Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft
File: M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft (raw, json)
Hash identifier: yu3AtO6fiqypzlXgqlTQP5rCcddHIHh+NzSSbB53/Fo=
Subject key identifier: 03:5B:69:E4:B0:EE:71:47:9A:C4:DB:18:D6:F1:BA:0B:E0:96:95:A4
Authority key identifier: 33:41:08:75:CA:78:CC:5E:3D:19:2E:05:4A:96:DF:03:02:C7:F9:7A
Certificate issuer: /CN=33410875ca78cc5e3d192e054a96df0302c7f97a
Certificate serial: 0198733CEB46C696E2C0F0EC9C32E6F8B036
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0EIdcp4zF49GS4FSpbfAwLH-Xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 04:00:28 +0000
Manifest this update: Mon 04 Aug 2025 04:00:28 +0000
Manifest next update: Tue 05 Aug 2025 04:00:28 +0000
Files and hashes: 1: HqUdNukgCT5prgnM_K-f0-if2vo.roa (hash: /RVlSM2uyNgy2pOhW4SUxHsDBdur2yik6QdL4JVoNEA=)
2: M0EIdcp4zF49GS4FSpbfAwLH-Xo.crl (hash: UVH7my3QJm/B//XXCcf09RKuYKZNbaLm1V3Zx89M6BQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0EIdcp4zF49GS4FSpbfAwLH-Xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3c:eb:46:c6:96:e2:c0:f0:ec:9c:32:e6:f8:b0:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33410875ca78cc5e3d192e054a96df0302c7f97a
Validity
Not Before: Aug 4 04:00:28 2025 GMT
Not After : Aug 5 04:00:28 2025 GMT
Subject: CN=035b69e4b0ee71479ac4db18d6f1ba0be09695a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e2:2e:49:81:82:5b:fc:f8:19:53:d9:0c:a8:
cf:3f:78:44:8e:c0:16:de:22:1d:51:c2:c7:fd:17:
23:c0:2b:55:7d:34:12:bf:6a:d0:ae:91:08:73:11:
7b:43:2c:4b:b2:3a:62:22:81:96:42:3f:da:ce:41:
7a:c0:bf:1e:56:cf:3c:d3:5a:ec:57:ad:de:98:8c:
f5:c2:34:1a:5a:3b:d6:83:8b:cb:03:6b:fa:96:91:
13:5e:62:d7:d0:eb:29:51:e9:9f:65:01:55:29:75:
97:e1:95:19:32:51:f4:e3:a3:a5:e5:27:48:1c:ed:
81:3e:f2:d0:df:72:ed:1d:87:82:54:4f:c9:78:82:
1e:7c:d2:0e:e5:83:ed:28:e6:a4:04:01:c3:8c:8b:
ba:9d:eb:15:2b:0e:1a:8c:72:b3:c4:dc:34:6d:78:
15:56:e2:77:3a:77:6f:c7:a7:33:f4:8b:c6:b5:01:
b8:84:08:b8:d8:a8:be:82:f9:f0:55:a8:31:eb:f4:
73:ea:2f:94:9f:49:fc:53:b3:a9:59:07:c9:bd:ad:
c5:5a:04:ec:e6:93:0c:00:ec:63:65:12:2d:25:73:
e4:da:3c:ff:5c:99:4b:ce:96:7a:2c:f3:30:e1:cc:
e7:15:97:69:b5:55:d5:3a:16:be:f3:8d:fa:63:75:
c3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:5B:69:E4:B0:EE:71:47:9A:C4:DB:18:D6:F1:BA:0B:E0:96:95:A4
X509v3 Authority Key Identifier:
keyid:33:41:08:75:CA:78:CC:5E:3D:19:2E:05:4A:96:DF:03:02:C7:F9:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0EIdcp4zF49GS4FSpbfAwLH-Xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:8e:6e:99:32:bb:30:03:17:2e:be:4b:80:45:3a:a7:bc:19:
ee:80:83:4d:e1:9f:ec:19:44:7c:f1:e4:09:f1:00:ae:07:30:
a0:3c:c7:d9:04:4f:ab:e5:1b:9f:26:d5:a5:87:3e:b9:1a:e3:
f5:21:fd:d4:b3:2b:92:55:ae:1b:26:e4:9e:37:0c:e6:f6:c0:
84:fb:d8:28:9a:46:e4:49:f6:fc:d3:5e:ed:f3:a0:44:8f:19:
f5:b1:fc:8d:8f:3c:42:d2:c1:a5:89:1d:6e:9f:28:8a:96:38:
a8:1e:4f:03:3a:ee:bb:e4:9b:c0:6d:0d:67:a7:c6:7c:dd:08:
dd:09:3a:9e:b3:64:31:fb:0d:e3:26:ad:cf:54:08:66:98:dc:
9b:a9:c7:d4:b2:1f:f8:d2:31:09:20:d6:dd:2d:80:f2:c3:17:
b7:8f:26:dd:8d:f4:f9:e0:ed:fa:26:67:c7:6a:5a:7f:02:03:
3e:56:d0:9b:8f:fe:bf:83:ce:a9:66:1b:7f:6f:db:81:0d:10:
4b:24:b4:aa:bb:fb:1c:40:b4:45:c6:f9:3f:3b:e4:69:fc:14:
fe:ea:2d:bd:9e:12:1c:f4:a2:63:ab:66:62:e7:16:d8:89:77:
7c:d7:8b:36:06:27:dc:fe:91:8b:c7:7a:b8:3a:18:b7:35:2f:
5c:da:a7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:36 2025 by rpki-client