Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft
File: M7psC8yhbGhdx7myfxmbQrS-7uk.mft (raw, json)
Hash identifier: RcltaUhxJX+Mx5aIOCQLRzAPKYF/0D+E3SmP0b6BR+Y=
Subject key identifier: D4:BB:9B:AE:89:97:EE:84:09:32:C4:BA:F6:6E:9B:F5:81:8F:12:9F
Authority key identifier: 33:BA:6C:0B:CC:A1:6C:68:5D:C7:B9:B2:7F:19:9B:42:B4:BE:EE:E9
Certificate issuer: /CN=33ba6c0bcca16c685dc7b9b27f199b42b4beeee9
Certificate serial: 01977E3106246AC5D64438CDE9C819C281E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7psC8yhbGhdx7myfxmbQrS-7uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft
Manifest number: 0CF5
Signing time: Tue 17 Jun 2025 14:00:31 +0000
Manifest this update: Tue 17 Jun 2025 14:00:31 +0000
Manifest next update: Wed 18 Jun 2025 14:00:31 +0000
Files and hashes: 1: M7psC8yhbGhdx7myfxmbQrS-7uk.crl (hash: ew+t5cdxlB943CByLgqcrdwEzyinX15qcTgFcmBTVM0=)
2: YsLZoqZw6u24llC00PtDDR7Qp3Q.roa (hash: xyGbGlbgzc0VPKZXK9Mhkv3PJ7Wng5W2DCI8eLTmYC0=)
3: kPhGzXODbRD6DaiKt_1D_SiuRQ8.roa (hash: 9eEDMcEOBSRwouzuH08DzSkvaYWRY3j//V52rGTuy7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7psC8yhbGhdx7myfxmbQrS-7uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:31:06:24:6a:c5:d6:44:38:cd:e9:c8:19:c2:81:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33ba6c0bcca16c685dc7b9b27f199b42b4beeee9
Validity
Not Before: Jun 17 14:00:31 2025 GMT
Not After : Jun 18 14:00:31 2025 GMT
Subject: CN=d4bb9bae8997ee840932c4baf66e9bf5818f129f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:86:68:9f:0b:23:23:ff:38:51:69:32:02:ce:
a9:21:1d:5c:3f:0e:97:9d:b2:f3:b4:69:2e:40:e4:
de:48:2e:65:3c:49:34:64:30:36:d0:b8:04:0c:ba:
05:ef:97:17:f7:9e:2e:5a:d2:05:bd:a5:16:2f:2b:
5b:8a:c9:01:0d:54:2d:65:6b:48:2f:7f:1f:8b:14:
c4:6c:79:3d:07:3a:4c:fb:0c:25:2b:84:15:4c:75:
c9:19:f1:bd:9e:aa:ed:ef:cb:86:c0:06:1e:51:b0:
e0:e9:fc:b1:01:56:a5:b4:0d:6f:5d:3d:22:ad:4c:
5d:21:51:8a:71:4a:c1:d1:9d:b0:e0:22:5d:5c:a6:
b2:13:7d:e1:ca:28:4b:eb:ae:7c:5f:b8:28:52:ab:
02:8b:30:73:1e:c0:b5:4a:5e:bc:bd:ae:b2:52:7e:
5a:5b:4a:ae:2e:2f:71:3f:01:88:3e:e5:64:01:45:
fc:7c:9c:88:99:2d:d3:33:5c:0c:2f:f5:a1:dd:39:
22:c5:4e:9b:1d:05:cb:2c:92:84:b3:ca:78:05:c3:
b8:30:2d:31:d3:06:fc:cf:b2:20:4d:90:f0:6e:af:
3d:5a:50:af:7b:f3:6b:7d:e4:6b:22:ce:ab:e6:a4:
61:c6:a5:89:71:4a:f0:84:fb:d7:b2:2e:14:c0:6b:
dc:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BB:9B:AE:89:97:EE:84:09:32:C4:BA:F6:6E:9B:F5:81:8F:12:9F
X509v3 Authority Key Identifier:
keyid:33:BA:6C:0B:CC:A1:6C:68:5D:C7:B9:B2:7F:19:9B:42:B4:BE:EE:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7psC8yhbGhdx7myfxmbQrS-7uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:23:9c:c5:3b:5a:16:0a:68:c7:c7:ef:dd:59:3f:74:41:5d:
cf:56:c1:76:19:b2:96:38:0a:da:6e:72:ee:78:64:df:64:27:
ce:ea:65:7e:69:23:21:16:6d:27:42:a6:e5:da:68:8f:e2:9f:
0c:8e:e4:d5:5c:08:eb:12:a3:11:fe:3d:32:51:86:b5:b0:6b:
3d:04:1e:f5:ce:62:a8:cf:76:2d:ef:5f:56:6c:f1:3b:ad:04:
d2:6f:fd:7a:73:76:20:ef:bc:41:4e:2b:f1:3d:cf:c2:58:e9:
af:b1:f6:36:7e:89:02:a6:b1:fa:3c:f7:d2:f1:66:d6:fa:e2:
cd:fe:ee:81:80:7e:76:b7:ff:9f:5d:e7:2f:d0:3e:bd:c0:fb:
2f:8e:23:b1:ec:4e:05:ff:4a:b3:19:62:41:aa:3b:09:ae:ab:
50:da:82:12:f1:d5:cb:c3:8a:a4:bd:ac:5a:a2:48:e3:1c:b6:
04:c2:8e:76:b0:19:3d:58:da:68:fc:10:52:8f:23:29:c9:5f:
42:5a:27:98:75:fb:39:a8:c6:f5:73:6b:c7:70:e0:6c:b5:00:
5a:6f:58:9f:06:7f:ef:3c:e1:3d:06:ec:c6:82:1b:6a:bf:0f:
52:aa:33:f2:a7:08:90:3d:5c:6a:03:bb:56:33:7d:b9:1b:d9:
10:7a:16:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 19:59:51 2025 by rpki-client