrS-7uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft
Manifest number: 0D13
Signing time: Sat 28 Jun 2025 20:01:00 +0000
Manifest this update: Sat 28 Jun 2025 20:01:00 +0000
Manifest next update: Sun 29 Jun 2025 20:01:00 +0000
Files and hashes: 1: M7psC8yhbGhdx7myfxmbQrS-7uk.crl (hash: IidVjvU2czf/EciOwsQtJqy25KK51Okyh5/NlqkxU2o=)
2: YsLZoqZw6u24llC00PtDDR7Qp3Q.roa (hash: xyGbGlbgzc0VPKZXK9Mhkv3PJ7Wng5W2DCI8eLTmYC0=)
3: kPhGzXODbRD6DaiKt_1D_SiuRQ8.roa (hash: 9eEDMcEOBSRwouzuH08DzSkvaYWRY3j//V52rGTuy7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7psC8yhbGhdx7myfxmbQrS-7uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:03:18:29:c1:c1:0b:1c:6a:0e:5e:f5:21:aa:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33ba6c0bcca16c685dc7b9b27f199b42b4beeee9
Validity
Not Before: Jun 28 20:01:00 2025 GMT
Not After : Jun 29 20:01:00 2025 GMT
Subject: CN=6a3b2b2aff1f0524ec8781b4b7342afc7c7faa48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c8:f6:7e:17:5b:30:ec:28:b4:af:b4:43:c6:
7f:01:d4:9b:12:d3:09:af:e9:d3:12:e5:a4:ae:26:
74:4b:94:7b:9f:06:23:a9:c5:b5:3c:25:33:fc:cb:
88:88:bb:a8:e3:b7:7e:d7:2a:cf:53:bb:6b:66:b3:
6f:76:a1:dc:83:ae:f8:1c:6b:c8:56:2e:b0:c0:9e:
a3:12:05:f9:7f:df:df:7a:8f:40:72:46:e6:a4:32:
75:b9:01:b3:05:ea:6e:54:f0:47:f4:6c:99:d3:c9:
07:44:8d:50:ba:c9:78:71:9a:3b:27:93:19:61:62:
c5:b1:05:73:e0:b2:7e:7b:f1:2f:dc:9a:fe:4e:a0:
47:01:4b:71:fe:ec:f2:55:b1:79:b1:4a:dc:0a:e4:
d3:26:eb:ff:79:1c:0b:05:b3:36:73:c0:3a:5d:bf:
1c:f2:aa:1b:08:c7:85:30:c2:dc:a9:33:32:61:17:
40:c0:a1:8b:0c:76:8f:28:78:a3:3d:e4:6b:66:53:
d7:02:c0:ed:9a:46:c7:8e:7b:db:75:f5:4b:49:6b:
de:ab:e8:67:0d:18:d5:62:52:06:b3:fa:51:e4:db:
95:66:38:8f:72:26:8c:fd:e4:46:4e:12:ef:30:19:
1a:4e:f1:e4:4e:9e:cd:57:96:8d:66:db:0e:4e:c0:
c3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:3B:2B:2A:FF:1F:05:24:EC:87:81:B4:B7:34:2A:FC:7C:7F:AA:48
X509v3 Authority Key Identifier:
keyid:33:BA:6C:0B:CC:A1:6C:68:5D:C7:B9:B2:7F:19:9B:42:B4:BE:EE:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7psC8yhbGhdx7myfxmbQrS-7uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:63:d2:35:1d:a9:95:48:75:8f:61:5d:50:d0:8a:67:49:fe:
24:17:8b:be:56:8e:6b:5d:27:c5:6d:eb:66:39:12:51:64:3f:
a2:b4:10:fb:49:b9:a0:e4:29:ed:68:a4:5f:4f:ca:21:de:eb:
ea:bd:6f:a0:3b:60:c6:2c:5d:2a:b9:fb:e3:d2:78:50:6a:ae:
3a:d3:cd:eb:b7:e3:b0:f9:b5:8c:f3:0c:b2:d0:15:61:00:a7:
0d:1f:96:49:7b:02:83:d1:c2:42:76:18:66:a2:a5:18:b2:d2:
be:b5:b4:a4:d6:f7:21:2e:f7:65:8f:7a:20:c0:4e:af:67:56:
78:bc:53:09:c0:25:dc:d8:d9:ec:c6:f9:58:90:e4:ae:4a:e5:
7a:e0:c4:42:1d:e4:fc:2b:96:06:71:2d:ff:3d:88:3a:37:54:
3a:49:a9:8a:b6:43:57:ef:85:a6:0b:99:4d:a0:21:b7:3c:25:
38:40:d1:23:c6:99:76:4e:14:ce:29:f8:fe:26:86:0a:4e:54:
6c:7f:d3:4f:6f:50:08:ad:53:f2:a5:bf:9f:56:49:aa:20:fe:
97:0a:9c:31:21:96:90:b5:5f:84:9e:18:a4:f4:b4:88:60:f0:
37:22:4b:7b:39:fd:e5:9c:03:8a:3f:42:f6:b6:63:6f:a2:19:
bc:af:8f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:24 2025 by rpki-client