Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft
File: M35ja6YMcU_-h1SrnQTG0e7bm4k.mft (raw, json)
Hash identifier: 6DQzHFLD+Hhy7sHJo//yqML3nG47wFG/0ioaAHuua6Y=
Subject key identifier: 4B:96:4D:C2:AB:DE:3D:F0:A0:F2:2D:C9:C4:7F:DF:0A:22:B2:20:BF
Authority key identifier: 33:7E:63:6B:A6:0C:71:4F:FE:87:54:AB:9D:04:C6:D1:EE:DB:9B:89
Certificate issuer: /CN=337e636ba60c714ffe8754ab9d04c6d1eedb9b89
Certificate serial: 0197B70E58A21A0D1702EC234D4C8E3F71C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft
Manifest number: 0233
Signing time: Sat 28 Jun 2025 15:01:00 +0000
Manifest this update: Sat 28 Jun 2025 15:01:00 +0000
Manifest next update: Sun 29 Jun 2025 15:01:00 +0000
Files and hashes: 1: M35ja6YMcU_-h1SrnQTG0e7bm4k.crl (hash: PLZLNeD+bwkmGV7x8T8s1UddLZ8aIhYlBe+S0ueiEmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:58:a2:1a:0d:17:02:ec:23:4d:4c:8e:3f:71:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=337e636ba60c714ffe8754ab9d04c6d1eedb9b89
Validity
Not Before: Jun 28 15:01:00 2025 GMT
Not After : Jun 29 15:01:00 2025 GMT
Subject: CN=4b964dc2abde3df0a0f22dc9c47fdf0a22b220bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:39:3b:c8:e5:e2:44:3e:76:49:ef:67:b2:eb:
b8:9a:e6:28:38:07:75:c4:94:0e:10:62:7d:4e:eb:
d2:24:de:44:73:14:f8:bc:b2:cc:80:84:7c:98:b9:
e5:b7:7a:cc:d2:a6:4a:f4:bd:89:c2:0e:2a:ef:07:
52:04:70:73:91:8d:ad:f2:fe:98:78:4c:ef:99:19:
50:f2:ba:4f:d6:f7:cb:0c:b6:77:95:61:ef:c4:1d:
af:35:26:a9:f2:4e:c8:98:24:8b:12:60:d6:d0:8d:
4b:8d:91:61:f2:72:63:55:64:8a:5b:46:69:6e:25:
5e:49:ca:b0:c3:93:de:b1:ea:68:ff:97:12:0a:97:
66:11:6b:cb:26:13:92:77:88:48:30:01:64:ef:2d:
ff:12:10:67:41:2d:84:7e:4c:e4:a4:fc:e7:83:87:
48:d9:b0:9f:4c:c8:7f:bb:fb:2f:ea:05:3a:31:93:
ab:d8:9a:bb:28:a4:7e:d5:e0:25:f4:aa:19:2b:80:
b5:a9:10:7a:fc:7d:24:85:29:0d:e2:df:ff:a6:f9:
d1:4d:90:16:a8:6d:54:2a:bc:8e:6b:25:85:73:7e:
fa:3a:f2:2a:ad:d0:51:3b:87:34:23:0a:3c:58:c3:
99:a7:fc:cc:af:b6:ed:dc:7a:d0:36:23:b1:d4:f5:
de:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:96:4D:C2:AB:DE:3D:F0:A0:F2:2D:C9:C4:7F:DF:0A:22:B2:20:BF
X509v3 Authority Key Identifier:
keyid:33:7E:63:6B:A6:0C:71:4F:FE:87:54:AB:9D:04:C6:D1:EE:DB:9B:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:0e:3c:61:51:1c:c0:cb:35:01:15:73:72:8e:72:0d:97:3d:
eb:c1:c8:3e:85:c6:ee:f3:ee:7d:41:33:26:49:1c:39:d5:11:
47:2f:55:e7:3b:e5:54:d1:a2:fe:5d:fd:bf:25:68:88:9e:55:
5c:d0:d0:fc:f5:d8:96:bb:28:9d:e9:27:78:b2:5e:71:03:31:
7d:40:6f:8f:7d:64:bf:9a:20:cf:3f:38:25:69:79:89:77:21:
46:90:d2:5c:df:2a:b0:fe:1d:83:38:71:07:43:6f:a2:46:31:
22:af:83:f4:4e:d4:c0:e4:a7:83:3b:2d:de:f9:5f:b6:e5:31:
d0:44:e7:11:26:35:e4:44:9e:75:e2:17:d4:8e:2e:0e:37:ca:
e9:f2:a4:0e:3e:6f:0a:4c:98:9b:90:55:23:e2:c9:66:ad:5b:
1d:74:31:6a:cd:b2:98:e8:f7:07:ca:93:f6:da:47:13:2f:0c:
4f:32:7a:28:38:c6:65:63:47:8a:1c:5b:10:6f:09:fb:05:77:
24:7b:1e:f3:ed:14:81:8b:85:2d:aa:0c:28:c1:98:f4:3b:13:
f8:7a:fc:e2:c2:5c:a4:3f:94:c1:3e:af:82:0a:61:12:60:97:
72:df:d3:16:b1:3a:06:91:0e:1f:e8:ff:ea:eb:71:6a:84:68:
22:9f:ac:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:14:39 2025 by rpki-client