Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
File: MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft (raw, json)
Hash identifier: TWVdI0B89HWezekAbRqBoRQpHrYo3Ew4fnjQP7w5S2E=
Subject key identifier: 35:D8:71:B7:39:9C:18:F9:9E:0F:4B:E7:86:B2:4A:24:0C:A0:A3:FD
Authority key identifier: 32:D5:C9:C8:5F:FB:74:63:94:5E:81:26:57:0B:7E:28:51:B3:FB:7A
Certificate issuer: /CN=32d5c9c85ffb7463945e8126570b7e2851b3fb7a
Certificate serial: 0198D5F13E87CAF145D04ACC8BAF2CC4C4BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
Manifest number: 0885
Signing time: Sat 23 Aug 2025 08:00:13 +0000
Manifest this update: Sat 23 Aug 2025 08:00:13 +0000
Manifest next update: Sun 24 Aug 2025 08:00:13 +0000
Files and hashes: 1: 6csp2LeD7vly2n1j-VpIEsucAhQ.roa (hash: WR+qcQQTkccFoOguSbUEIuw7HhStcNOST97gvk9zp7k=)
2: MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl (hash: CsE2k4cyQAbxoYlQCyXc7TsHZjXoZ+reKuoeYUWKZZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:3e:87:ca:f1:45:d0:4a:cc:8b:af:2c:c4:c4:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d5c9c85ffb7463945e8126570b7e2851b3fb7a
Validity
Not Before: Aug 23 08:00:13 2025 GMT
Not After : Aug 24 08:00:13 2025 GMT
Subject: CN=35d871b7399c18f99e0f4be786b24a240ca0a3fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d4:01:ce:ca:84:7b:3b:95:e8:79:d2:15:19:
f5:99:df:cd:29:41:33:c8:33:53:16:3d:60:3e:9a:
3d:32:76:e7:9f:93:f0:cf:84:0d:21:8e:7a:b3:82:
53:87:45:40:c8:de:2a:ac:fc:3e:64:f4:49:87:19:
fa:b6:8f:34:e8:dd:bc:3c:f8:77:cc:97:21:0d:23:
9a:ba:5f:7e:7b:d4:f3:51:e1:c4:bf:3b:d6:cb:82:
87:6a:3f:ef:d3:0c:a2:b7:71:4e:b8:db:fd:d0:ef:
0b:dd:84:78:22:03:e2:24:0e:5b:59:65:e5:45:18:
c0:a5:5a:9a:24:a2:82:f9:49:e0:b5:34:a5:da:d8:
ba:6b:75:8b:b3:8b:56:0a:1b:4e:01:88:78:a3:9b:
9a:8a:05:bb:f4:72:44:f1:41:ee:a5:6b:78:ad:1f:
2b:ad:f1:0f:27:82:9c:f5:ce:aa:7b:42:73:37:e5:
2b:fe:16:b6:f1:92:60:56:31:01:72:c7:fe:29:7a:
3d:b7:3f:c0:c1:71:36:25:64:38:68:48:5a:85:7e:
1a:09:26:bc:0a:fd:ae:60:99:32:7f:dc:d7:60:51:
37:e3:05:94:af:da:7d:92:2c:f8:10:bf:24:bf:e4:
59:bc:92:3f:d6:38:1d:13:2d:58:fe:63:bf:d6:54:
e6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D8:71:B7:39:9C:18:F9:9E:0F:4B:E7:86:B2:4A:24:0C:A0:A3:FD
X509v3 Authority Key Identifier:
keyid:32:D5:C9:C8:5F:FB:74:63:94:5E:81:26:57:0B:7E:28:51:B3:FB:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:b7:8e:1d:7f:0c:40:14:c2:d3:1b:43:24:a4:b9:3c:12:9f:
c8:cd:aa:cc:38:a7:a0:80:b6:b1:d2:95:f7:dc:c0:f2:27:c8:
69:49:52:11:b5:5a:e9:e2:64:bb:fa:00:57:11:ea:e1:b3:91:
26:54:62:0d:25:e1:6a:96:e6:30:3d:99:2f:84:d0:64:dd:dd:
e8:54:f8:57:49:14:bb:89:b6:76:dc:1a:a0:68:34:07:ad:13:
a2:6a:4a:9d:ec:6d:5d:6b:2d:f8:e0:4b:54:fa:d9:d1:1d:e3:
72:37:11:3f:84:3d:91:e2:2e:5d:de:66:5a:4e:ef:77:a9:37:
bc:e2:84:fc:ef:49:d5:43:26:68:fb:68:45:82:98:9f:0c:1d:
26:a6:e4:df:d4:55:8a:f1:c0:0e:c3:f3:6d:08:59:12:19:fd:
b9:ae:6d:27:b3:f9:22:58:e7:61:fa:5c:d0:4d:23:34:0c:3f:
64:28:9f:87:e7:c9:6c:21:20:31:bb:b9:5d:e9:5b:16:17:5d:
77:9d:7a:1a:88:f5:22:f1:d6:81:2b:8d:1e:b0:51:22:c4:18:
18:f5:25:33:da:3a:89:7c:bc:71:8d:dc:7b:f0:bd:67:71:92:
01:5f:c3:ba:2f:45:08:99:ed:1b:5e:bf:a7:44:56:69:47:5c:
79:ad:af:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:51 2025 by rpki-client