Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.mft
File: MjiPz3TS5ZUk9OtNluRMUiLbY-E.mft (raw, json)
Hash identifier: 3cawMmEk3aJ0s7flHHuMCfopvABoFKDiDXjPG6Mob+k=
Subject key identifier: 1F:46:F9:2E:22:7C:15:4E:76:A6:81:44:CF:60:49:B3:44:F3:A3:B3
Authority key identifier: 32:38:8F:CF:74:D2:E5:95:24:F4:EB:4D:96:E4:4C:52:22:DB:63:E1
Certificate issuer: /CN=32388fcf74d2e59524f4eb4d96e44c5222db63e1
Certificate serial: 0199FCFD2FA0B7AF84E0ADD9369C5A021C3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MjiPz3TS5ZUk9OtNluRMUiLbY-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.mft
Manifest number: 03AE
Signing time: Sun 19 Oct 2025 15:01:15 +0000
Manifest this update: Sun 19 Oct 2025 15:01:15 +0000
Manifest next update: Mon 20 Oct 2025 15:01:15 +0000
Files and hashes: 1: MjiPz3TS5ZUk9OtNluRMUiLbY-E.crl (hash: FbVhUdgBz6qSQvrC3F+1FDBUOWinfkKQWiv0VTphrEA=)
2: kFZ56ZsF2Br-F4_BOqSTO2KxSHA.roa (hash: S6v3r4laXjhVYZ3ga0DT/nLxzqhZMNCLJUlCOrTApDQ=)
3: l_KNRz-DOMsGFsOq9QowWZSTlSY.roa (hash: npXTC3HvU34eVfQ3A8stCbWQJ3DirxlZznu2fCVNFbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/MjiPz3TS5ZUk9OtNluRMUiLbY-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:2f:a0:b7:af:84:e0:ad:d9:36:9c:5a:02:1c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32388fcf74d2e59524f4eb4d96e44c5222db63e1
Validity
Not Before: Oct 19 15:01:15 2025 GMT
Not After : Oct 20 15:01:15 2025 GMT
Subject: CN=1f46f92e227c154e76a68144cf6049b344f3a3b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5a:bf:87:bf:46:57:0b:94:cc:5c:de:be:08:
50:25:dd:e4:bf:66:4a:0a:48:73:89:33:a6:87:79:
9c:44:8f:f3:7a:d6:82:ce:ba:08:85:62:88:8d:ef:
25:91:14:76:6b:8b:7f:84:3d:ba:df:af:7d:f6:67:
83:29:ef:58:99:8c:d9:f7:51:6d:8d:5f:00:01:76:
95:63:0e:7e:1e:c3:c6:2e:3e:7e:3e:35:a7:73:a2:
0d:15:5f:47:42:47:e1:6a:ba:b5:0b:24:ad:e3:00:
a9:d8:fa:3d:22:b6:d4:63:1e:fc:f9:49:84:07:a3:
dd:62:a5:cd:0b:08:e2:8f:c0:5d:25:5b:70:b7:2f:
ff:20:34:bb:b5:eb:03:51:4f:49:3b:7a:b5:92:92:
dd:45:a4:d3:77:41:15:a7:ed:a0:8d:99:2f:d6:a1:
d7:92:5a:68:f6:5a:bd:b9:cc:ea:22:0c:6c:da:0d:
6b:4a:a5:e8:13:ee:7b:11:27:7b:df:38:50:41:79:
2a:ab:24:14:15:80:83:ed:ce:1e:48:3f:e6:24:4f:
27:ca:88:5c:23:88:78:58:39:2b:eb:e7:49:22:e9:
b7:40:26:f1:8b:e5:9e:c2:cf:aa:2d:8d:87:74:54:
d0:a1:e0:e6:13:ac:1d:8b:de:94:b5:fc:eb:8d:b6:
48:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:46:F9:2E:22:7C:15:4E:76:A6:81:44:CF:60:49:B3:44:F3:A3:B3
X509v3 Authority Key Identifier:
keyid:32:38:8F:CF:74:D2:E5:95:24:F4:EB:4D:96:E4:4C:52:22:DB:63:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MjiPz3TS5ZUk9OtNluRMUiLbY-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:e8:bf:e2:2d:f1:77:5a:1e:60:e4:2c:6b:ae:bf:af:e6:8d:
72:16:49:a8:47:c0:a1:af:22:eb:49:f1:32:63:67:70:ea:4e:
6e:4e:2f:ce:47:91:42:fa:7c:4c:06:60:e3:f4:dd:21:e4:92:
a4:54:ab:3d:40:0e:24:d0:da:23:9f:09:d6:a4:b3:ee:67:f9:
78:43:87:68:5e:49:a0:7e:16:1e:b6:28:20:11:68:6a:4c:96:
ca:35:0a:4b:54:fb:b7:04:52:40:64:ab:ce:54:16:7d:89:7b:
81:02:a5:e3:03:f5:35:e4:d6:e9:69:8c:a6:19:fe:5e:2e:f5:
e8:ac:fd:e1:ad:cb:15:a1:59:af:86:73:36:bb:58:44:69:a2:
c7:b8:76:6c:cb:92:c9:c5:23:39:05:11:2e:f8:60:83:05:c5:
68:9f:46:a7:c5:fd:ba:62:bb:72:72:82:24:9c:c7:5f:a9:e2:
cd:42:d3:2a:d5:1a:a0:49:1f:00:94:c8:24:ad:a7:7a:32:18:
7d:65:8f:a2:56:66:70:95:6d:58:1f:b8:e1:ee:00:34:df:22:
72:fa:be:6f:af:22:14:e2:f7:e5:73:d6:e8:35:70:ec:3d:26:
00:bf:94:89:5d:05:06:a6:fa:3c:9a:1c:e7:d5:29:56:6c:d1:
81:91:50:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:56 2025 by rpki-client