Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.mft
File: mjk-8WAn_AO8XARf-SidS7t_82Q.mft (raw, json)
Hash identifier: 9psfd0V5fXWAmkQT+tNZfk2ckcXLloJmBt++s23ZKEI=
Subject key identifier: B2:D2:DB:31:4F:A8:8E:0A:08:38:74:1D:A4:30:41:60:D2:7A:DA:08
Authority key identifier: 9A:39:3E:F1:60:27:FC:03:BC:5C:04:5F:F9:28:9D:4B:BB:7F:F3:64
Certificate issuer: /CN=9a393ef16027fc03bc5c045ff9289d4bbb7ff364
Certificate serial: 0199FFC83973BB913D0CAE190E46019ECCB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjk-8WAn_AO8XARf-SidS7t_82Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.mft
Manifest number: 132D
Signing time: Mon 20 Oct 2025 04:02:15 +0000
Manifest this update: Mon 20 Oct 2025 04:02:15 +0000
Manifest next update: Tue 21 Oct 2025 04:02:15 +0000
Files and hashes: 1: 1-clNUolPp_tHK-YnMn1XJMAOUjs.roa (hash: KJW40p6GcC71WhI5WuddxJyJBJzYeaQczvMIzcE32ao=)
2: ThrNo6kiekZ1KA2l01FtFpnY2fk.roa (hash: sguoljLucbHptttLjY2jSVxQGOBsjlswaEqE7sugblE=)
3: cV3BD5-gE9KIDxyMlti5rVaXSy8.roa (hash: PvTekp3dawXrC4YtfV0s/U4et5tU6tfVspZ3Sv6BzkQ=)
4: mjk-8WAn_AO8XARf-SidS7t_82Q.crl (hash: JlEi8hqWNTJpouet5LD0po/4N+auu2HxCzC18ar6n2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/mjk-8WAn_AO8XARf-SidS7t_82Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:39:73:bb:91:3d:0c:ae:19:0e:46:01:9e:cc:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a393ef16027fc03bc5c045ff9289d4bbb7ff364
Validity
Not Before: Oct 20 04:02:15 2025 GMT
Not After : Oct 21 04:02:15 2025 GMT
Subject: CN=b2d2db314fa88e0a0838741da4304160d27ada08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:86:86:7e:74:30:62:f8:b0:0c:a9:3a:84:46:
8f:e9:91:de:53:f5:34:ad:c8:82:43:31:e4:e1:76:
d1:8d:84:23:0e:a4:0b:4c:33:59:87:3b:de:37:ee:
94:72:98:22:4b:de:04:b4:1b:38:b8:c7:c9:1f:2c:
4a:51:20:0c:01:68:d8:4f:27:4c:bc:05:75:2a:71:
08:d7:90:fd:90:12:5d:67:38:56:6a:de:d1:7e:e7:
61:eb:64:3b:3c:04:a6:4f:fd:ee:80:6d:5c:05:78:
c8:56:ac:9f:2d:15:8a:fc:ad:a8:f7:99:d6:89:e9:
a9:df:e4:d7:5a:ba:e2:a8:6c:43:f0:47:83:a2:a5:
11:c5:2e:5c:f1:a7:b5:d9:bb:fa:2d:78:32:35:24:
3e:a3:f5:f8:6e:13:c1:a0:ae:4d:2f:f1:37:31:46:
3c:45:c2:8f:41:e9:1a:0b:78:b2:4d:96:32:5e:5f:
67:e9:52:53:f0:d5:bf:9b:e5:e1:50:21:6b:8b:9f:
c4:06:4d:87:df:8a:82:1b:97:3f:e9:bc:cc:db:d9:
5d:dd:92:cf:52:58:77:b2:88:6d:a5:e6:1d:28:f0:
52:7a:e9:6b:4f:b5:91:1f:df:26:ef:10:6f:23:76:
32:d1:37:3e:31:41:e7:d4:19:ca:db:9b:1f:62:5c:
9d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D2:DB:31:4F:A8:8E:0A:08:38:74:1D:A4:30:41:60:D2:7A:DA:08
X509v3 Authority Key Identifier:
keyid:9A:39:3E:F1:60:27:FC:03:BC:5C:04:5F:F9:28:9D:4B:BB:7F:F3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjk-8WAn_AO8XARf-SidS7t_82Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:93:56:90:c4:eb:b2:d4:84:7b:3d:a5:c0:17:6c:33:81:7d:
43:0e:8a:c3:2c:16:a9:71:9f:7d:b8:6c:f7:8c:71:45:a3:18:
d3:23:8a:4e:2e:c6:2a:50:b7:aa:b5:a3:b7:04:61:59:b3:07:
57:03:90:1d:94:d5:e7:eb:0c:ad:9b:f2:6c:ca:f1:85:c3:58:
32:ea:ae:fe:3d:60:f3:da:3d:15:22:1d:6c:91:cf:4c:aa:38:
bc:bc:b1:81:1d:56:6c:94:d4:f8:ff:1a:06:b6:b9:70:5d:27:
6e:d9:00:65:49:d7:4d:c6:cc:d2:0a:5f:92:24:01:f6:d5:9c:
07:e3:9c:a6:94:4f:c4:48:1a:de:ed:4a:83:32:ef:36:51:8d:
de:84:76:b3:be:e7:01:db:ba:73:c6:c3:fd:11:a0:03:0e:0a:
80:38:b7:f2:6d:eb:5b:34:d3:75:78:40:24:6a:54:0f:76:d4:
cb:3f:87:2b:ed:41:ee:eb:42:0b:5d:cd:28:a6:40:6a:46:e8:
fb:91:6f:2c:a4:95:10:4e:79:b6:12:97:4a:e4:fb:8c:4c:15:
74:a6:8c:e7:e6:60:e7:e9:71:35:74:07:90:04:4e:62:9c:2a:
14:00:d0:93:65:20:9f:b7:b5:0b:10:87:5a:ce:94:1b:8e:13:
99:24:58:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:49:50 2025 by rpki-client