Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
File: M7n5GBbdTYImpB47TDsJx73MZKk.mft (raw, json)
Hash identifier: 54MrNjyOgQnzOqlL5QDT7k0hSasvbitF5EBmAugNExQ=
Subject key identifier: 76:D4:E1:56:67:A3:74:1B:4B:1B:BA:8B:4C:C4:3C:06:E7:F7:CF:F1
Authority key identifier: 33:B9:F9:18:16:DD:4D:82:26:A4:1E:3B:4C:3B:09:C7:BD:CC:64:A9
Certificate issuer: /CN=33b9f91816dd4d8226a41e3b4c3b09c7bdcc64a9
Certificate serial: 0197B6A19BB22AAB48462324FA751D3B4B4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 13:02:13 +0000
Manifest this update: Sat 28 Jun 2025 13:02:13 +0000
Manifest next update: Sun 29 Jun 2025 13:02:13 +0000
Files and hashes: 1: M7n5GBbdTYImpB47TDsJx73MZKk.crl (hash: xkjsAON8S5847enhOuMuTqnxz2nWW0LJdEe3xNKBBIA=)
2: r8v_y5CgKRJYVb0efXm40LZehP4.roa (hash: RKFUmKgDYqrRW6TXR7G+/oNe9iSAV+m90qk1jsY/Or0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:9b:b2:2a:ab:48:46:23:24:fa:75:1d:3b:4b:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b9f91816dd4d8226a41e3b4c3b09c7bdcc64a9
Validity
Not Before: Jun 28 13:02:13 2025 GMT
Not After : Jun 29 13:02:13 2025 GMT
Subject: CN=76d4e15667a3741b4b1bba8b4cc43c06e7f7cff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:de:a7:79:f8:e4:75:5c:09:64:c4:60:3b:c7:
da:ff:0f:06:72:59:bb:d8:3c:22:30:a8:4e:49:da:
85:cb:4e:04:20:dd:20:72:e3:3d:29:7a:85:d9:f7:
43:61:67:85:ba:db:7e:db:a8:aa:49:85:11:50:e3:
9f:87:16:66:12:55:7d:0f:cc:4d:42:87:41:8c:1b:
40:bb:73:cb:74:59:2f:04:57:47:37:95:8e:79:16:
6d:85:e0:42:66:23:d4:ac:27:ba:9f:4b:56:b8:85:
e6:3e:3a:f7:37:79:60:6b:30:e3:f9:c2:e2:79:2d:
48:d3:58:ef:01:a1:78:f2:10:fb:02:70:3c:8b:36:
85:e7:3b:bf:3d:2f:a2:c0:13:99:d3:9c:bb:c3:cb:
9b:aa:c3:2e:8d:f8:1a:3c:19:13:1e:d1:66:ef:30:
9b:d1:56:c4:be:36:92:33:a2:3c:78:ba:18:b3:d0:
00:9b:05:7d:33:13:56:b6:68:ee:a5:b0:7e:4f:72:
f4:4d:4b:3b:9d:63:37:a3:31:c3:ad:e4:8d:0f:bb:
a3:68:66:bd:a1:0e:cb:30:1f:3f:66:16:55:75:c6:
bb:b9:b0:43:fc:f1:e5:bf:b6:29:8b:7a:d5:06:91:
9c:70:d6:41:64:74:6a:76:b2:32:0f:03:1e:00:4d:
9c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D4:E1:56:67:A3:74:1B:4B:1B:BA:8B:4C:C4:3C:06:E7:F7:CF:F1
X509v3 Authority Key Identifier:
keyid:33:B9:F9:18:16:DD:4D:82:26:A4:1E:3B:4C:3B:09:C7:BD:CC:64:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:59:4e:f7:4a:7a:fe:98:d6:fb:9c:36:75:8c:19:b4:8b:fb:
81:56:8b:8e:b7:4e:71:dc:79:33:6b:6a:06:c1:be:f7:3f:ba:
a1:63:4a:e2:df:8d:c0:76:94:de:63:31:88:ec:38:eb:f2:77:
fe:bd:00:34:9e:ca:ac:f6:11:f3:21:90:c7:49:68:4f:de:52:
bc:a2:31:4d:a2:38:e2:95:df:8f:53:f9:29:a1:ba:ea:d2:4d:
8e:17:66:0b:5c:1f:58:7a:b0:46:a9:07:89:88:70:7c:97:0e:
74:df:68:6c:ac:7a:fe:53:a8:14:68:09:4a:bd:fe:53:ee:f2:
dd:36:a7:03:95:36:f7:76:54:32:92:d0:20:55:86:91:48:0f:
d2:93:93:15:4e:39:80:47:8f:06:21:f2:65:5d:e8:29:78:4e:
b2:0b:0b:12:f2:8a:bc:61:14:22:2c:11:e5:a6:fa:2b:0c:25:
24:f6:6b:57:8c:ec:ec:3c:99:e8:c3:66:d3:e4:99:d0:cb:77:
43:47:6c:03:9d:e6:e0:f6:53:9a:d5:ca:4e:8a:e0:87:b2:8f:
5a:a0:17:fd:d0:99:4c:2d:06:ca:6c:87:13:61:30:d3:e8:98:
37:8d:ae:78:30:a9:89:03:4a:f1:cf:ea:da:d9:13:a8:08:7a:
3e:fa:42:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:58:21 2025 by rpki-client