Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.mft
File: M5VDMDSfV1Aqdq5umZh-_D47gQk.mft (raw, json)
Hash identifier: e5G1tVek4Oz2g0oEpbqVNXwDSMjzpeR20nOPZDNOgn8=
Subject key identifier: F0:BD:23:37:30:19:B8:62:6F:70:95:5F:DD:5C:3B:3B:28:79:FA:4F
Authority key identifier: 33:95:43:30:34:9F:57:50:2A:76:AE:6E:99:98:7E:FC:3E:3B:81:09
Certificate issuer: /CN=33954330349f57502a76ae6e99987efc3e3b8109
Certificate serial: 019884D59D8478C44998C00AFB1537675CC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M5VDMDSfV1Aqdq5umZh-_D47gQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.mft
Manifest number: 1628
Signing time: Thu 07 Aug 2025 14:00:48 +0000
Manifest this update: Thu 07 Aug 2025 14:00:48 +0000
Manifest next update: Fri 08 Aug 2025 14:00:48 +0000
Files and hashes: 1: M5VDMDSfV1Aqdq5umZh-_D47gQk.crl (hash: Kv2BFv0sFZcMZP5bjEN+Np6dyidAiTitwGiJOyTHEpE=)
2: S8_Fg8ytFF0tZ9kXzqLdIHZcAe4.roa (hash: k0MUzfyKgSwFW5KYtO8cWP9faKM6iooPUUBEmeIqdP0=)
3: dZXpVyrQ8VbKvAp5COr0Cumw1Ew.roa (hash: tReFkDEyNqbnnxeZucnGGCRzuWm3mLRotTGRZWTwBCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/M5VDMDSfV1Aqdq5umZh-_D47gQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:d5:9d:84:78:c4:49:98:c0:0a:fb:15:37:67:5c:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33954330349f57502a76ae6e99987efc3e3b8109
Validity
Not Before: Aug 7 14:00:48 2025 GMT
Not After : Aug 8 14:00:48 2025 GMT
Subject: CN=f0bd23373019b8626f70955fdd5c3b3b2879fa4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:7f:76:0b:76:d5:71:d0:8b:7c:d1:5e:40:cb:
7d:c3:79:84:3d:f2:64:88:c6:3b:4d:5d:3a:ed:1d:
b7:61:b8:32:a3:cd:fc:79:15:ab:51:21:dc:0d:d7:
41:e4:a9:76:b7:0b:0e:d2:f8:d5:7d:f5:fd:e9:c4:
e9:5d:a0:09:62:86:6f:8c:18:3f:e6:82:92:ba:f7:
e6:79:42:c3:bf:24:5a:b4:46:f3:27:fb:4d:aa:e4:
e4:1b:4a:dd:81:8a:cb:85:46:9f:72:81:c9:00:11:
87:43:a4:ef:fc:6b:79:47:af:35:d4:cc:73:31:35:
4e:f0:03:61:fd:0f:0f:aa:43:9d:ac:07:7b:90:f1:
0d:00:73:43:18:b2:40:6a:7d:53:09:a6:e5:68:e5:
06:2d:94:f6:00:e3:29:41:fc:94:88:5c:69:84:83:
ba:dd:ac:72:c4:7a:a7:72:0b:a8:e4:45:39:a3:95:
96:c8:fa:3d:9e:e9:f4:62:b4:fa:98:45:8d:ad:b3:
dd:cf:cf:49:78:22:0d:90:ba:8a:8e:88:83:3e:2b:
53:88:8d:ed:1c:06:96:3b:77:aa:9d:60:9a:fe:55:
7f:88:a7:66:4e:bc:18:fd:8b:41:b3:5f:ce:95:86:
4a:22:1c:cb:91:e9:f3:67:79:b2:62:ba:64:f8:8c:
ad:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:BD:23:37:30:19:B8:62:6F:70:95:5F:DD:5C:3B:3B:28:79:FA:4F
X509v3 Authority Key Identifier:
keyid:33:95:43:30:34:9F:57:50:2A:76:AE:6E:99:98:7E:FC:3E:3B:81:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M5VDMDSfV1Aqdq5umZh-_D47gQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:af:47:78:69:33:d7:0d:d1:34:c1:4b:4f:57:13:7d:8b:0d:
9a:fb:bb:1a:4b:05:10:1e:8e:17:7c:90:3e:b9:da:be:26:12:
2e:16:9e:8d:d2:0d:d1:8c:02:d5:97:34:58:9b:f4:62:16:53:
c9:a5:80:87:0e:27:7c:5f:eb:24:fc:47:a5:1c:d2:b4:75:2d:
ee:05:42:a0:56:c2:12:1e:98:b8:db:fa:5b:00:fb:df:d1:96:
6a:e7:93:3d:c3:15:35:6b:f3:e1:3f:bd:1d:06:f8:36:dd:93:
4f:e3:b7:b2:58:5f:7c:52:8b:17:c9:86:7a:a1:48:f7:aa:e0:
c6:7c:65:9e:2c:94:f4:18:c9:52:5c:4e:8f:db:da:7b:0c:df:
94:9a:61:a9:14:fd:06:b6:b8:31:45:c0:6e:e1:52:9f:7d:69:
5c:54:de:63:bc:61:21:8e:fe:c5:9a:8a:3b:33:3e:87:f6:1a:
f0:da:c9:a4:99:51:a5:d7:81:99:a4:20:3a:ac:7c:cd:1b:e9:
79:e1:70:68:d8:65:83:94:4c:81:34:ad:64:eb:3d:97:b0:bb:
53:f5:24:ed:be:43:a4:07:31:0a:9f:1a:ae:cb:1c:2a:db:46:
03:6d:a9:ce:bc:be:15:ab:2b:b8:b3:6d:cd:a0:99:e4:c9:94:
b5:3e:d0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:37:40 2025 by rpki-client