Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
File: M29qyC9vKOPT5bZkdVlNgxjnWrM.mft (raw, json)
Hash identifier: Q7VfPuJuldxccfJwdoys996y1kuIYmEEfZvZDNH2KYQ=
Subject key identifier: 2B:DF:9A:A3:2A:4D:E7:13:C4:B3:20:2F:A8:08:2B:55:84:66:20:AD
Authority key identifier: 33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3
Certificate issuer: /CN=336f6ac82f6f28e3d3e5b66475594d8318e75ab3
Certificate serial: 0197B70EC25E8EDEA306D274CD5E24C47544
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
Manifest number: 0D71
Signing time: Sat 28 Jun 2025 15:01:27 +0000
Manifest this update: Sat 28 Jun 2025 15:01:27 +0000
Manifest next update: Sun 29 Jun 2025 15:01:27 +0000
Files and hashes: 1: M29qyC9vKOPT5bZkdVlNgxjnWrM.crl (hash: 10Wmh/7uhZuoT4jk4VIyQ840OlVeZEptkIV/2FSnrVY=)
2: dEZ5raqBPXnkqzr9_S0vwZwMrcc.roa (hash: A8CtSs9BqkWswlRrqESpgq4uIozS5L7wmlKnC6IFKQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:c2:5e:8e:de:a3:06:d2:74:cd:5e:24:c4:75:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=336f6ac82f6f28e3d3e5b66475594d8318e75ab3
Validity
Not Before: Jun 28 15:01:27 2025 GMT
Not After : Jun 29 15:01:27 2025 GMT
Subject: CN=2bdf9aa32a4de713c4b3202fa8082b55846620ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fb:34:d5:31:a2:2b:e6:a3:0d:a1:b3:ad:cb:
e7:15:a3:72:08:6d:c0:4c:c0:59:8f:62:a3:b2:97:
1e:2a:33:c9:a7:f0:5c:9c:1e:e2:1a:69:ba:2e:a9:
df:9f:3c:b0:a1:fb:ba:46:6e:8f:65:35:85:19:13:
ae:9a:68:46:d1:b9:1e:62:dc:29:4e:04:a9:18:ea:
9b:92:2a:45:8d:15:63:68:ff:d6:4e:ad:3c:0a:bd:
31:ec:bc:c7:0b:77:0d:33:cd:7b:26:c7:8b:7c:9b:
a6:0b:84:cd:1f:ad:c3:48:67:21:aa:b7:9a:52:5a:
b8:8e:d7:ee:d9:69:98:4e:10:f5:5c:c6:db:b9:d4:
42:67:72:36:37:0a:6b:0c:2d:ff:c1:bc:90:e9:94:
91:4a:16:ac:9d:0a:e3:03:96:91:1f:22:54:c5:6c:
e9:3e:cb:be:58:40:a2:02:1d:44:4e:23:1a:c3:51:
fa:7a:2d:61:60:04:95:57:eb:ed:cf:e7:f9:15:09:
6a:06:bc:d0:81:97:04:bf:a1:5c:d6:01:bd:70:2d:
eb:eb:18:e5:e2:6a:29:32:97:34:ed:95:fa:28:0b:
b1:ba:88:42:94:a9:e8:e1:e6:4a:e9:c5:d1:29:96:
81:e8:65:44:76:e9:04:96:ac:77:31:47:98:03:f7:
6e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DF:9A:A3:2A:4D:E7:13:C4:B3:20:2F:A8:08:2B:55:84:66:20:AD
X509v3 Authority Key Identifier:
keyid:33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:e2:e0:bc:a2:b9:d6:87:dc:7a:05:a3:3b:b9:a9:c2:be:16:
ab:df:1f:bb:05:02:35:0f:c4:96:4c:7c:3c:e1:4f:59:34:1a:
cd:a3:c5:ce:7d:96:2f:9e:af:bb:6b:9e:83:74:9a:d2:0c:c5:
c3:29:1f:d6:fd:87:dd:8d:e1:0d:c7:5c:ea:6e:46:88:c0:a5:
f3:5d:d3:ef:ef:23:88:bb:df:b5:97:59:db:11:fb:9a:c8:9f:
2a:43:31:c4:10:e7:9a:b9:a3:3c:dc:6a:83:e2:af:69:5b:8c:
b0:43:a3:74:84:8d:0a:98:f6:d6:db:af:9a:c8:9d:29:f5:22:
b4:88:44:a3:ba:50:08:2e:1e:f2:c2:db:98:e3:61:f8:9a:34:
18:e4:23:39:df:ce:61:3b:b4:d0:4f:04:c7:09:2f:8a:5b:d4:
c1:cb:69:23:2d:b5:76:a4:79:f4:2e:a0:c0:8e:d2:33:4f:a7:
d5:3f:a5:2a:b3:11:04:d7:19:7e:4f:5c:57:af:85:04:3f:05:
a5:f1:7a:19:30:df:d0:fa:05:6d:ec:b6:32:c6:c8:40:d2:2a:
6b:5d:5a:0c:5e:2f:2f:c5:2d:80:5d:8f:4f:b7:31:85:11:f8:
b2:7e:35:c8:c9:8b:4e:31:e2:c2:70:64:d2:56:76:0e:69:f1:
bc:2b:56:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:56 2025 by rpki-client