
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft
File: M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft (raw, json)
Hash identifier: XQWaVWrnawcc1ZZp0bgMSwHlW2hizcbwYs5FAx0xgZc=
Subject key identifier: 8D:73:34:0D:79:CA:B6:84:3D:EB:EB:5F:1A:09:C3:91:D7:E3:38:B8
Authority key identifier: 33:EA:19:B6:70:CB:D1:AF:62:07:04:C4:E2:A3:33:08:AB:20:E4:52
Certificate issuer: /CN=33ea19b670cbd1af620704c4e2a33308ab20e452
Certificate serial: 01988BB36352CFFA90C6099DF0F873CD7F71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-oZtnDL0a9iBwTE4qMzCKsg5FI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft
Manifest number: 033B
Signing time: Fri 08 Aug 2025 22:00:45 +0000
Manifest this update: Fri 08 Aug 2025 22:00:45 +0000
Manifest next update: Sat 09 Aug 2025 22:00:45 +0000
Files and hashes: 1: KZ08JkK0sSRvNMx3Ikkq6uBEkO0.roa (hash: hZ8c3KxUe/IuNuwm8qqXzahz1nx8hksDbJXcmHPzZMg=)
2: M-oZtnDL0a9iBwTE4qMzCKsg5FI.crl (hash: iohfdWOr/9aYhwLBajbDvGL5U89RlQPpUODg6Pg48TM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft
rsync://rpki.ripe.net/repository/DEFAULT/M-oZtnDL0a9iBwTE4qMzCKsg5FI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:b3:63:52:cf:fa:90:c6:09:9d:f0:f8:73:cd:7f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33ea19b670cbd1af620704c4e2a33308ab20e452
Validity
Not Before: Aug 8 22:00:45 2025 GMT
Not After : Aug 9 22:00:45 2025 GMT
Subject: CN=8d73340d79cab6843debeb5f1a09c391d7e338b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b6:68:58:86:88:fe:59:d3:1a:39:3a:76:42:
81:af:da:df:ca:be:36:6c:00:a0:75:c0:fb:1e:72:
9d:6d:6b:79:5b:ff:bb:d4:18:be:cf:95:32:42:19:
4f:7c:d4:48:c5:6b:c7:89:8f:eb:0d:36:05:cb:df:
60:a8:1c:e0:56:96:98:b2:cc:cc:aa:cc:14:62:b4:
9e:bc:e3:0f:ef:b2:22:bd:8f:39:d3:c6:5f:cc:a9:
7d:12:d5:bd:7a:42:ae:48:96:f3:af:79:1a:81:f3:
8a:7b:be:33:d3:9d:a0:e1:04:31:5d:ce:92:e8:ac:
d0:f5:85:5c:c3:34:b8:6a:f3:ce:fe:c6:cd:d5:d5:
1f:00:1b:69:f0:f4:d7:7b:18:13:ee:f8:8e:a8:a7:
e1:fd:28:e3:10:23:83:b7:c6:c4:e2:10:2e:66:d6:
7d:30:4c:c9:e5:75:cf:44:b5:72:11:d8:6b:eb:ab:
72:ad:83:47:31:30:b2:4e:82:9b:09:f7:ad:7f:8f:
29:21:17:aa:4b:4a:24:88:d9:29:b5:ba:63:26:e2:
6f:01:92:ef:70:8b:ad:b9:ef:3e:bb:10:3e:f7:87:
72:5a:8f:06:c3:94:46:6c:aa:4d:71:10:aa:15:7a:
56:8f:a0:d0:45:7e:92:a4:02:1d:e1:bb:1c:ca:c6:
cb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:73:34:0D:79:CA:B6:84:3D:EB:EB:5F:1A:09:C3:91:D7:E3:38:B8
X509v3 Authority Key Identifier:
keyid:33:EA:19:B6:70:CB:D1:AF:62:07:04:C4:E2:A3:33:08:AB:20:E4:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-oZtnDL0a9iBwTE4qMzCKsg5FI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e34579-3880-4657-a49a-9ef0e66c3a6c/1/M-oZtnDL0a9iBwTE4qMzCKsg5FI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:14:4b:ca:9f:1c:11:78:fa:9b:06:3d:7b:c1:96:15:ce:b7:
a8:ca:ad:37:1b:10:97:05:ac:8f:04:c4:ea:11:37:73:98:24:
4a:ec:54:17:90:c5:51:fe:01:86:45:67:a3:75:51:d0:d7:45:
d3:51:e8:81:6f:66:f3:91:cd:8b:99:16:9e:25:c7:be:25:b9:
b8:25:99:6e:58:e0:94:52:19:72:ff:ef:5b:b7:8e:9e:d2:d4:
af:64:94:3a:dc:93:4d:ce:ee:e1:64:cc:38:06:b2:7d:0d:de:
46:19:9c:b0:50:d2:39:dd:63:73:54:be:bb:4c:9a:9b:84:b2:
d3:2c:dc:ed:3e:c3:07:8c:cb:5c:55:22:1e:c7:04:20:56:32:
3e:c3:bc:50:a4:31:7e:0f:f8:7d:52:42:e7:c5:45:13:50:5c:
90:0b:d7:8b:3d:e9:f3:f9:da:dc:3c:d3:e2:9d:09:1d:c6:a0:
39:e2:00:b8:64:6f:74:66:5b:54:b3:3b:f5:57:c3:2b:29:8b:
c1:9c:53:5c:65:78:cd:c5:2c:fd:fc:18:48:ca:f6:85:32:76:
dc:9b:99:a5:30:3c:dc:02:5a:fb:e5:82:4e:be:62:69:05:01:
8a:2a:b8:45:5d:3c:1b:18:07:78:78:37:99:a5:95:5a:35:50:
99:31:95:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:49:54 2025 by rpki-client