
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/9622a3-94f1-4fbc-a46b-2b248f2f12a7/1/MJ5IuCgx_5y7wL99r9fUZLMSwZE.mft
File: MJ5IuCgx_5y7wL99r9fUZLMSwZE.mft (raw, json)
Hash identifier: er4/zJhh33ZCoYdc3c9NP+J8TtPfpWwDrjf/Ql9wjUk=
Subject key identifier: 95:C1:EE:F8:D7:A5:F8:E3:E8:66:D8:04:77:FA:5C:B0:48:0C:DC:44
Authority key identifier: 30:9E:48:B8:28:31:FF:9C:BB:C0:BF:7D:AF:D7:D4:64:B3:12:C1:91
Certificate issuer: /CN=309e48b82831ff9cbbc0bf7dafd7d464b312c191
Certificate serial: 0198D5BBF6987BE11658582820AFB1561BC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MJ5IuCgx_5y7wL99r9fUZLMSwZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/9622a3-94f1-4fbc-a46b-2b248f2f12a7/1/MJ5IuCgx_5y7wL99r9fUZLMSwZE.mft
Manifest number: 65
Signing time: Sat 23 Aug 2025 07:02:01 +0000
Manifest this update: Sat 23 Aug 2025 07:02:01 +0000
Manifest next update: Sun 24 Aug 2025 07:02:01 +0000
Files and hashes: 1: MJ5IuCgx_5y7wL99r9fUZLMSwZE.crl (hash: ttMe0iwl8C5ANtDmqGrg7xJU+72VuxINwWvh6dTaxhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/9622a3-94f1-4fbc-a46b-2b248f2f12a7/1/MJ5IuCgx_5y7wL99r9fUZLMSwZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/9622a3-94f1-4fbc-a46b-2b248f2f12a7/1/MJ5IuCgx_5y7wL99r9fUZLMSwZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MJ5IuCgx_5y7wL99r9fUZLMSwZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:f6:98:7b:e1:16:58:58:28:20:af:b1:56:1b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=309e48b82831ff9cbbc0bf7dafd7d464b312c191
Validity
Not Before: Aug 23 07:02:01 2025 GMT
Not After : Aug 24 07:02:01 2025 GMT
Subject: CN=95c1eef8d7a5f8e3e866d80477fa5cb0480cdc44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0e:71:71:74:f6:a2:51:fc:98:db:3a:74:a6:
a7:15:9d:83:5c:f6:7e:af:46:c6:53:d1:7e:e1:fa:
a3:ab:43:23:42:39:fa:7e:bb:f7:56:f5:5a:1e:d0:
13:5d:d6:0d:a9:af:c1:1c:de:0b:ea:e4:6c:de:d7:
68:4a:4b:31:9a:dd:5f:78:35:ab:69:8b:4c:a0:98:
7d:79:72:69:a9:ec:0c:0f:07:1d:bd:d7:77:cc:d7:
3f:2b:a8:ac:ba:4f:f9:96:c1:cd:6a:19:8a:ce:e5:
4d:ff:cc:79:6d:0e:b0:c5:d8:6a:40:7f:e0:da:b5:
26:cc:09:0e:97:f6:98:09:15:73:c0:3d:1d:25:8e:
b0:98:4e:86:63:55:6f:63:8e:4a:43:f2:a2:f1:91:
a5:ae:fe:1c:7f:20:bb:ef:60:94:45:68:2a:b6:bb:
00:c9:da:6a:2b:47:b0:60:e9:71:2f:eb:2c:ee:1c:
d5:3b:92:b3:fc:b7:9c:ae:64:d9:9e:1c:fb:c4:14:
8e:84:28:07:77:91:98:da:db:97:2e:04:ba:76:68:
59:1b:71:29:73:1e:ed:3d:78:6e:44:52:71:d1:fe:
02:2a:62:0c:6a:bd:19:47:3e:8b:06:a7:3a:4c:5e:
1c:8f:e7:a0:ec:6d:12:ac:d7:cf:cf:7d:65:9d:7a:
b7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C1:EE:F8:D7:A5:F8:E3:E8:66:D8:04:77:FA:5C:B0:48:0C:DC:44
X509v3 Authority Key Identifier:
keyid:30:9E:48:B8:28:31:FF:9C:BB:C0:BF:7D:AF:D7:D4:64:B3:12:C1:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJ5IuCgx_5y7wL99r9fUZLMSwZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9622a3-94f1-4fbc-a46b-2b248f2f12a7/1/MJ5IuCgx_5y7wL99r9fUZLMSwZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9622a3-94f1-4fbc-a46b-2b248f2f12a7/1/MJ5IuCgx_5y7wL99r9fUZLMSwZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:44:21:7e:82:17:ba:57:bc:79:5c:2b:f6:7d:9e:d8:65:37:
c8:1f:3b:d8:ee:78:b9:c3:d5:72:20:5f:fa:27:9e:e5:f4:5a:
66:1b:94:06:8c:3d:09:77:bd:9f:61:38:65:bc:04:e8:a2:2e:
11:5a:d2:f6:9b:1b:5c:01:55:4e:d4:2c:54:0c:05:50:03:9f:
d5:84:c8:18:0b:cf:10:a3:6e:99:8f:4d:a0:32:d3:df:01:b0:
0d:e2:23:3d:c1:a7:04:f5:32:aa:7b:d5:af:dc:fd:92:ad:2e:
1b:3b:bc:19:a6:f0:46:46:6f:1a:ff:11:08:76:f7:9f:8e:36:
f9:98:bb:cf:c7:7b:b0:74:22:f6:dc:2c:a8:2e:73:c8:d5:57:
52:af:b1:dc:9f:ba:1c:65:80:43:e5:fd:4f:58:db:e6:ca:e5:
4d:2e:58:99:58:95:cf:0c:de:84:47:82:52:43:1f:e3:25:cc:
4b:14:73:28:c5:34:68:a3:9b:81:77:e3:7b:48:4c:6a:94:d9:
13:4c:bd:f7:7f:74:c3:58:26:56:e4:65:9a:a8:84:48:6d:a4:
2d:04:3a:01:4f:38:01:c8:ff:a2:c7:16:57:b9:0f:13:04:8c:
44:6f:8f:5f:41:0c:3a:2d:28:ea:6f:3c:10:92:c5:77:0a:59:
18:6f:d6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:21 2025 by rpki-client