Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
File: cmMziKelz-mnyhn9dMki3LEladM.mft (raw, json)
Hash identifier: AQ1IndMC0/Xg5QO/uoo9QIYoxrdelxHk90oUcbV0XQY=
Subject key identifier: 43:B1:03:26:27:F8:AC:F4:A1:89:CC:D5:BC:16:5E:8C:57:C1:EC:3D
Authority key identifier: 72:63:33:88:A7:A5:CF:E9:A7:CA:19:FD:74:C9:22:DC:B1:25:69:D3
Certificate issuer: /CN=72633388a7a5cfe9a7ca19fd74c922dcb12569d3
Certificate serial: 0197C6150772B248856ECEF42AAF370C546A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
Manifest number: 1169
Signing time: Tue 01 Jul 2025 13:02:36 +0000
Manifest this update: Tue 01 Jul 2025 13:02:36 +0000
Manifest next update: Wed 02 Jul 2025 13:02:36 +0000
Files and hashes: 1: ZGrcpUqsEOsf7o6fu8OWpNq4gNY.roa (hash: wpQNPwvek3Rp2M6cV1DD/Iu66bw6RcokC6IaW3yHq/w=)
2: cmMziKelz-mnyhn9dMki3LEladM.crl (hash: OfU1bzCdqIga80lKTvq4f/yx0YkmgAmlzDac/SgQWJw=)
3: gdtLNhs1JQCPzai-VNs9JYZHoWI.roa (hash: ZjSEtnU3HKrgHwmUc/jOdFVfQULcq2id5Yk1K05ZWWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:15:07:72:b2:48:85:6e:ce:f4:2a:af:37:0c:54:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72633388a7a5cfe9a7ca19fd74c922dcb12569d3
Validity
Not Before: Jul 1 13:02:36 2025 GMT
Not After : Jul 2 13:02:36 2025 GMT
Subject: CN=43b1032627f8acf4a189ccd5bc165e8c57c1ec3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8e:4f:c5:14:97:b9:4c:93:45:67:1d:39:f1:
6e:26:34:08:f0:4c:ec:0f:36:a6:16:c8:3f:a9:1c:
4f:f5:f4:d5:82:e3:47:90:66:cc:a1:b2:35:4c:c5:
78:68:42:2d:87:dc:05:10:0f:a8:06:13:71:bd:1c:
93:2a:eb:98:57:c7:e6:d0:fc:9e:fd:11:8b:15:56:
ab:17:02:be:8b:9e:10:7d:c9:b5:36:37:e5:0e:e6:
b6:37:a0:0b:3a:a7:0b:48:f0:ef:35:57:d3:77:1a:
cc:be:e8:8d:d1:02:4b:4b:70:27:66:b1:99:c0:5b:
04:8f:54:2d:4a:38:7b:da:93:6a:af:5c:d4:e8:a6:
66:d1:35:ea:5b:20:c5:4b:ca:e6:f2:60:62:93:41:
67:b9:6c:f9:a1:6a:c8:24:9d:0a:42:08:bf:1d:0c:
65:a1:1a:23:38:8b:dd:e9:81:1a:f2:35:b7:f8:f3:
83:02:76:84:41:29:ab:4f:41:48:16:df:e5:51:3f:
8c:1c:60:ad:4f:eb:4d:9a:9e:f1:3a:6d:4c:b9:13:
24:96:be:29:0f:ed:38:6c:92:e5:53:54:d8:65:e9:
e7:9f:12:a7:9c:f4:57:f8:1b:15:60:e7:aa:d8:1d:
b1:a5:75:c9:01:0e:66:cf:7b:51:5f:4f:55:2d:1f:
f8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B1:03:26:27:F8:AC:F4:A1:89:CC:D5:BC:16:5E:8C:57:C1:EC:3D
X509v3 Authority Key Identifier:
keyid:72:63:33:88:A7:A5:CF:E9:A7:CA:19:FD:74:C9:22:DC:B1:25:69:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:02:b1:55:fc:c0:d3:03:de:5b:36:dc:95:e9:95:14:6b:19:
a9:05:f3:89:ce:2c:6d:39:cd:65:55:c6:b3:23:da:19:11:f5:
ca:9c:3d:12:a5:96:cc:e6:dc:78:71:8d:ee:0f:ee:a7:06:aa:
87:d5:74:bf:da:f0:80:d5:ef:a4:91:a2:05:d6:50:c9:71:90:
e7:63:09:f4:f6:44:bc:66:2f:43:25:a5:a2:53:ce:44:33:8a:
07:8f:51:88:69:72:b9:62:1f:ea:1d:79:52:77:2c:b8:bd:26:
44:61:ba:45:48:cf:f4:36:ec:3f:9c:1a:98:a8:5e:31:13:05:
cc:18:32:cd:5e:51:d2:01:a1:1b:2e:5b:8d:30:ed:a9:b5:5f:
19:5a:ef:e9:83:28:25:92:a3:4e:34:64:3f:f9:ea:6e:9b:1a:
c1:4b:95:64:66:f1:f2:4b:14:55:6c:88:e3:35:62:ff:18:40:
2a:5e:e0:e3:39:45:f4:10:43:59:40:04:41:ff:d5:1d:c5:7f:
b2:b3:9b:40:07:09:fe:db:96:e0:d2:dd:cc:a7:7e:d7:74:a5:
a6:dc:3f:e1:9a:28:58:10:fe:8d:00:37:8f:5a:34:6e:01:67:
46:18:4d:15:40:2f:22:e3:22:01:79:17:4a:93:b5:b8:92:0c:
ec:67:2f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:35:48 2025 by rpki-client