Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.mft
File: MjiPz3TS5ZUk9OtNluRMUiLbY-E.mft (raw, json)
Hash identifier: b7si0uAPZCC1C1d2nE9aZuh7aKzFs99LXFYSqkY2cT4=
Subject key identifier: AA:3C:8A:75:01:3D:51:A2:88:A8:16:8A:5C:C9:35:10:D1:0A:D9:0E
Authority key identifier: 32:38:8F:CF:74:D2:E5:95:24:F4:EB:4D:96:E4:4C:52:22:DB:63:E1
Certificate issuer: /CN=32388fcf74d2e59524f4eb4d96e44c5222db63e1
Certificate serial: 0197B6A0F569B5C0A794EE8DB7C64BAC7324
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MjiPz3TS5ZUk9OtNluRMUiLbY-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.mft
Manifest number: 0280
Signing time: Sat 28 Jun 2025 13:01:31 +0000
Manifest this update: Sat 28 Jun 2025 13:01:31 +0000
Manifest next update: Sun 29 Jun 2025 13:01:31 +0000
Files and hashes: 1: MjiPz3TS5ZUk9OtNluRMUiLbY-E.crl (hash: 7OHWL9BD3uspbhAmVK6H3XWyVAB+kYIgEVHbTM4B3lI=)
2: l_KNRz-DOMsGFsOq9QowWZSTlSY.roa (hash: npXTC3HvU34eVfQ3A8stCbWQJ3DirxlZznu2fCVNFbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/MjiPz3TS5ZUk9OtNluRMUiLbY-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:f5:69:b5:c0:a7:94:ee:8d:b7:c6:4b:ac:73:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32388fcf74d2e59524f4eb4d96e44c5222db63e1
Validity
Not Before: Jun 28 13:01:31 2025 GMT
Not After : Jun 29 13:01:31 2025 GMT
Subject: CN=aa3c8a75013d51a288a8168a5cc93510d10ad90e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f2:a5:41:5e:75:67:12:dc:f0:ce:d3:51:75:
53:58:e2:14:76:ac:a9:ec:24:9b:68:2b:05:0b:b3:
a8:2e:d4:f3:56:bd:84:84:d2:3f:27:11:83:83:cb:
03:6a:aa:fe:39:e5:11:f2:a8:fa:b6:e1:25:c2:b5:
5d:5c:d6:02:b8:24:ed:eb:cd:4c:31:0a:69:92:b6:
b2:19:d2:a0:ac:64:2d:69:bd:7f:63:c5:69:23:78:
2b:97:7a:1d:ac:9e:b9:f2:20:e5:a6:02:7a:49:b3:
e0:b0:d3:34:f4:95:f6:ea:e0:0e:1a:c0:12:d9:a9:
20:57:9c:43:8a:ac:c4:83:cf:bf:9a:ee:a8:37:51:
40:d8:db:d8:40:ae:9a:b1:49:19:e0:7b:65:5f:89:
0a:d5:74:96:1a:df:50:38:77:6e:4b:f7:68:1f:9e:
22:33:cf:53:fe:d8:37:51:17:2a:72:60:d4:31:db:
19:ab:01:51:78:1a:a2:aa:30:5b:31:88:3a:4a:26:
2a:7c:34:a8:01:91:d9:26:54:c1:e9:66:fa:cd:00:
3b:6c:0e:dd:3e:89:b9:6f:df:80:ca:96:37:4c:bc:
9e:3e:c2:01:50:ba:94:b2:28:bd:b6:49:da:c4:f9:
ce:4f:ce:f2:97:d3:04:63:17:c8:b0:b4:b9:c5:f5:
ad:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:3C:8A:75:01:3D:51:A2:88:A8:16:8A:5C:C9:35:10:D1:0A:D9:0E
X509v3 Authority Key Identifier:
keyid:32:38:8F:CF:74:D2:E5:95:24:F4:EB:4D:96:E4:4C:52:22:DB:63:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MjiPz3TS5ZUk9OtNluRMUiLbY-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:2d:73:4b:ce:80:0c:48:4b:ba:34:ad:7b:f5:09:96:38:0d:
6c:88:3f:7b:be:62:5c:da:ff:db:d7:f5:15:f8:31:e5:df:d6:
27:1d:5b:18:8a:08:f2:48:a6:57:7c:51:3a:fd:5a:b0:a7:a9:
00:40:ce:95:6a:5d:6e:38:b1:8b:9f:50:aa:2d:ff:6c:9d:7f:
cc:8e:ef:bc:ab:c8:d4:0d:ba:53:cb:e7:b8:4d:1b:3e:d7:2f:
df:eb:07:37:3d:ea:2a:aa:23:a7:a9:dd:b7:6b:1f:60:e1:94:
0e:81:cf:60:f6:e1:b5:66:79:4f:03:36:81:b8:35:a8:d8:62:
3d:88:ec:ad:fe:2f:a0:b1:b6:bc:0a:e0:1f:11:52:20:54:62:
25:fc:62:dd:6d:26:6a:7f:b7:5e:b6:ef:12:ea:a8:8b:cf:21:
c7:9f:12:d2:44:e8:7a:8e:6a:ca:93:73:ba:df:a2:e2:4e:8e:
80:71:a8:24:cc:5b:84:82:d3:b1:30:73:ec:4c:d7:f5:e9:49:
2d:ae:c6:e5:df:74:c3:aa:7e:51:09:f7:a1:b1:1f:56:66:36:
72:88:d5:cb:3a:5e:30:21:8b:64:a8:2f:08:1a:dc:26:c0:71:
b3:67:0a:10:eb:ef:14:6f:2f:f1:ce:5e:45:6a:4c:57:e6:9f:
4c:54:73:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:09 2025 by rpki-client