Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.mft
File: MjiPz3TS5ZUk9OtNluRMUiLbY-E.mft (raw, json)
Hash identifier: DqaAKfN7mnXB63PqO8G2/3+gxRfk4o+Gb7kDddqvF28=
Subject key identifier: 1F:20:45:1A:A1:97:E9:6A:CE:1C:48:A3:88:AC:A7:14:C3:D4:90:0B
Authority key identifier: 32:38:8F:CF:74:D2:E5:95:24:F4:EB:4D:96:E4:4C:52:22:DB:63:E1
Certificate issuer: /CN=32388fcf74d2e59524f4eb4d96e44c5222db63e1
Certificate serial: 0198D660C4310210773AEACF6C49DE8C5E04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MjiPz3TS5ZUk9OtNluRMUiLbY-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.mft
Manifest number: 0315
Signing time: Sat 23 Aug 2025 10:02:02 +0000
Manifest this update: Sat 23 Aug 2025 10:02:02 +0000
Manifest next update: Sun 24 Aug 2025 10:02:02 +0000
Files and hashes: 1: MjiPz3TS5ZUk9OtNluRMUiLbY-E.crl (hash: gDqg9KAg0U0V73Eqll4Qf30LViC42maKvKI4wsFbI1k=)
2: l_KNRz-DOMsGFsOq9QowWZSTlSY.roa (hash: npXTC3HvU34eVfQ3A8stCbWQJ3DirxlZznu2fCVNFbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/MjiPz3TS5ZUk9OtNluRMUiLbY-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:c4:31:02:10:77:3a:ea:cf:6c:49:de:8c:5e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32388fcf74d2e59524f4eb4d96e44c5222db63e1
Validity
Not Before: Aug 23 10:02:02 2025 GMT
Not After : Aug 24 10:02:02 2025 GMT
Subject: CN=1f20451aa197e96ace1c48a388aca714c3d4900b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:fd:13:11:22:05:c2:06:86:11:ca:66:f8:55:
e7:07:6d:6a:d8:d6:34:e5:14:7c:c2:32:59:fa:ef:
a2:e2:7d:17:b6:5e:71:ec:9f:8f:d0:b5:8d:22:8e:
f2:f2:71:95:a0:cb:5d:26:ee:15:ef:1f:f9:d7:9b:
86:62:54:d2:14:5f:0e:d4:45:be:ad:d8:fd:83:c5:
9e:76:7f:10:79:cb:90:2b:38:f0:49:40:2d:6a:57:
62:be:a3:ae:c6:69:04:02:f8:61:cc:c2:fe:12:80:
05:d2:a3:4e:b0:3c:77:c5:bb:07:e5:7c:89:35:1d:
9f:b1:13:d5:74:84:a0:77:1c:a9:14:6f:8c:b4:0a:
37:2f:74:27:38:2b:37:60:53:a2:6e:79:f4:0a:9a:
4a:15:1d:28:86:57:4e:0c:da:a5:b1:28:be:ad:8e:
3a:70:d3:6f:36:a2:9a:62:7e:5d:e6:4e:7a:94:c2:
67:00:32:69:bd:4a:06:d4:4d:d1:70:94:e1:74:cc:
b1:ac:42:40:94:fb:91:e1:ae:de:36:a8:40:ee:8b:
a3:4e:7f:5f:ea:3c:89:c2:d5:96:5f:40:63:d3:80:
d3:01:f6:71:7b:ee:05:d3:bf:7e:df:da:02:a2:e7:
a4:97:43:f1:1b:1a:6d:63:ce:36:68:65:64:b6:c8:
3c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:20:45:1A:A1:97:E9:6A:CE:1C:48:A3:88:AC:A7:14:C3:D4:90:0B
X509v3 Authority Key Identifier:
keyid:32:38:8F:CF:74:D2:E5:95:24:F4:EB:4D:96:E4:4C:52:22:DB:63:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MjiPz3TS5ZUk9OtNluRMUiLbY-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:16:3f:d6:fe:20:66:cc:36:41:8c:71:76:9f:1e:77:40:91:
d9:db:97:de:5b:1e:2e:29:3a:d0:84:e7:6a:be:62:22:f4:d4:
b1:2e:ea:b6:3b:a0:52:d1:59:ab:b1:bd:ee:96:3d:af:60:ee:
a9:51:81:e3:3c:05:17:0d:8c:15:61:9a:72:a7:2c:40:74:b9:
c9:d1:37:3c:6a:02:b3:b4:6d:df:29:bf:f0:83:8a:ae:e3:a3:
45:0c:2d:2e:88:1d:ce:72:83:6d:e9:ae:9e:f7:dc:22:8f:af:
46:19:3e:1f:8a:a7:4d:bd:60:01:d7:b6:25:f5:e0:60:03:0c:
9f:31:7e:42:bc:43:55:29:af:66:9a:12:08:70:c4:f8:12:d3:
92:9f:63:ff:30:8a:b1:e4:6a:32:58:52:6c:d5:45:bf:89:b2:
ce:a9:95:d0:a0:bb:9b:44:83:26:a9:97:df:08:86:95:c9:b4:
05:b6:9f:97:c2:24:f9:c7:5a:8b:0e:bf:33:28:6b:4d:6a:6f:
ef:74:32:07:c2:2f:15:e7:06:72:22:9d:20:b0:e7:f6:67:c1:
59:48:e1:ec:25:b9:ef:9a:f5:90:81:d5:ec:77:62:c9:1b:5d:
94:e1:fe:81:f5:27:db:af:3c:ab:65:b7:33:d1:fc:cf:03:18:
bf:cd:6b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:09:01 2025 by rpki-client