Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
File: M1wzNuLOO9daspzoHlT_gexW8do.mft (raw, json)
Hash identifier: 2JSq/Giw3Pav/sFFvY1cn9F/LMgIQ3lgzyQeKsGQmBc=
Subject key identifier: 00:F7:85:1E:E6:91:27:22:B3:D8:5C:6B:5F:90:35:5F:88:96:EB:D0
Authority key identifier: 33:5C:33:36:E2:CE:3B:D7:5A:B2:9C:E8:1E:54:FF:81:EC:56:F1:DA
Certificate issuer: /CN=335c3336e2ce3bd75ab29ce81e54ff81ec56f1da
Certificate serial: 0198D6CE06A29EAE2FB0F53BA57C975E3B7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 12:01:23 +0000
Manifest this update: Sat 23 Aug 2025 12:01:23 +0000
Manifest next update: Sun 24 Aug 2025 12:01:23 +0000
Files and hashes: 1: M1wzNuLOO9daspzoHlT_gexW8do.crl (hash: YwXOdVShE12TBxm2xJO/udw+ObgF9UtO+cPw8k4B8sc=)
2: RYELhtEFcsCmVORqbpstU7Crut0.roa (hash: aIhBm/rb3wVRspojE1k+QXWmo713Q+h8iYk1yzSNDKA=)
3: wFOiJmPx91gFud4szSTNVGIfLik.roa (hash: KJL3tTISnToS4chRnmNiRq6jQUDoMI15K3mK8EPpyi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:ce:06:a2:9e:ae:2f:b0:f5:3b:a5:7c:97:5e:3b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=335c3336e2ce3bd75ab29ce81e54ff81ec56f1da
Validity
Not Before: Aug 23 12:01:23 2025 GMT
Not After : Aug 24 12:01:23 2025 GMT
Subject: CN=00f7851ee6912722b3d85c6b5f90355f8896ebd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:44:56:d6:c4:9a:bf:87:ed:f3:83:84:2d:c5:
ba:0c:94:46:87:d6:94:ab:4f:45:1c:6f:83:0a:18:
86:9e:42:ab:67:1a:4a:9a:59:6e:a2:32:8a:cb:47:
a0:ca:cc:b6:14:b9:e0:f4:52:a6:11:c5:00:22:0b:
a2:31:25:9e:5b:38:07:76:df:87:ca:20:38:0d:15:
42:a5:1b:86:39:6e:be:3e:f0:d1:cf:52:80:58:b9:
dc:63:60:6e:a1:6c:76:e6:f9:04:a3:4d:5d:a2:01:
81:1c:85:ca:80:9d:44:df:97:0b:9e:2d:02:61:dd:
4b:42:3b:3c:2b:ad:5c:bb:f7:95:9c:52:3f:5e:bb:
52:dd:7c:df:ff:8b:d2:e5:64:57:6e:76:2f:a5:03:
4a:54:34:3e:ca:6f:7d:3b:53:b2:dc:12:4a:e2:14:
08:29:50:ba:50:01:72:63:46:24:b8:b3:b1:4d:24:
f2:28:7c:d4:74:0c:b8:f5:5f:93:38:f9:ef:a9:61:
1e:22:63:d3:25:a0:e4:ef:1b:94:da:e8:37:96:0e:
e5:13:b7:22:4e:39:6e:39:a9:86:9d:3f:df:ee:6a:
f4:bf:97:f1:82:dd:04:54:f8:1f:27:f0:71:94:71:
34:81:28:3d:f5:bf:12:6d:2d:42:bd:30:35:26:3d:
a1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F7:85:1E:E6:91:27:22:B3:D8:5C:6B:5F:90:35:5F:88:96:EB:D0
X509v3 Authority Key Identifier:
keyid:33:5C:33:36:E2:CE:3B:D7:5A:B2:9C:E8:1E:54:FF:81:EC:56:F1:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:78:37:d1:f7:ae:48:d6:e1:97:d4:70:5f:de:11:93:9e:17:
b6:bc:5b:fc:a1:24:3c:b2:50:c5:5e:7d:3d:1c:f7:21:ae:65:
c2:79:63:e7:f7:1a:28:7c:87:34:97:8c:90:80:06:1a:8d:19:
d7:df:1a:23:24:37:22:51:bf:70:e0:6c:3e:a0:77:4d:f3:31:
4f:5e:1e:79:69:a6:47:a4:de:f1:3c:df:e7:5f:5c:33:89:10:
9e:a4:8a:17:96:60:f2:06:7e:07:ab:3b:4a:2b:a7:51:76:c6:
b1:79:e2:50:a1:00:20:65:86:1e:58:47:f1:40:73:71:a0:b2:
20:f1:80:a1:1b:27:e6:b5:70:40:35:6f:f6:41:92:6c:63:9a:
dd:16:b7:38:34:7b:bf:d2:1b:21:ba:00:c9:c3:f2:50:c0:c4:
84:49:ae:41:fc:53:dc:bd:d7:3a:f8:9a:3f:e8:14:73:68:ea:
69:5e:b8:8a:45:0e:1d:92:41:cf:c9:97:9b:77:e0:69:80:a4:
84:f3:bf:f3:6c:94:3c:87:77:98:d4:17:79:b0:89:ae:a8:40:
57:8d:79:c3:0a:dc:7d:f4:79:36:aa:02:2d:4e:4f:d1:6e:28:
96:b2:b7:1c:19:fc:9a:06:29:af:23:dc:6f:74:ed:47:70:f3:
1b:db:dd:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:21:19 2025 by rpki-client