Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.mft
File: mjfe_wVaUdk-HtL3xzIX12B6jPI.mft (raw, json)
Hash identifier: zfVP5JjCFZJQTonteKX/tHzUljEHCT5JBWdRra4FUa0=
Subject key identifier: 84:7F:78:9D:C2:69:49:6B:D7:23:E1:38:C9:D4:FE:5F:1F:F5:F3:4B
Authority key identifier: 9A:37:DE:FF:05:5A:51:D9:3E:1E:D2:F7:C7:32:17:D7:60:7A:8C:F2
Certificate issuer: /CN=9a37deff055a51d93e1ed2f7c73217d7607a8cf2
Certificate serial: 0197B821422BDC9DF9068B3DAD339BFB190C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjfe_wVaUdk-HtL3xzIX12B6jPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.mft
Manifest number: 0381
Signing time: Sat 28 Jun 2025 20:01:16 +0000
Manifest this update: Sat 28 Jun 2025 20:01:16 +0000
Manifest next update: Sun 29 Jun 2025 20:01:16 +0000
Files and hashes: 1: YxveI4ih6pTB1sKFupGdm18Smzc.roa (hash: dR429rKnleksdPGeSDctkW6MMPKSaofQtmcnafzS7xs=)
2: mjfe_wVaUdk-HtL3xzIX12B6jPI.crl (hash: iLcevYumajODa2jjRK7k39Lz2X7N/IxP26Gi+OwIyaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mjfe_wVaUdk-HtL3xzIX12B6jPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:42:2b:dc:9d:f9:06:8b:3d:ad:33:9b:fb:19:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a37deff055a51d93e1ed2f7c73217d7607a8cf2
Validity
Not Before: Jun 28 20:01:16 2025 GMT
Not After : Jun 29 20:01:16 2025 GMT
Subject: CN=847f789dc269496bd723e138c9d4fe5f1ff5f34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d7:af:41:46:55:73:a2:40:b0:aa:b4:d7:7e:
82:74:f4:ea:c4:03:bc:89:3c:d1:34:77:ae:ce:dd:
1c:21:59:cd:09:74:30:2e:04:a6:ab:97:4d:3a:aa:
2e:e6:51:24:67:27:85:42:d4:05:26:35:ef:e5:f6:
ef:6a:48:85:21:1e:09:66:79:f1:4c:77:4a:ff:97:
90:33:a8:3c:00:0e:98:cc:01:fd:ec:14:5e:96:ab:
aa:83:eb:73:72:dd:ed:9a:8a:07:c6:7d:d3:1d:13:
48:53:ca:c8:4c:82:6d:87:8e:3f:ab:d3:57:28:ef:
69:58:28:a1:f0:57:ec:58:46:f4:20:e3:70:1d:67:
07:0e:19:9f:3f:44:f0:65:ad:b7:8b:38:35:4c:19:
8b:db:ba:c7:91:30:9e:84:0d:2e:33:36:e8:c1:8e:
72:32:d6:2c:5d:55:da:75:23:aa:ff:b0:23:ec:dc:
da:8a:be:2b:26:7a:06:ac:c8:ce:c4:5e:b5:8f:36:
91:38:7d:f3:ad:49:ac:9c:a3:33:ab:10:69:3d:18:
21:ee:1d:4c:70:69:61:d6:1f:40:ea:98:67:a5:7c:
24:aa:37:fd:88:95:03:3e:42:5d:90:4c:45:ef:1e:
17:f5:83:c1:23:fb:75:8d:d2:09:bf:db:b7:08:cf:
cf:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7F:78:9D:C2:69:49:6B:D7:23:E1:38:C9:D4:FE:5F:1F:F5:F3:4B
X509v3 Authority Key Identifier:
keyid:9A:37:DE:FF:05:5A:51:D9:3E:1E:D2:F7:C7:32:17:D7:60:7A:8C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjfe_wVaUdk-HtL3xzIX12B6jPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:de:e9:02:1b:20:4c:20:2f:5a:6e:c2:86:ac:77:dd:e4:fa:
64:2c:10:ac:9a:df:f7:c2:dd:e2:97:3d:67:e9:8c:60:92:e4:
8d:41:2f:84:87:9b:57:3a:f5:d2:12:74:43:c9:db:61:f5:0a:
64:df:e7:95:da:af:b1:2e:09:d9:e2:ce:81:07:98:b8:81:49:
07:39:b8:94:5b:87:ed:60:91:49:60:bf:52:78:5d:82:e9:68:
e1:a6:c8:47:0b:ed:ec:65:88:d0:dd:10:a1:95:92:d1:5b:12:
de:d4:b0:56:4b:b5:99:8c:25:8c:e5:2a:5a:91:8d:2e:91:e7:
ab:40:8d:d8:0a:d7:da:d5:c3:f8:cc:5e:3e:dc:71:e9:fb:92:
5d:c2:8e:c6:fe:07:fa:d4:35:60:b8:83:f6:92:a3:ad:53:8e:
e0:76:ed:3f:e2:f0:4f:30:56:ea:93:68:94:94:fc:dc:4a:ac:
a4:c4:f7:71:ce:b0:f6:56:68:6d:03:22:f9:c5:09:89:c7:b7:
db:26:df:d0:b9:0c:5b:1b:c9:32:30:8e:e3:3a:08:c1:06:63:
ca:74:f0:e0:df:28:f7:dd:fe:2a:f2:e2:b3:3c:ff:8d:e0:88:
1e:d7:79:b4:c9:93:e3:62:84:6c:e5:77:82:58:a8:e3:1d:fe:
c0:e9:58:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:56:42 2025 by rpki-client