Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft
File: M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft (raw, json)
Hash identifier: 7+lYicp68SPl1iDbCi/8Mhuvs9enAc3ZXn+qGYe6mGk=
Subject key identifier: DC:70:11:2B:BE:5B:2D:FE:C8:30:16:8A:EE:1A:64:8B:9F:82:15:D4
Authority key identifier: 33:9C:BB:1E:43:9A:3A:71:EB:87:96:69:2F:62:2B:F8:38:F8:48:8C
Certificate issuer: /CN=339cbb1e439a3a71eb8796692f622bf838f8488c
Certificate serial: 0198752BEFFB28DB52F8B5758D12C42466E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft
Manifest number: 161A
Signing time: Mon 04 Aug 2025 13:01:10 +0000
Manifest this update: Mon 04 Aug 2025 13:01:10 +0000
Manifest next update: Tue 05 Aug 2025 13:01:10 +0000
Files and hashes: 1: F3E0kox0yNLNp6GPi3ZmqfgQKTs.roa (hash: UneyfmP6aoU2v1WkHtcA23llsK6rkwb/p+IXrda/FUg=)
2: M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.crl (hash: edR2/qiHQaAivdqSDrRBeWvJgWazgtBS4P3qJgAwJKs=)
3: jukzQpP3Hs9hT3M_u2swPOcw5vQ.roa (hash: /+E7Xpgo8ugKY85NqX64gyU8Uakmwa+zSPYJruYsfmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2b:ef:fb:28:db:52:f8:b5:75:8d:12:c4:24:66:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=339cbb1e439a3a71eb8796692f622bf838f8488c
Validity
Not Before: Aug 4 13:01:10 2025 GMT
Not After : Aug 5 13:01:10 2025 GMT
Subject: CN=dc70112bbe5b2dfec830168aee1a648b9f8215d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a7:39:62:fa:37:53:35:4f:97:04:1b:14:3d:
ec:d1:e6:1f:63:95:e0:9c:cb:6f:e4:6a:19:8d:b5:
0c:48:86:f0:10:a7:89:4b:fb:cc:49:03:15:e9:db:
f8:ea:41:1b:f7:32:f1:89:00:44:1e:b4:c7:e8:53:
65:9d:d3:22:be:42:dd:98:03:8e:c9:80:e5:dc:bd:
70:a8:81:45:ca:aa:25:27:97:28:63:48:85:dd:fb:
32:54:6d:ac:d7:84:eb:1f:1c:61:e2:22:56:6b:27:
3e:43:39:22:b2:ba:d1:96:59:9a:97:84:3b:57:a7:
22:9c:b9:1f:91:0c:b9:c0:c4:89:39:5a:80:c9:40:
0f:49:8c:73:15:69:df:fa:48:18:20:1b:58:fa:79:
34:46:19:8b:54:06:c7:48:fa:d0:41:dc:ab:30:31:
18:b8:29:59:31:bb:04:49:ac:9d:62:93:56:33:2f:
46:d8:98:91:88:c3:81:37:ca:85:41:f9:1c:60:19:
84:51:8a:c7:1a:93:8f:ad:b8:17:57:b2:2c:7b:f0:
d2:6f:f6:47:87:b4:e0:7e:59:5b:b7:de:0f:26:27:
c0:0e:fb:0e:27:71:2a:16:bf:97:d2:e3:a5:e9:27:
46:90:71:a2:5f:c4:bd:e9:54:42:fd:c2:5d:2e:4b:
de:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:70:11:2B:BE:5B:2D:FE:C8:30:16:8A:EE:1A:64:8B:9F:82:15:D4
X509v3 Authority Key Identifier:
keyid:33:9C:BB:1E:43:9A:3A:71:EB:87:96:69:2F:62:2B:F8:38:F8:48:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:79:34:bc:a9:bc:03:11:ae:20:35:44:6d:d3:70:9c:38:34:
32:ee:a3:73:cb:28:37:8c:fe:03:2c:8b:91:51:ab:b0:46:7a:
0f:45:17:13:6d:5c:4a:0d:fc:f5:61:e6:e5:44:f9:85:90:af:
ad:3f:92:a0:e2:47:03:bc:2d:87:88:66:d8:60:c3:39:78:45:
4c:c6:4c:7b:45:25:13:88:42:11:e3:95:54:69:32:bb:0c:af:
35:13:64:01:bd:ff:c8:57:e0:c0:6e:d2:f3:ee:ec:5c:17:bc:
ef:94:11:af:56:1f:2f:7a:3e:8c:47:9b:3d:39:61:30:c5:bc:
ac:4d:bd:b7:02:61:ff:7c:76:73:6a:99:a4:fc:2e:47:03:98:
a7:ca:f3:19:b4:bb:1c:1a:7e:71:8a:91:34:78:7d:de:98:b7:
54:d2:5c:ef:ab:fd:65:fe:03:35:e6:f7:96:30:fb:fa:83:86:
4a:d2:47:cf:31:1e:14:6e:52:72:f4:4a:2d:5b:14:2a:e2:d7:
45:30:56:99:ed:0b:93:fd:59:6c:9d:df:e8:80:d3:22:e8:a8:
70:44:50:c9:67:70:70:fc:85:25:90:7b:b1:01:b6:f5:5a:9e:
35:06:97:92:a0:2a:de:3f:c9:b4:88:53:1b:50:fb:8f:86:8f:
ff:5c:1f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:59:09 2025 by rpki-client