Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/MYPvxS3V0tT34MRdIsnCnx3Ojlk.mft
File: MYPvxS3V0tT34MRdIsnCnx3Ojlk.mft (raw, json)
Hash identifier: aG0f6yucpyhtVLGmAStc7ctSBAamGWThIPvEWFRk4RM=
Subject key identifier: 7C:3A:01:B5:1E:05:16:B3:A9:06:76:A1:7B:59:20:03:D4:B6:63:77
Authority key identifier: 31:83:EF:C5:2D:D5:D2:D4:F7:E0:C4:5D:22:C9:C2:9F:1D:CE:8E:59
Certificate issuer: /CN=3183efc52dd5d2d4f7e0c45d22c9c29f1dce8e59
Certificate serial: 0198D5F1216C5526AA9C56A0C293423CE533
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYPvxS3V0tT34MRdIsnCnx3Ojlk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/MYPvxS3V0tT34MRdIsnCnx3Ojlk.mft
Manifest number: 089E
Signing time: Sat 23 Aug 2025 08:00:06 +0000
Manifest this update: Sat 23 Aug 2025 08:00:06 +0000
Manifest next update: Sun 24 Aug 2025 08:00:06 +0000
Files and hashes: 1: MYPvxS3V0tT34MRdIsnCnx3Ojlk.crl (hash: ivvYd+AWWyccFLCDBgOj3x3iFUmfZdd1ZUjiftX4jiA=)
2: mThuVq__AdJ8m0fUEig5mExB-MI.roa (hash: uwNlHWqFKBBy+qRVS5eJabxoyu+NHhSLJrsP7OWfbIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/MYPvxS3V0tT34MRdIsnCnx3Ojlk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/MYPvxS3V0tT34MRdIsnCnx3Ojlk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYPvxS3V0tT34MRdIsnCnx3Ojlk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:21:6c:55:26:aa:9c:56:a0:c2:93:42:3c:e5:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183efc52dd5d2d4f7e0c45d22c9c29f1dce8e59
Validity
Not Before: Aug 23 08:00:06 2025 GMT
Not After : Aug 24 08:00:06 2025 GMT
Subject: CN=7c3a01b51e0516b3a90676a17b592003d4b66377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e7:0d:bd:b5:c7:6c:32:aa:a1:3b:7b:e1:b9:
39:6f:ed:e0:79:7a:16:3b:0f:b9:3c:60:25:ff:99:
0a:60:58:8a:5f:ca:a6:90:3c:36:26:e9:6b:85:d7:
8a:6c:f3:10:de:2a:5c:b8:4b:25:9a:f3:d3:87:6a:
41:86:86:6b:5a:27:3c:e2:3b:b9:00:45:d4:f1:ee:
fd:33:3e:84:b5:df:26:a1:38:36:a2:ff:2b:4e:f8:
9f:f0:0f:47:e1:c4:b9:b3:42:a9:c6:a0:ca:31:8e:
c9:a7:ce:97:b2:a5:23:a3:bf:e8:5c:4d:d7:e9:de:
dd:d0:d9:50:52:87:80:b0:ca:a3:65:9b:f7:16:69:
be:37:9a:b0:6e:b6:c5:2f:61:9b:80:e6:60:90:82:
0e:13:e1:25:36:25:c5:b3:84:78:6b:eb:4c:38:a8:
9b:cf:be:e5:04:86:59:f5:54:6e:03:b4:09:bd:8a:
6f:ae:14:8f:49:2d:44:4c:21:3c:f4:95:d4:df:5f:
13:b4:53:6f:61:03:ba:b0:6d:ef:19:16:f8:33:30:
e6:53:57:bf:9d:f8:9c:0e:91:9c:cc:eb:11:4e:4b:
bc:a6:3b:cd:9c:ab:b3:39:e1:38:37:d0:e7:43:b9:
74:87:10:dd:21:b6:e0:c2:21:9e:bb:89:3e:0c:60:
d0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:3A:01:B5:1E:05:16:B3:A9:06:76:A1:7B:59:20:03:D4:B6:63:77
X509v3 Authority Key Identifier:
keyid:31:83:EF:C5:2D:D5:D2:D4:F7:E0:C4:5D:22:C9:C2:9F:1D:CE:8E:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYPvxS3V0tT34MRdIsnCnx3Ojlk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/MYPvxS3V0tT34MRdIsnCnx3Ojlk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/MYPvxS3V0tT34MRdIsnCnx3Ojlk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:3f:2b:29:68:61:aa:c5:d8:d4:d8:68:2a:94:c9:e0:62:94:
0f:6d:5b:c8:47:2f:11:1c:41:dd:70:b3:eb:7d:df:1b:59:3b:
3d:9f:fa:e0:fe:b0:a7:c7:89:0e:aa:5d:08:d5:07:1d:46:ea:
03:c6:e0:1a:c4:e3:e5:81:dd:7a:d3:a6:18:4d:27:f8:f8:09:
13:db:d6:24:8f:27:d5:a2:99:6d:9b:12:ed:75:60:46:3b:06:
e7:84:46:34:9b:e2:22:18:89:ee:0e:68:ed:bd:30:16:77:08:
b0:53:0a:dc:49:b8:4a:61:48:18:c6:85:7e:89:48:df:10:7e:
6c:44:aa:a4:eb:2c:47:cf:14:fb:8f:c5:7f:d0:cf:af:99:4a:
48:cc:c5:a0:08:64:03:33:c5:a2:c9:68:aa:07:95:44:1e:d5:
54:d3:f6:70:aa:7e:d8:9b:0e:b8:52:55:06:9e:35:47:5f:24:
57:60:4d:5b:7f:6a:ed:33:97:3b:f1:7f:a9:19:6e:56:10:2b:
ba:63:ce:a4:c7:f9:da:7d:b5:24:be:71:a5:68:f7:a6:c6:97:
a5:1d:ac:1a:cb:61:1c:dd:93:cf:c5:46:b6:5b:ac:2f:33:1e:
c4:f4:d9:bb:04:3a:ae:c8:88:bc:0e:79:ed:05:6e:9b:48:11:
58:d1:f3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:41 2025 by rpki-client