Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
File: M7GzE5YIPOntUeRiiY4pTtghWuc.mft (raw, json)
Hash identifier: OLp4wsfL0RwX3vsEwLoL/g6ewk+1RtYLxD8KXLcYwtI=
Subject key identifier: 0D:EA:A5:5C:A3:5B:DB:A5:2E:C7:8A:92:B2:47:AF:0B:FE:C9:FC:98
Authority key identifier: 33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
Certificate issuer: /CN=33b1b31396083ce9ed51e462898e294ed8215ae7
Certificate serial: 0197B77C576672DD375BCE2ACB7F30FF2BDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
Manifest number: 0856
Signing time: Sat 28 Jun 2025 17:01:08 +0000
Manifest this update: Sat 28 Jun 2025 17:01:08 +0000
Manifest next update: Sun 29 Jun 2025 17:01:08 +0000
Files and hashes: 1: M7GzE5YIPOntUeRiiY4pTtghWuc.crl (hash: hq0COF9MfHMZ0ToO3P4GHiOaEci3PU2v45jArhN1C+A=)
2: VQEhZHRI_51L-qPYAqsPHPNhngo.roa (hash: x+W3XCRbSsqe5EAx2dK2PnCFHJSGnsA8p+6YOIwEtcI=)
3: yZau-DwfbVfRH1H5nBnznu-Gh04.roa (hash: u7wjmjDpMKVCur/XQ8T5dAncaG/iDqX0/1UwHJhY4Us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:57:66:72:dd:37:5b:ce:2a:cb:7f:30:ff:2b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b1b31396083ce9ed51e462898e294ed8215ae7
Validity
Not Before: Jun 28 17:01:08 2025 GMT
Not After : Jun 29 17:01:08 2025 GMT
Subject: CN=0deaa55ca35bdba52ec78a92b247af0bfec9fc98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:47:27:27:82:b1:f1:e2:b0:94:6e:27:af:9f:
44:46:35:d1:64:dd:28:35:16:58:05:fc:49:2c:52:
5f:bb:51:5d:fe:ff:5c:b2:ff:35:ed:6a:6f:10:d2:
7b:f6:8b:cf:26:52:33:26:0d:27:c6:33:83:62:b7:
b1:c3:42:a2:8a:b7:24:c7:28:70:f2:21:94:dc:62:
bb:11:f7:5f:30:44:c3:24:ec:3e:08:f7:4c:a9:60:
c5:52:e0:ad:e6:cc:04:de:7b:33:e4:69:99:c7:0a:
85:df:78:92:5c:c5:8a:0a:44:9f:3e:aa:c3:66:67:
1d:17:f1:84:f2:8f:96:11:22:ad:f9:31:9b:55:ee:
be:81:34:93:4f:7c:dc:a3:2c:8c:cd:c5:9b:00:d0:
b1:5d:1f:ba:84:8d:e1:98:c0:34:05:d8:f5:7e:f7:
e9:e8:88:b8:5d:00:8b:12:da:8c:26:ff:11:81:3c:
32:27:07:c5:70:0c:19:d3:2f:c1:04:1a:df:a4:69:
f8:e1:b3:a8:6a:a3:c1:8e:2d:d8:0c:8f:cd:3c:b7:
34:60:57:29:3b:ec:9c:2a:d8:39:1a:3b:08:52:95:
66:40:73:6c:af:9a:fb:6f:19:bc:e7:91:fa:8a:39:
70:1f:81:25:39:ff:83:2f:92:61:b5:10:66:02:37:
12:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:EA:A5:5C:A3:5B:DB:A5:2E:C7:8A:92:B2:47:AF:0B:FE:C9:FC:98
X509v3 Authority Key Identifier:
keyid:33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:f9:50:6c:31:9b:ed:f9:bc:e9:28:98:73:a7:4a:14:d2:a2:
1d:ee:a9:65:d7:15:03:70:23:f2:c4:52:df:1d:59:9a:c6:d7:
8c:c7:04:f3:46:16:60:f3:df:9e:76:ca:05:35:43:65:8c:93:
2c:03:32:91:67:f9:af:aa:67:ce:33:97:46:ec:ee:b0:e5:34:
ae:08:f9:22:67:78:4d:97:7e:d0:dc:fd:be:0b:32:cb:11:04:
0f:78:7b:ee:c0:c7:d4:af:02:3b:0d:1b:b9:52:50:6c:bd:4a:
2d:dd:32:2e:a8:5d:b4:0a:17:ec:94:3c:9a:2b:52:55:d8:84:
15:27:c0:ea:1e:f7:ce:47:3c:a0:26:13:66:5c:52:b4:48:64:
2f:d7:56:1c:af:b5:c3:eb:b4:25:46:0c:ce:b0:48:0d:49:b8:
bd:c4:4b:ef:5d:cd:85:76:db:53:8d:91:d0:7d:38:22:4b:a8:
67:c6:d4:a8:a2:07:6b:cc:f9:76:d5:02:d2:50:db:9c:58:36:
1b:d3:6a:48:b8:c2:05:b1:d0:e0:db:9a:91:a0:22:d0:e1:c0:
8b:1f:a3:ef:e0:25:b1:55:45:7f:44:fd:f1:8e:35:06:c4:3d:
04:67:02:1c:69:ec:54:48:62:88:86:05:80:db:0b:ba:15:73:
8b:49:c3:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:47 2025 by rpki-client