
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
File: M-oI76mz94ye-dt2etwh3WGDTg8.mft (raw, json)
Hash identifier: ghMdomKXeJAolUF8oQrGNNOUsbfUj6FBacjR2Rv6Zww=
Subject key identifier: EB:B6:B9:0E:FA:3C:E9:79:A6:B1:86:51:31:42:FE:0E:C9:AC:20:26
Authority key identifier: 33:EA:08:EF:A9:B3:F7:8C:9E:F9:DB:76:7A:DC:21:DD:61:83:4E:0F
Certificate issuer: /CN=33ea08efa9b3f78c9ef9db767adc21dd61834e0f
Certificate serial: 01989592123D4AAACF95028D82E4651A0318
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
Manifest number: 1629
Signing time: Sun 10 Aug 2025 20:00:34 +0000
Manifest this update: Sun 10 Aug 2025 20:00:34 +0000
Manifest next update: Mon 11 Aug 2025 20:00:34 +0000
Files and hashes: 1: 9pGdNh0dkqM5WJr2d64Db3VyTiU.roa (hash: YFjcGwYG51ckAsTGEaarqbVHwri0cUu+NrZNkgCyAVM=)
2: M-oI76mz94ye-dt2etwh3WGDTg8.crl (hash: fWW6yrmSLeFfDNQtBQsXgxs61gv/n19bqHPv3Evl4IQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:92:12:3d:4a:aa:cf:95:02:8d:82:e4:65:1a:03:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33ea08efa9b3f78c9ef9db767adc21dd61834e0f
Validity
Not Before: Aug 10 20:00:34 2025 GMT
Not After : Aug 11 20:00:34 2025 GMT
Subject: CN=ebb6b90efa3ce979a6b186513142fe0ec9ac2026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:73:76:86:49:57:7c:12:2f:cb:a8:2b:74:75:
e3:13:f0:67:0d:55:18:05:3a:86:1e:e0:37:42:d4:
74:a5:38:eb:86:32:43:75:8b:11:06:7d:0c:9d:04:
95:a9:b1:e4:80:4a:6f:03:e5:ba:a1:53:76:b2:d3:
0c:1e:5c:35:66:f7:f7:54:4f:b4:7d:8b:1c:77:7f:
a8:5a:48:e6:0d:7e:3d:8e:ef:4c:55:bb:bc:40:13:
73:92:c1:c1:1e:6f:c6:69:6c:61:44:82:79:a6:34:
5d:b3:6e:5d:a1:27:b4:00:f2:de:77:cf:6b:f1:0d:
d2:0b:0d:85:97:92:4d:38:da:48:67:bc:20:0a:f4:
15:b0:f9:2a:89:2e:3c:d0:3d:df:99:65:5d:32:c5:
b6:af:71:80:42:37:73:c3:52:da:3f:ec:41:d0:d5:
53:32:c5:10:5a:45:25:f3:7b:ff:1a:db:82:47:f8:
a9:26:e3:3b:b5:86:64:ac:6e:49:de:f7:b8:65:c9:
2f:d6:a7:3d:65:c3:b2:2f:37:86:0b:5f:d8:bc:55:
4a:1b:1b:be:9f:97:f4:de:a9:fa:8e:04:a4:bd:b4:
c6:b4:1d:a5:1f:78:be:67:26:84:35:21:ea:07:7c:
60:b7:25:23:5b:0e:19:7d:88:30:18:cc:39:87:2c:
1f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B6:B9:0E:FA:3C:E9:79:A6:B1:86:51:31:42:FE:0E:C9:AC:20:26
X509v3 Authority Key Identifier:
keyid:33:EA:08:EF:A9:B3:F7:8C:9E:F9:DB:76:7A:DC:21:DD:61:83:4E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:d5:0a:3c:bb:3e:0a:4d:6e:ef:00:6b:1b:0d:32:23:ae:61:
50:c6:bf:db:41:e9:cb:80:f2:29:62:3a:5a:97:45:44:f8:d4:
a5:c0:8b:3e:91:fb:34:d1:9a:bd:1d:75:e1:41:47:de:8c:06:
c1:68:8b:8a:f5:1b:79:5c:3a:5b:da:b2:37:58:76:3f:11:ec:
ab:39:16:e2:34:9f:b0:f2:00:8e:8b:49:a9:3a:1f:1f:d9:6a:
e5:c1:35:c2:53:af:7f:d9:14:71:8e:a4:15:b2:2e:94:e2:12:
1b:37:03:48:01:8c:96:f1:c6:2e:b6:f9:14:33:35:f5:a4:d0:
8f:d2:42:55:4e:45:c1:ec:cc:ac:0b:df:72:f3:ab:3a:16:6a:
d9:4d:6b:c6:a7:f2:ee:02:ae:76:af:6c:93:ff:ea:07:05:55:
3d:14:8f:48:6c:d0:e4:ad:d6:3c:fc:e6:5b:1d:75:b5:09:90:
f0:52:07:b1:19:a5:68:91:a0:17:2f:14:c3:81:da:61:24:c1:
93:4b:b5:08:ff:98:a7:f6:16:5b:11:7e:36:c1:ba:2b:ce:f3:
4e:1d:24:05:e8:af:7d:9b:2a:fd:41:00:7c:0a:3a:75:b0:f2:
76:0f:35:74:80:c1:7e:ec:d4:0f:6b:c6:e4:d3:a9:28:fa:0a:
bb:ad:a7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:10:47 2025 by rpki-client