Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.mft
File: M645mYTXN0sqjgr3LSv88QXIYVQ.mft (raw, json)
Hash identifier: CuC5LKy9tL1LfK0jTxp1mlCHfPM2qeeH3jyA2BAT/SE=
Subject key identifier: A6:52:90:A5:B3:C1:F1:D1:13:EE:E3:D0:FD:A1:C3:6C:99:E0:FF:F3
Authority key identifier: 33:AE:39:99:84:D7:37:4B:2A:8E:0A:F7:2D:2B:FC:F1:05:C8:61:54
Certificate issuer: /CN=33ae399984d7374b2a8e0af72d2bfcf105c86154
Certificate serial: 0197B77C241ECCA7651DDB4B0BC16890B627
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M645mYTXN0sqjgr3LSv88QXIYVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.mft
Manifest number: 14CA
Signing time: Sat 28 Jun 2025 17:00:55 +0000
Manifest this update: Sat 28 Jun 2025 17:00:55 +0000
Manifest next update: Sun 29 Jun 2025 17:00:55 +0000
Files and hashes: 1: FVPUO_4e4I5-OcVJQIXU4CRRPVk.roa (hash: q0KHYdYKhmIsDVg/gFGOj9HyFrWEATNN4eGecvRkCEk=)
2: M645mYTXN0sqjgr3LSv88QXIYVQ.crl (hash: RLz+QnMIN1GABIFnJRTXM98hYChEfFtDAEgSX6p1vjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M645mYTXN0sqjgr3LSv88QXIYVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:24:1e:cc:a7:65:1d:db:4b:0b:c1:68:90:b6:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33ae399984d7374b2a8e0af72d2bfcf105c86154
Validity
Not Before: Jun 28 17:00:55 2025 GMT
Not After : Jun 29 17:00:55 2025 GMT
Subject: CN=a65290a5b3c1f1d113eee3d0fda1c36c99e0fff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:af:e4:a6:fa:17:10:30:de:62:42:04:0a:3c:
a4:ee:79:ac:f5:13:b8:78:98:b6:0d:57:9b:b6:f2:
dd:d6:9c:b9:87:73:18:ab:89:f2:8a:e6:d5:37:ab:
35:84:4e:3f:8c:16:89:e2:dd:54:25:83:9f:48:f0:
79:72:c7:37:f8:c4:48:63:48:95:5c:4a:5d:80:94:
30:5e:88:fc:cf:36:59:3c:06:24:6b:7d:07:72:1b:
9a:15:84:ae:7e:b6:39:ed:72:6f:a6:12:6a:2b:6c:
e9:15:ac:60:df:3f:f1:fd:e5:7f:6d:17:84:96:31:
19:6c:f1:d7:2b:12:c6:8a:1f:68:f7:f2:5f:5d:fb:
db:ba:f3:a0:83:46:f5:9b:ec:9f:71:19:eb:20:f7:
c4:ab:b2:8f:db:ab:44:af:35:41:75:73:b1:33:8c:
d1:30:40:b2:60:0c:1e:ff:68:ef:86:34:cd:98:88:
59:16:ab:5e:34:48:44:2b:cc:ad:7a:98:52:4a:b1:
84:31:5e:6d:dc:92:88:b1:e2:0f:78:94:23:73:3d:
58:98:98:88:ff:91:cf:3c:27:9f:8c:45:fc:12:a4:
c3:c5:c5:19:4f:13:9c:5c:88:48:39:23:0b:bb:eb:
24:57:89:0f:c5:6d:5e:c3:5e:bd:97:fa:22:c1:f0:
b9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:52:90:A5:B3:C1:F1:D1:13:EE:E3:D0:FD:A1:C3:6C:99:E0:FF:F3
X509v3 Authority Key Identifier:
keyid:33:AE:39:99:84:D7:37:4B:2A:8E:0A:F7:2D:2B:FC:F1:05:C8:61:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M645mYTXN0sqjgr3LSv88QXIYVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/62846e-0189-468d-a8d3-1a8daff11e0c/1/M645mYTXN0sqjgr3LSv88QXIYVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:f8:23:73:c5:77:19:3c:0d:f4:a4:5c:ec:61:f1:f7:8f:95:
f3:a5:8e:9c:cc:31:ed:ce:67:0f:b3:24:25:ab:84:0c:f5:47:
e6:92:e8:76:9b:65:ee:14:32:93:79:b5:f9:3b:ad:98:6d:05:
4e:9e:24:c4:a5:41:03:88:bc:85:c0:38:14:cd:c2:87:6b:11:
01:fd:7c:b1:9e:c9:ee:8e:53:ea:0a:bd:1c:4f:42:b1:11:b3:
25:0d:a7:3b:d2:53:e1:97:83:57:37:b3:ba:00:03:9d:f0:65:
85:4f:99:8a:e9:42:50:75:37:f0:ea:5c:d0:a8:c5:8b:22:87:
29:4c:79:9f:58:f7:2e:00:02:1a:da:a0:98:0e:c4:55:ce:92:
df:28:cc:84:85:92:78:eb:31:fc:c8:77:85:41:47:a5:fd:e3:
6e:9e:d6:65:71:12:c8:47:a9:04:3f:7c:93:c5:7c:51:89:79:
64:49:b1:c2:6d:cc:fa:2e:7b:fc:ca:1c:d4:ac:bf:c0:52:6f:
06:8e:ce:a3:68:59:68:40:23:e6:5e:7e:12:6d:72:25:2e:d6:
b4:2b:de:33:79:cd:87:39:db:2b:ee:85:2e:62:af:6b:d1:71:
f7:51:f6:4d:0b:3d:27:51:0a:d1:a8:81:ac:a7:d5:fe:48:10:
f9:af:f6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:43:47 2025 by rpki-client