Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft
File: M7psC8yhbGhdx7myfxmbQrS-7uk.mft (raw, json)
Hash identifier: gIL4oiqixF0PrcqmSTZB8HOuhQuyxPz0EDhduVsN1iE=
Subject key identifier: 44:63:B6:C1:77:CC:68:AE:3F:6D:AA:1D:CA:55:8B:3A:6D:73:02:35
Authority key identifier: 33:BA:6C:0B:CC:A1:6C:68:5D:C7:B9:B2:7F:19:9B:42:B4:BE:EE:E9
Certificate issuer: /CN=33ba6c0bcca16c685dc7b9b27f199b42b4beeee9
Certificate serial: 0198925A50CFB77998683BE033186C3896A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7psC8yhbGhdx7myfxmbQrS-7uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft
Manifest number: 0D84
Signing time: Sun 10 Aug 2025 05:00:49 +0000
Manifest this update: Sun 10 Aug 2025 05:00:49 +0000
Manifest next update: Mon 11 Aug 2025 05:00:49 +0000
Files and hashes: 1: M7psC8yhbGhdx7myfxmbQrS-7uk.crl (hash: z5UEhvXXIQg1O3EBS5R3Nr4mXDQXMgOWzGoa4mFq0z8=)
2: YsLZoqZw6u24llC00PtDDR7Qp3Q.roa (hash: xyGbGlbgzc0VPKZXK9Mhkv3PJ7Wng5W2DCI8eLTmYC0=)
3: kPhGzXODbRD6DaiKt_1D_SiuRQ8.roa (hash: 9eEDMcEOBSRwouzuH08DzSkvaYWRY3j//V52rGTuy7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7psC8yhbGhdx7myfxmbQrS-7uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:5a:50:cf:b7:79:98:68:3b:e0:33:18:6c:38:96:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33ba6c0bcca16c685dc7b9b27f199b42b4beeee9
Validity
Not Before: Aug 10 05:00:49 2025 GMT
Not After : Aug 11 05:00:49 2025 GMT
Subject: CN=4463b6c177cc68ae3f6daa1dca558b3a6d730235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:01:2b:c8:df:53:c6:92:bd:8d:1e:9f:6e:ab:
73:34:6e:6f:26:27:7c:07:55:68:b7:54:97:db:e5:
d7:68:ff:44:02:86:ad:18:e5:a8:00:47:81:5e:f1:
7a:3e:55:5a:4e:e0:bc:69:97:42:e1:19:e5:4f:36:
86:b6:28:a5:43:5b:6a:23:18:f4:fd:0b:c2:52:23:
c5:f0:7d:7a:b5:b2:a3:76:e0:7d:63:ad:6b:3c:a5:
6d:88:c1:5e:7f:47:3d:d7:29:91:b9:18:c5:92:d8:
02:8a:15:90:60:25:f7:25:0c:dd:f7:f1:1f:d8:46:
04:0f:8d:01:bd:c1:77:4d:e5:1d:76:dc:bb:9a:87:
7c:51:18:5b:e2:bd:b1:df:23:07:c9:35:90:cf:3d:
bd:c1:c7:38:36:3d:8e:0d:88:5d:86:e5:03:fe:7c:
ac:20:5e:31:ff:a6:af:12:76:91:7d:e7:7e:7b:18:
dd:30:a8:8f:42:a3:b8:c4:bd:7e:fc:6a:57:d8:e1:
2a:84:ce:d1:a3:ea:94:42:6d:96:15:4e:3d:4d:48:
b5:c6:8a:76:79:c3:fa:f5:da:87:94:e6:08:13:36:
c7:47:2d:9f:1e:12:14:96:4e:b3:6a:30:e7:bf:70:
06:7e:a9:5d:58:3a:ea:b4:db:32:5c:25:8b:06:81:
67:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:63:B6:C1:77:CC:68:AE:3F:6D:AA:1D:CA:55:8B:3A:6D:73:02:35
X509v3 Authority Key Identifier:
keyid:33:BA:6C:0B:CC:A1:6C:68:5D:C7:B9:B2:7F:19:9B:42:B4:BE:EE:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7psC8yhbGhdx7myfxmbQrS-7uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:9b:e5:4a:ee:72:4d:a4:42:7c:d9:1e:11:d7:ee:82:4b:90:
6f:2f:4a:ec:68:44:85:20:93:06:40:b1:84:08:08:73:8a:23:
7b:03:bf:0c:17:e5:23:82:0b:ad:90:0f:74:a9:54:83:d3:58:
08:9d:e2:1f:a6:48:38:45:a6:44:8f:6e:8f:79:8c:e2:8f:41:
4d:ac:f5:a6:03:51:7a:5f:62:e2:a3:08:c2:f3:3e:df:cf:cb:
4a:69:43:73:87:10:ae:4a:7b:a9:24:4a:4f:9f:4e:3b:f1:15:
75:4e:a2:58:0c:42:0b:28:5d:86:b4:bd:a3:d3:5f:22:a2:6c:
f0:d1:1d:f8:fe:c7:5f:c3:50:26:6a:f0:ba:dc:f8:55:90:b4:
55:28:c3:d4:2c:d0:8f:5b:df:4e:7d:e9:b0:57:98:32:f4:6f:
cf:6f:79:39:ab:2e:25:2d:16:78:81:41:dd:8b:24:bd:06:93:
e4:f3:84:aa:0d:eb:6d:60:93:09:35:bf:1c:e6:07:33:e3:64:
76:02:8d:d0:ee:85:47:47:26:a0:b6:98:a2:7f:2f:6b:c9:db:
fc:e4:7b:c9:bc:a9:cc:32:01:0f:53:49:14:94:1d:09:a0:55:
ab:72:2c:f5:75:d3:f3:7a:4e:04:db:61:96:e1:63:6f:8d:ad:
72:b5:11:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:47:45 2025 by rpki-client