Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
File: M3L10Rir0Ska4kjmxp1kqZqa7wY.mft (raw, json)
Hash identifier: 2ft4/0lsQUlhtajxpJHsWDKsXyAadtIgDfEqDTNkbLI=
Subject key identifier: 45:67:95:F0:A7:0F:D9:0B:27:4A:C4:5A:A1:01:7F:DD:17:F3:7C:8E
Authority key identifier: 33:72:F5:D1:18:AB:D1:29:1A:E2:48:E6:C6:9D:64:A9:9A:9A:EF:06
Certificate issuer: /CN=3372f5d118abd1291ae248e6c69d64a99a9aef06
Certificate serial: 01988FC72C4AF119487AF19C185A9A8741D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
Manifest number: 0C54
Signing time: Sat 09 Aug 2025 17:00:51 +0000
Manifest this update: Sat 09 Aug 2025 17:00:51 +0000
Manifest next update: Sun 10 Aug 2025 17:00:51 +0000
Files and hashes: 1: M3L10Rir0Ska4kjmxp1kqZqa7wY.crl (hash: d2S4qI3nfrQ9T6YW4zOjeQJezuQAD5JpJmqi/jMSNDA=)
2: NH9bJkmOLcBYnLsAYTfcsFMJkSM.roa (hash: sPNuwdbSLXSgaPh+BpoER3Hzbei/qqQBt4s/TVbjmVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:c7:2c:4a:f1:19:48:7a:f1:9c:18:5a:9a:87:41:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3372f5d118abd1291ae248e6c69d64a99a9aef06
Validity
Not Before: Aug 9 17:00:51 2025 GMT
Not After : Aug 10 17:00:51 2025 GMT
Subject: CN=456795f0a70fd90b274ac45aa1017fdd17f37c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:50:13:14:4f:e9:6c:4a:56:b5:65:7d:d8:83:
18:05:5e:9d:9a:0b:81:9c:51:b7:08:34:0c:f8:c7:
f4:d2:d9:33:ce:c4:07:7e:ab:22:73:88:db:06:f7:
65:1e:4f:10:d2:a3:6d:7e:eb:e4:76:5d:0c:e4:e1:
4c:a6:b5:3a:87:28:39:91:6d:53:65:96:cf:9b:de:
af:11:d8:ab:9a:34:be:fa:6a:65:37:cd:eb:d1:e7:
a3:fb:21:7e:be:ca:f1:00:0b:58:e9:d2:dc:6a:19:
c9:c7:a9:ed:3b:ad:0a:16:af:d2:40:e0:40:f3:d8:
61:a3:fc:58:c3:90:c1:8c:88:9d:65:a1:3e:95:0c:
6e:e2:9d:d4:36:45:a9:97:f1:32:53:5c:f4:a4:74:
7f:d2:cc:93:69:f0:21:4a:9a:5d:29:0e:ec:c4:cc:
bb:ab:fe:19:56:c3:1b:08:bb:a3:c0:ad:5b:12:36:
bb:5d:37:cc:5a:0a:20:77:f4:56:3a:0e:10:fe:f8:
d0:ad:2b:f3:df:9e:a8:29:c6:57:dc:4b:92:f7:3b:
26:1f:74:5f:fb:22:ff:f4:7b:71:73:18:07:28:b0:
d0:88:bb:53:78:f0:3f:c5:a1:e0:67:87:89:48:0b:
ea:82:8d:d7:09:9c:81:7b:8c:93:63:96:20:95:aa:
96:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:67:95:F0:A7:0F:D9:0B:27:4A:C4:5A:A1:01:7F:DD:17:F3:7C:8E
X509v3 Authority Key Identifier:
keyid:33:72:F5:D1:18:AB:D1:29:1A:E2:48:E6:C6:9D:64:A9:9A:9A:EF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:6b:8c:e3:f0:e6:97:c1:08:2d:df:d4:2d:4c:a3:18:aa:2e:
2d:55:cb:14:84:ef:be:ec:ff:b9:59:dd:09:01:4b:7b:4c:d1:
f8:eb:f4:a5:3f:5a:26:1f:d0:f8:9b:38:7d:cb:09:ad:13:17:
0f:06:f6:b4:cd:02:16:1d:84:cf:96:76:98:65:21:35:97:35:
5a:96:ad:06:b2:96:cd:cb:e5:c4:ca:de:d1:1e:ad:d6:4d:18:
d0:ff:44:b7:a7:f6:4e:64:d2:94:ad:c5:e1:07:14:2f:15:10:
fd:85:6e:fe:4b:98:66:dd:4b:93:be:a0:d4:b8:90:9a:54:e9:
92:22:86:fd:33:b3:18:1e:d6:46:20:48:dc:eb:53:64:c6:76:
95:5b:60:75:cd:e9:49:85:7f:52:38:77:af:7f:7f:19:e3:1e:
e6:75:44:ea:cd:da:48:05:83:82:6d:4e:79:fa:33:5a:c5:0b:
46:fd:03:37:0f:b4:c1:ec:93:e0:ee:18:89:de:dc:ed:0b:07:
17:30:39:e1:d1:68:81:15:2b:bb:af:8d:b1:ba:5e:f5:9e:b0:
37:6e:e6:2c:dd:4a:fb:e3:f6:1f:23:b3:6c:c1:c6:d4:7c:55:
4b:e0:62:a9:ae:87:6f:96:23:9b:df:dc:ca:e9:e6:39:34:01:
fd:bd:41:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:41:48 2025 by rpki-client