Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft
File: M7S1t7Icrr89IICfbFcFmfHWBGg.mft (raw, json)
Hash identifier: vdA285iim6UmMiTUucYASsXC03+fOz1MIkqs7PNlLwA=
Subject key identifier: 05:41:B9:92:0F:B4:C2:0A:42:21:C2:B5:FB:F6:C6:A1:FB:13:87:72
Authority key identifier: 33:B4:B5:B7:B2:1C:AE:BF:3D:20:80:9F:6C:57:05:99:F1:D6:04:68
Certificate issuer: /CN=33b4b5b7b21caebf3d20809f6c570599f1d60468
Certificate serial: 0198D54E61BC63280F8FE7CE9A893DC13897
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7S1t7Icrr89IICfbFcFmfHWBGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 05:02:20 +0000
Manifest this update: Sat 23 Aug 2025 05:02:20 +0000
Manifest next update: Sun 24 Aug 2025 05:02:20 +0000
Files and hashes: 1: M7S1t7Icrr89IICfbFcFmfHWBGg.crl (hash: C0iwhYKZrDoJhkRx5uMjgrfBKec3mCEcUjVw+wX5Ck0=)
2: r7a6D_FkR9xhVp2w9lPW31aBNv4.roa (hash: XnCRXOHC4FDX1dXWIOiOTBOBjGntvWRiOFTSpLk90Dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7S1t7Icrr89IICfbFcFmfHWBGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:61:bc:63:28:0f:8f:e7:ce:9a:89:3d:c1:38:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b4b5b7b21caebf3d20809f6c570599f1d60468
Validity
Not Before: Aug 23 05:02:20 2025 GMT
Not After : Aug 24 05:02:20 2025 GMT
Subject: CN=0541b9920fb4c20a4221c2b5fbf6c6a1fb138772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0c:76:e9:52:49:05:c8:25:ba:06:f3:3a:b4:
fb:5f:ee:a8:11:f0:07:a9:b6:ce:b5:ef:63:86:11:
6f:4e:54:58:a9:8b:65:8d:1d:12:0d:05:b1:f6:fd:
84:52:07:38:94:99:4b:62:80:5c:08:29:ab:30:cd:
55:69:75:b7:c9:25:b2:03:e4:d8:6a:34:67:56:bf:
00:cb:13:61:f5:f9:d1:61:df:5c:06:76:27:b5:2a:
b9:4a:3e:48:26:31:a3:89:0f:8e:fd:af:ad:e5:4d:
3e:5d:a6:49:ab:48:0c:02:af:cb:ce:03:9b:ff:f7:
62:67:a4:2c:ac:bb:e6:0b:d0:ae:88:dd:ab:23:8e:
38:5d:25:87:33:66:91:5b:8a:83:87:96:d0:50:70:
98:7f:c8:c6:e4:62:af:4b:2b:85:0a:a5:6b:af:a9:
df:02:88:03:3a:77:10:5c:26:68:a8:97:12:4b:ae:
74:5f:d6:b1:a9:dd:22:88:cc:47:53:98:b7:f1:5e:
ea:57:56:cb:1b:bb:16:9b:08:69:fd:86:a0:c1:d3:
fd:50:89:5e:03:fd:8b:19:d7:37:77:3b:ed:b7:52:
ea:d5:46:bb:ff:af:a1:c7:a5:f3:bc:46:7a:55:d2:
9a:d9:41:b3:fb:2b:85:3e:7e:ec:4e:84:28:60:b9:
ba:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:41:B9:92:0F:B4:C2:0A:42:21:C2:B5:FB:F6:C6:A1:FB:13:87:72
X509v3 Authority Key Identifier:
keyid:33:B4:B5:B7:B2:1C:AE:BF:3D:20:80:9F:6C:57:05:99:F1:D6:04:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7S1t7Icrr89IICfbFcFmfHWBGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:7e:9b:e0:e4:cd:74:22:65:d3:d2:ea:f4:2d:82:54:40:45:
f6:95:2b:d2:e0:fe:33:c2:e2:8a:34:ca:4c:15:09:d1:31:95:
27:02:1b:a8:bb:ef:7d:e0:9b:ef:07:b1:f5:c4:20:ff:c6:15:
bd:5b:52:8d:73:f8:84:ba:71:98:25:f4:ff:42:3a:3c:22:14:
70:7d:70:b8:57:7f:c1:4a:54:5b:5a:a6:cd:89:95:d0:fa:ab:
c4:7f:d7:2f:0c:e5:24:c1:f4:c7:e5:ab:8a:d4:fd:b6:90:87:
1d:8d:a5:38:03:3b:c1:9a:37:e1:9c:6a:83:90:90:2b:2c:31:
25:14:69:07:28:dc:4b:5d:4d:95:83:20:ef:7c:97:bb:19:31:
77:b4:d2:b1:4c:62:d6:91:72:70:60:ae:f8:7c:d7:10:78:b6:
5d:ac:5a:f1:80:fc:a9:cb:26:07:fd:ba:89:1f:98:bb:68:23:
1a:54:8a:55:b1:f6:2f:4f:bf:d0:d4:3f:75:b2:a2:e9:1e:8d:
db:4f:6f:95:52:10:54:96:b3:98:89:80:ad:5f:67:78:c0:96:
e1:4f:5a:af:bf:d2:b3:3a:7c:0b:67:e0:8b:62:e4:83:6f:54:
83:54:e2:ac:17:a0:72:bb:42:56:a3:63:1d:b6:77:59:34:c5:
c8:dd:68:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:29 2025 by rpki-client