Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.mft
File: Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.mft (raw, json)
Hash identifier: ZlwXtBZo+oNKqu88DyFOCWVD0QfoP3LkoOfW3OLJJIg=
Subject key identifier: 91:6A:CB:01:C8:97:7C:FE:BB:9F:D7:C1:7A:9C:37:48:93:E1:24:FD
Authority key identifier: 32:38:78:6E:9F:70:E6:DB:74:23:0D:72:67:5A:48:3B:D2:4E:F2:56
Certificate issuer: /CN=3238786e9f70e6db74230d72675a483bd24ef256
Certificate serial: 01989FDEC07DD5730E31975EF3401EA2C5B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.mft
Manifest number: 14E6
Signing time: Tue 12 Aug 2025 20:00:32 +0000
Manifest this update: Tue 12 Aug 2025 20:00:32 +0000
Manifest next update: Wed 13 Aug 2025 20:00:32 +0000
Files and hashes: 1: Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.crl (hash: g6UrFaY1Vd58sawWXu9Z3rQxpr0mExfZ1R8xt95z+kg=)
2: l77XDKqfVAj_0QN9hL5E5zPQSwI.roa (hash: JB8S1ZVJbd9P8hIkFLEuRz8lxPAo3SSfvjCCRc2tF5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 20:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:de:c0:7d:d5:73:0e:31:97:5e:f3:40:1e:a2:c5:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3238786e9f70e6db74230d72675a483bd24ef256
Validity
Not Before: Aug 12 20:00:32 2025 GMT
Not After : Aug 13 20:00:32 2025 GMT
Subject: CN=916acb01c8977cfebb9fd7c17a9c374893e124fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:11:3b:5a:f8:c0:c3:2a:56:1e:30:99:2c:ed:
a1:bd:72:a0:a2:b3:83:da:90:67:de:6a:33:16:c5:
76:70:ca:c9:ef:09:a5:d9:5a:17:73:93:d6:35:d3:
9a:19:11:f4:11:64:1d:97:6e:8f:d5:0e:ab:17:a3:
3b:05:33:fc:5c:77:69:4a:70:0b:06:a9:e5:dc:6d:
5d:54:1d:86:16:16:39:5d:64:7d:d6:66:05:21:32:
c0:a6:0f:4e:a9:3d:c3:20:84:74:41:95:57:bd:e6:
54:71:18:66:e5:93:c7:3d:d7:a5:85:7e:42:59:16:
0c:63:65:e2:07:d9:e5:b5:b5:c6:23:df:18:57:30:
0e:aa:34:b5:94:aa:b0:32:bb:f5:e5:79:89:f1:0e:
10:b4:19:fc:d1:96:3f:5a:08:37:8e:14:1e:f1:07:
27:b8:52:c7:87:36:71:d8:a8:f5:e6:f1:58:b0:cf:
28:d0:60:94:b5:5e:7b:3d:5b:d2:57:3a:9e:9d:63:
5a:62:db:f2:e5:22:bd:7e:31:d7:c4:ed:00:6e:3b:
e0:67:fa:3d:b8:d0:bf:71:95:6c:46:23:d8:3a:0a:
98:a0:45:3a:36:ab:8e:71:ed:7f:dc:10:84:13:d7:
3a:a4:d9:7e:79:84:b9:cb:79:64:cf:8b:13:9a:22:
2a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:6A:CB:01:C8:97:7C:FE:BB:9F:D7:C1:7A:9C:37:48:93:E1:24:FD
X509v3 Authority Key Identifier:
keyid:32:38:78:6E:9F:70:E6:DB:74:23:0D:72:67:5A:48:3B:D2:4E:F2:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:1d:24:eb:e1:06:0a:37:d0:13:1e:4f:df:a0:b1:63:17:e3:
84:09:c9:52:55:e6:f4:6f:e7:f3:69:ce:0e:d2:ec:fd:86:6e:
5c:99:1c:b5:7a:4d:7a:3f:9d:80:09:c3:ee:3e:88:3a:94:c9:
1c:39:f8:78:f4:b8:af:91:65:88:0b:79:eb:a0:65:1e:22:ac:
ab:2a:92:6e:0b:cd:17:bb:3e:e6:da:0d:a7:5a:ff:01:01:86:
ed:9b:18:61:3a:20:fd:52:29:5b:5f:1d:42:3d:0c:d6:de:ba:
e9:e7:87:53:b5:88:bd:22:84:20:f2:b4:d4:f2:de:be:c5:3b:
0e:9d:31:4d:04:c4:d1:70:33:2d:08:44:bf:49:10:69:44:7e:
b4:b2:e3:25:82:61:36:95:73:6f:cc:e5:f1:66:2b:11:a3:49:
9e:ca:6e:7c:ad:09:3d:73:39:8e:9b:09:0c:24:b1:e5:6d:94:
e4:c0:9f:1e:b3:7e:78:d7:2d:06:20:00:9e:d0:1e:8b:0f:60:
45:7b:84:2c:07:03:32:d1:6d:87:21:40:8e:eb:f4:9f:d7:d2:
a2:1b:ab:09:ba:84:2e:8f:7c:f3:72:4f:10:41:0f:3d:2a:cc:
ea:9a:7e:4c:a2:60:43:04:91:05:60:d8:e5:1d:1d:0c:ac:36:
89:a5:25:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:24:16 2025 by rpki-client