Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.mft
File: MryjKc1OJWX_DRPoNVpuxMwXlOE.mft (raw, json)
Hash identifier: QDgGeX+Q4weapwtJb9dm+Xnc/E131UuQH7K+REaSQOY=
Subject key identifier: BB:CB:E4:BB:A3:1A:49:A2:8B:04:1A:E2:27:6D:EA:AB:9F:00:AC:02
Authority key identifier: 32:BC:A3:29:CD:4E:25:65:FF:0D:13:E8:35:5A:6E:C4:CC:17:94:E1
Certificate issuer: /CN=32bca329cd4e2565ff0d13e8355a6ec4cc1794e1
Certificate serial: 0198D6609A181783FA55CD6C543BCE5365BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MryjKc1OJWX_DRPoNVpuxMwXlOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.mft
Manifest number: 0CFD
Signing time: Sat 23 Aug 2025 10:01:51 +0000
Manifest this update: Sat 23 Aug 2025 10:01:51 +0000
Manifest next update: Sun 24 Aug 2025 10:01:51 +0000
Files and hashes: 1: EY9B7xHMl-Tku1EaPiHTMSJd4UY.roa (hash: fngf8eQs7Bwu0pM4j6i0WPj4gj/7hDrn6NltGJxnSqw=)
2: MryjKc1OJWX_DRPoNVpuxMwXlOE.crl (hash: HGv5BEWi7LlwCz3zB5GmoT03MUgDR37PQ8OKhiTHxFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MryjKc1OJWX_DRPoNVpuxMwXlOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:9a:18:17:83:fa:55:cd:6c:54:3b:ce:53:65:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32bca329cd4e2565ff0d13e8355a6ec4cc1794e1
Validity
Not Before: Aug 23 10:01:51 2025 GMT
Not After : Aug 24 10:01:51 2025 GMT
Subject: CN=bbcbe4bba31a49a28b041ae2276deaab9f00ac02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:03:9b:af:ba:5a:38:4d:29:3e:67:13:af:e9:
69:4d:5e:6b:4a:88:1e:7f:70:ad:d3:bd:37:36:e2:
b7:24:7d:97:3e:1e:7e:72:5f:51:bd:11:cc:9b:cd:
ef:c8:26:07:09:52:ce:23:58:87:a2:27:c3:ba:8f:
af:74:86:22:d6:3f:93:01:b2:a2:13:c6:7a:d4:c1:
a1:38:43:82:1f:3b:86:29:8c:67:d3:79:83:ba:bf:
21:db:9d:15:05:8b:01:db:4c:47:07:65:5d:9c:ba:
df:84:b7:65:16:c6:26:72:a6:f5:ef:ed:09:8b:ec:
a2:3c:e7:6c:87:7c:49:6b:75:58:16:de:b0:5c:29:
74:a2:e5:e5:e1:80:f6:44:ce:bc:93:01:5b:85:3f:
98:0f:81:93:a3:2e:06:21:e2:f0:da:db:89:36:be:
ec:13:50:ab:a0:d6:87:9d:3b:a9:e4:c1:2b:03:1f:
b3:eb:c2:88:e6:72:1b:46:dc:df:4d:52:42:e4:ee:
11:52:c1:d9:3c:ec:e8:59:c1:6d:b2:30:7a:2c:97:
73:ed:a9:06:48:12:ba:dd:15:95:da:b3:44:1e:4d:
1e:96:ef:fa:6c:d3:ce:7d:99:74:93:0b:6c:65:81:
9f:73:26:46:23:a7:37:ed:e2:cf:49:0d:f3:f0:ee:
bf:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:CB:E4:BB:A3:1A:49:A2:8B:04:1A:E2:27:6D:EA:AB:9F:00:AC:02
X509v3 Authority Key Identifier:
keyid:32:BC:A3:29:CD:4E:25:65:FF:0D:13:E8:35:5A:6E:C4:CC:17:94:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MryjKc1OJWX_DRPoNVpuxMwXlOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:e7:dd:cf:6a:cd:86:35:e0:ea:28:44:a2:cc:ce:e4:21:40:
8d:6c:69:04:d9:30:e0:0c:ab:c4:0f:42:5f:7b:1c:e9:5d:96:
4d:e8:7b:e1:8e:cb:c6:97:3c:8c:0e:e9:b3:0a:98:64:18:20:
04:a5:57:e9:2a:4c:bd:13:31:36:0e:0e:1c:65:92:cd:d0:b0:
a9:eb:ae:50:4d:11:0c:cc:24:20:68:67:ac:3d:1b:d6:74:ae:
9f:ba:ec:b2:a9:17:03:26:de:c6:d4:b2:86:5a:34:7b:85:ba:
1c:a2:b1:1e:87:9d:99:57:3f:ad:f0:17:8a:0a:f9:55:a0:a5:
15:62:3c:aa:f0:b6:c5:c8:08:fd:ca:9e:cb:16:ec:f3:9d:83:
0e:f7:9b:8f:d3:5f:bf:85:fd:40:21:32:79:e3:8f:2b:96:5f:
29:ba:dc:e4:f3:0d:b4:6c:77:84:af:a8:da:d0:0e:3a:8f:e2:
21:31:51:da:5e:22:77:19:65:ea:e1:3a:83:87:60:f9:5b:be:
c9:82:f2:93:26:41:a1:32:e5:d2:2c:eb:02:8e:37:68:4e:1e:
2b:e1:15:eb:29:41:13:26:ca:1a:e5:0e:93:a7:4e:ed:56:76:
f6:16:d4:c2:10:43:76:e7:16:66:3e:97:d2:a2:09:85:89:01:
23:8e:fd:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:09:33 2025 by rpki-client