Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft
File: M69dxinNSTdZfz_NhYylyA7ZfFA.mft (raw, json)
Hash identifier: SXtoNcPY5RqURdwe3h6U/IUuH1uZSUC1FcJfU4SygbM=
Subject key identifier: 12:3D:0F:84:2B:6C:85:C9:D8:BD:3B:1C:BC:03:90:E7:28:DD:C4:41
Authority key identifier: 33:AF:5D:C6:29:CD:49:37:59:7F:3F:CD:85:8C:A5:C8:0E:D9:7C:50
Certificate issuer: /CN=33af5dc629cd4937597f3fcd858ca5c80ed97c50
Certificate serial: 0198733D8AF34485BDB9FBA2F3B0014901C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 04:01:09 +0000
Manifest this update: Mon 04 Aug 2025 04:01:09 +0000
Manifest next update: Tue 05 Aug 2025 04:01:09 +0000
Files and hashes: 1: M69dxinNSTdZfz_NhYylyA7ZfFA.crl (hash: pGnvVaTJf4bX78+7zPv5b3d8HzftPsYbDTbL0J1tL0c=)
2: MFfi1uWMm7mX9pdkn5QiwF2Y_88.roa (hash: wkDFcXBuPxZO4E7KTiUs2DofbiNc9cVh0u6ybcZwLbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:8a:f3:44:85:bd:b9:fb:a2:f3:b0:01:49:01:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33af5dc629cd4937597f3fcd858ca5c80ed97c50
Validity
Not Before: Aug 4 04:01:09 2025 GMT
Not After : Aug 5 04:01:09 2025 GMT
Subject: CN=123d0f842b6c85c9d8bd3b1cbc0390e728ddc441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:4c:6e:da:18:ee:f3:43:79:b0:ad:d0:1a:3e:
5e:cf:ef:54:8f:fa:1e:9c:6f:39:fb:4d:ae:b4:f7:
78:fc:b2:c7:2c:8c:67:e6:b8:61:be:11:46:20:c6:
a5:9b:e2:0e:8d:f5:5c:e5:5b:24:99:9d:c3:ef:dc:
52:3b:47:72:e9:84:5a:35:12:6b:50:9a:20:6d:6e:
e5:da:0b:31:c0:67:67:fe:e6:35:3e:25:f7:07:0c:
b7:82:d2:be:ff:81:04:35:56:a3:25:bd:80:a5:ca:
40:56:0c:78:fd:62:3f:6a:73:da:f4:51:9e:1d:62:
24:3f:c0:b3:7e:f3:75:75:9b:75:f7:08:64:6e:4a:
68:3b:6a:f5:5b:dc:2e:ee:06:15:8c:ee:e8:6d:c9:
d5:3f:98:35:bb:16:d1:29:59:51:af:2c:6b:58:c2:
92:32:0f:7c:cd:c0:90:44:c5:9e:f5:b6:38:a3:03:
2d:57:89:04:90:a1:e4:90:0d:c2:5a:97:0a:98:14:
0d:61:cc:e1:96:9f:aa:f0:03:16:30:f9:14:da:27:
b7:a9:55:cc:bd:ff:b1:cf:57:ab:fb:e8:9a:34:38:
b6:9d:ce:f7:69:bc:a6:a1:53:ec:01:e0:07:ff:6b:
c8:97:18:32:93:58:56:fd:d7:36:b3:51:4f:7e:5e:
fb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3D:0F:84:2B:6C:85:C9:D8:BD:3B:1C:BC:03:90:E7:28:DD:C4:41
X509v3 Authority Key Identifier:
keyid:33:AF:5D:C6:29:CD:49:37:59:7F:3F:CD:85:8C:A5:C8:0E:D9:7C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:4d:9b:36:58:50:2e:01:e3:8d:13:39:8b:7b:cb:c3:30:c1:
84:b9:a6:f8:99:ee:2f:28:0c:b6:44:0f:73:4c:2e:85:76:ba:
5b:ea:47:93:96:ca:2e:fe:5f:02:47:b4:d6:cb:4d:15:dc:00:
3d:90:5c:c9:67:2a:33:b7:de:fa:dd:46:d9:c2:61:91:e5:3d:
14:35:ce:e2:03:95:f4:90:1a:a2:e6:ac:c3:f4:01:2b:59:1a:
0e:4d:21:a0:85:1c:e4:f5:cf:bb:ea:03:74:61:ea:ce:f5:2b:
22:81:a5:25:2c:9a:ed:5f:df:6b:97:a3:22:e8:b0:91:e0:92:
3e:91:03:97:36:67:c6:af:9c:64:c0:00:16:4f:e6:bb:e2:70:
b5:f7:10:1f:19:5b:a1:4a:cc:aa:df:a2:98:8e:fb:38:97:e5:
8c:54:ae:93:0b:22:c3:89:f8:d4:83:63:b7:92:5e:44:d9:3d:
69:07:69:9c:c0:23:78:63:b4:6b:32:70:11:ca:1c:25:45:52:
fd:8f:0d:9c:35:b2:97:13:14:89:70:4b:0c:0a:e6:ba:d2:85:
a0:c0:20:b9:c4:8c:fb:79:cc:e9:72:32:23:fa:5e:63:00:69:
69:e4:99:48:dc:7e:85:7e:f9:6a:74:da:a4:66:29:15:1a:39:
89:bf:ee:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:13:06 2025 by rpki-client