Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft
File: Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft (raw, json)
Hash identifier: EenX3WQrhMUFW79K9+lrf5xHEDV1NyjNQdratUi5Te4=
Subject key identifier: 48:B1:F4:DA:44:7D:73:6B:06:66:B7:69:7A:AD:B1:F3:3C:E2:DA:F7
Authority key identifier: 32:BD:EC:F2:B1:A4:10:F6:52:3C:20:E6:30:82:67:09:CB:6D:AC:19
Certificate issuer: /CN=32bdecf2b1a410f6523c20e630826709cb6dac19
Certificate serial: 0198D5BB86FBEBF9CF2BB7684E34804B0BC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mr3s8rGkEPZSPCDmMIJnCcttrBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft
Manifest number: 0E64
Signing time: Sat 23 Aug 2025 07:01:33 +0000
Manifest this update: Sat 23 Aug 2025 07:01:33 +0000
Manifest next update: Sun 24 Aug 2025 07:01:33 +0000
Files and hashes: 1: 1ykQwAr7tjzYeu5N5mzq1ApyYvM.roa (hash: 5NLaYiuNwek7qbqlr2qTFyj4HJSwenOAixDp+ZTkHiw=)
2: Mr3s8rGkEPZSPCDmMIJnCcttrBk.crl (hash: 9EPygNuWE3KBIIdWkwKgFx5U/9jMrgfv5KzzmQWjDkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mr3s8rGkEPZSPCDmMIJnCcttrBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:86:fb:eb:f9:cf:2b:b7:68:4e:34:80:4b:0b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32bdecf2b1a410f6523c20e630826709cb6dac19
Validity
Not Before: Aug 23 07:01:33 2025 GMT
Not After : Aug 24 07:01:33 2025 GMT
Subject: CN=48b1f4da447d736b0666b7697aadb1f33ce2daf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9b:b0:c6:e0:d7:f7:a7:69:71:6c:2d:17:98:
ab:e9:ea:ea:52:14:53:c7:94:b7:64:f0:db:cd:f2:
a5:da:ca:60:ef:68:44:0b:31:51:ea:7e:f1:6c:f5:
88:dc:dd:e8:09:80:85:3f:4a:d0:99:8b:2f:1e:05:
1d:8e:95:aa:4d:45:34:86:28:3b:80:e4:7f:75:03:
bd:0f:f5:e6:d6:ee:36:75:73:48:1e:bd:15:43:33:
4e:47:c9:2a:b3:5c:ba:42:6b:4e:fe:d3:9b:de:55:
20:bc:af:e1:8e:98:d2:0e:4b:1a:67:ac:c2:12:cd:
ab:c9:cf:4b:c6:f5:8e:c4:88:d1:cc:8c:ee:76:bb:
bf:e0:49:c5:01:c4:4a:41:74:9e:be:47:49:f2:55:
f7:42:4d:6e:1e:9c:69:af:08:e5:73:8e:64:f5:ef:
05:a3:08:78:ae:3d:df:3a:ba:96:8f:a6:83:3c:8b:
e6:12:3f:a1:78:e9:39:2b:01:71:29:6c:4e:68:9e:
19:27:16:71:58:e6:f2:ea:2e:6d:8d:3d:4b:3a:53:
77:b1:c6:59:46:5f:9d:a1:6c:ba:26:e0:f2:df:78:
f0:ef:2f:16:1a:c7:3c:7d:02:d9:f4:f7:1f:ed:83:
01:6f:53:56:44:46:67:26:ec:83:0a:ea:36:1f:14:
98:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B1:F4:DA:44:7D:73:6B:06:66:B7:69:7A:AD:B1:F3:3C:E2:DA:F7
X509v3 Authority Key Identifier:
keyid:32:BD:EC:F2:B1:A4:10:F6:52:3C:20:E6:30:82:67:09:CB:6D:AC:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mr3s8rGkEPZSPCDmMIJnCcttrBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:ac:31:58:e8:0c:a3:91:88:d2:f3:62:34:48:07:fa:23:14:
ff:07:a2:a1:73:87:eb:f9:a3:2c:bc:2c:59:18:27:ad:4c:86:
2b:fb:64:79:6f:9e:5a:19:52:5a:87:ba:6e:2c:3e:14:9e:b0:
da:cf:58:1d:2a:6b:70:80:cb:e1:b4:c3:26:d8:59:56:6a:f1:
15:8a:d6:51:30:74:04:d8:30:3b:75:fa:0a:68:de:81:f9:26:
96:72:b9:36:e0:99:53:93:3b:26:e7:63:c5:b9:b0:34:cb:4e:
60:53:18:db:65:ac:f9:ad:e5:6a:bb:2e:da:ab:59:eb:a7:c0:
76:97:c3:97:ac:db:ee:08:99:fe:ec:1e:dc:20:ab:6a:e1:92:
b7:fd:44:7f:d6:a6:65:d1:c8:00:f1:81:92:60:91:bc:f8:6e:
df:14:cc:f7:27:a3:fc:5d:57:12:5c:46:06:cf:18:e0:28:5d:
08:4a:27:06:bd:94:ae:db:c9:ea:d6:5e:79:65:91:14:6d:1e:
c3:e1:b6:f7:93:32:dc:27:4b:46:25:d8:b4:ec:bd:6c:d4:c4:
c6:a6:48:d3:05:14:49:b5:e1:05:11:08:56:0a:8b:f2:e4:d4:
a9:25:6f:b9:a9:b0:68:92:28:c2:80:4e:f0:a7:f6:e3:85:83:
30:a5:17:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:32:54 2025 by rpki-client