Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.mft
File: cM9eaXxglK22vJcVazXgBf1M8uI.mft (raw, json)
Hash identifier: Mtg43jnNp0FMnpJeLgIOcLjVkuS9LLVvzaBxSpGeIZA=
Subject key identifier: 69:E8:B2:4D:6E:5F:00:3F:E5:E4:0B:D4:B8:9B:60:77:42:44:56:C3
Authority key identifier: 70:CF:5E:69:7C:60:94:AD:B6:BC:97:15:6B:35:E0:05:FD:4C:F2:E2
Certificate issuer: /CN=70cf5e697c6094adb6bc97156b35e005fd4cf2e2
Certificate serial: 0198843182D40A58A44DE83BFFBAE5D74A92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cM9eaXxglK22vJcVazXgBf1M8uI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.mft
Manifest number: 161F
Signing time: Thu 07 Aug 2025 11:01:33 +0000
Manifest this update: Thu 07 Aug 2025 11:01:33 +0000
Manifest next update: Fri 08 Aug 2025 11:01:33 +0000
Files and hashes: 1: ZMvF8N06VsuZ5tNxMMczzsSTe5w.roa (hash: D7vN+YdR9s6oznh1bq9p5ngAxVIRYXDWMiWld/VomNA=)
2: cM9eaXxglK22vJcVazXgBf1M8uI.crl (hash: PWSd8kWP9hguXr+EUZKg+01JIf/cV6TasdJCbiVKH0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cM9eaXxglK22vJcVazXgBf1M8uI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:31:82:d4:0a:58:a4:4d:e8:3b:ff:ba:e5:d7:4a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cf5e697c6094adb6bc97156b35e005fd4cf2e2
Validity
Not Before: Aug 7 11:01:33 2025 GMT
Not After : Aug 8 11:01:33 2025 GMT
Subject: CN=69e8b24d6e5f003fe5e40bd4b89b6077424456c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f8:04:49:2e:12:10:98:1c:c6:08:08:9b:a9:
ea:6e:a3:97:47:b5:f4:d4:24:7c:0c:f7:42:58:ce:
b0:47:56:ff:38:b6:9d:36:fb:6a:5c:27:0f:3b:02:
27:f7:a3:10:8d:bf:47:4b:d6:0b:1e:8e:77:3f:ae:
f1:93:2b:b0:31:20:f2:dd:61:51:80:7c:44:e2:b6:
f6:e1:bf:44:93:da:74:2a:2f:62:3e:67:2f:c0:fa:
a4:48:57:1f:67:fb:ed:f3:fc:ca:01:6c:47:52:0d:
ea:35:9b:c2:88:18:d6:79:6d:76:fa:09:25:99:81:
6f:0f:56:cf:ab:fe:eb:e8:67:cc:ab:48:cb:33:5f:
03:f1:ec:38:40:fd:c0:1e:e2:91:03:87:56:f0:c8:
42:0a:b6:e2:76:2d:a7:c0:a7:8d:e3:8a:b3:f8:2e:
74:51:5b:78:c8:f8:16:3f:a2:67:87:6e:50:79:fb:
35:58:45:ae:44:85:ce:ab:bd:63:f0:76:81:91:c2:
8e:72:d7:d0:7c:8c:f8:1a:94:b0:58:51:26:2b:ed:
cb:fd:e4:20:8e:31:7c:57:7a:ca:54:97:5a:ca:8f:
a6:f6:45:07:ab:1c:e6:3f:31:3e:c1:0a:0d:54:64:
b7:69:3c:33:54:ef:33:df:e9:2a:da:1f:37:68:f6:
43:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E8:B2:4D:6E:5F:00:3F:E5:E4:0B:D4:B8:9B:60:77:42:44:56:C3
X509v3 Authority Key Identifier:
keyid:70:CF:5E:69:7C:60:94:AD:B6:BC:97:15:6B:35:E0:05:FD:4C:F2:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cM9eaXxglK22vJcVazXgBf1M8uI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:69:ca:8f:42:c6:16:b5:e0:4c:b5:0b:83:6c:bd:08:91:08:
97:6a:b7:dc:3e:07:69:15:65:27:58:33:37:73:29:c8:48:ba:
4d:3e:42:7e:dc:e2:3c:a4:be:14:81:b3:de:de:ff:8e:83:2a:
0b:49:e5:f5:be:0f:dc:1f:ba:0d:ba:95:b2:96:19:66:47:97:
92:33:59:b9:81:8f:ff:48:10:62:3c:7d:f8:60:8d:9b:2c:38:
00:cf:ef:03:dd:d6:f2:09:bd:cd:36:b1:cf:c6:f4:20:f5:19:
6a:75:31:48:73:a4:fe:2f:1d:dc:91:7e:09:5f:15:3b:15:6f:
8f:4a:15:ff:6f:5c:a9:25:3d:ba:90:66:22:db:b9:96:66:25:
b9:07:37:e2:7d:61:5f:dc:90:58:a3:b4:c2:87:43:84:c1:4c:
be:c1:85:6f:ec:a3:2d:78:65:ad:cf:7e:f0:90:9a:6b:88:8d:
63:6a:29:4b:82:f5:2d:84:14:8c:c0:ed:87:46:69:a3:5f:e0:
ab:b9:c2:aa:37:27:07:f5:ac:29:d8:39:30:10:f4:6a:ac:db:
26:bb:ef:1b:78:9b:26:07:d7:e8:ed:29:e4:ef:b2:8b:58:1e:
26:4f:ba:7e:d2:17:7a:84:94:2a:6e:85:ba:9c:8f:c0:e1:f7:
e0:3a:9a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 13:10:36 2025 by rpki-client