Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
File: M-oI76mz94ye-dt2etwh3WGDTg8.mft (raw, json)
Hash identifier: XhNGAa2vw4VM2O7C+++VfhjIF3ksaZudPogCKx65MFc=
Subject key identifier: AC:57:F3:A3:5B:36:48:23:5B:C9:D1:F3:D4:26:E0:BC:89:EE:93:FF
Authority key identifier: 33:EA:08:EF:A9:B3:F7:8C:9E:F9:DB:76:7A:DC:21:DD:61:83:4E:0F
Certificate issuer: /CN=33ea08efa9b3f78c9ef9db767adc21dd61834e0f
Certificate serial: 0197B77CA602C368548C9D48D33F7817D3FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 17:01:28 +0000
Manifest this update: Sat 28 Jun 2025 17:01:28 +0000
Manifest next update: Sun 29 Jun 2025 17:01:28 +0000
Files and hashes: 1: 9pGdNh0dkqM5WJr2d64Db3VyTiU.roa (hash: YFjcGwYG51ckAsTGEaarqbVHwri0cUu+NrZNkgCyAVM=)
2: M-oI76mz94ye-dt2etwh3WGDTg8.crl (hash: idh8zfx+NF2l99Vcf/w8TuXwNRx0VRfiGnGMBz5fMkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:a6:02:c3:68:54:8c:9d:48:d3:3f:78:17:d3:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33ea08efa9b3f78c9ef9db767adc21dd61834e0f
Validity
Not Before: Jun 28 17:01:28 2025 GMT
Not After : Jun 29 17:01:28 2025 GMT
Subject: CN=ac57f3a35b3648235bc9d1f3d426e0bc89ee93ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a4:af:c4:41:1d:ab:27:3c:4d:95:59:3c:67:
e3:1e:19:1d:b4:93:d1:30:ac:5c:d7:7b:a6:ca:2c:
9f:91:9e:d5:83:38:4e:a8:ab:11:11:e4:54:a3:0d:
38:f2:e3:6d:a7:74:8e:47:92:0f:99:5d:6e:4b:92:
5d:df:a1:ae:21:b3:77:76:16:91:b6:99:5f:f3:35:
0a:e9:00:1f:d9:d6:2b:e1:88:73:93:a8:ef:f1:f7:
ec:64:8f:e1:d1:2c:24:54:5b:0e:f2:32:8d:37:03:
30:4d:1d:1e:ae:0c:c4:1d:71:be:02:3f:79:c6:02:
d8:ea:f4:01:94:96:f8:24:37:cc:03:9b:d4:b6:a8:
e7:71:26:ab:6b:6f:09:67:71:c0:be:46:f6:97:c2:
a3:13:70:37:65:3c:6e:1f:09:80:e6:2c:71:df:53:
b3:0f:cb:16:bc:93:77:80:81:e3:00:4f:33:6e:9d:
c4:40:e5:ea:8c:fb:e6:05:2d:82:91:f2:ac:ed:98:
ca:9e:ac:b4:97:c2:11:e2:26:30:a4:e1:42:83:13:
4f:df:fe:c0:bf:68:15:cc:b0:34:95:9a:54:70:86:
cf:04:a7:e6:e6:f3:2d:d3:de:bc:34:9d:19:38:03:
84:79:1d:19:74:d1:ef:1b:dc:ab:47:c7:f2:8b:62:
2f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:57:F3:A3:5B:36:48:23:5B:C9:D1:F3:D4:26:E0:BC:89:EE:93:FF
X509v3 Authority Key Identifier:
keyid:33:EA:08:EF:A9:B3:F7:8C:9E:F9:DB:76:7A:DC:21:DD:61:83:4E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:d7:32:50:b3:e7:15:a6:b9:3c:19:30:2e:8b:6e:3e:6c:c0:
87:9d:7d:6c:33:ed:e2:40:d9:d2:86:97:ba:62:80:78:75:e5:
75:e3:82:bf:bb:69:66:e5:31:a2:67:33:3d:fe:e9:0b:74:1f:
28:f0:3f:85:94:ea:76:cf:b3:d7:b8:78:ec:f9:76:5f:71:bb:
2d:51:3e:fa:02:64:15:d1:83:8f:58:c8:73:56:11:9f:28:c1:
be:80:3b:40:bd:0b:e6:93:e9:b9:a4:8b:e0:1e:04:9f:76:13:
48:45:2f:51:fb:75:8f:98:05:6b:11:b5:c7:e0:dd:fb:81:56:
cf:1b:34:99:de:c6:e5:a6:58:46:d2:5d:9c:c8:01:5a:d4:47:
ed:31:59:a2:71:f6:5f:72:ce:d5:17:ed:d3:ae:17:bc:8e:f9:
8b:f5:d9:e2:0d:55:04:bc:c6:50:49:c5:e5:1f:33:e3:b1:54:
44:9a:23:f3:8f:7f:e1:4b:06:12:79:1c:2a:da:1d:9f:09:6d:
d4:a4:26:eb:8c:37:66:72:82:89:6b:ce:d7:ba:30:48:13:74:
24:4b:75:b5:3b:8b:bd:ff:a2:79:a6:51:be:eb:52:db:db:a8:
28:dc:cd:6d:55:87:6c:88:a1:34:9f:e5:77:3d:ab:22:f6:dc:
36:76:60:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:34:54 2025 by rpki-client