Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
File: MvBHo0IShysLH_gE7gIrAq91_-0.mft (raw, json)
Hash identifier: 7voSN28tMnE0GlZ/Ie8DDgt3rED4VnwwcY+pyt148MU=
Subject key identifier: D9:79:67:D2:3A:78:17:80:C9:C7:55:9B:35:1E:87:E0:A5:5A:52:41
Authority key identifier: 32:F0:47:A3:42:12:87:2B:0B:1F:F8:04:EE:02:2B:02:AF:75:FF:ED
Certificate issuer: /CN=32f047a34212872b0b1ff804ee022b02af75ffed
Certificate serial: 019874F4F90F66A9075A68CF1D311A58BD96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
Manifest number: 05C2
Signing time: Mon 04 Aug 2025 12:01:08 +0000
Manifest this update: Mon 04 Aug 2025 12:01:08 +0000
Manifest next update: Tue 05 Aug 2025 12:01:08 +0000
Files and hashes: 1: MvBHo0IShysLH_gE7gIrAq91_-0.crl (hash: 6k/jTrDc8ej1YTmTJz5XOgqBobys3AMAAAZofOsXYbY=)
2: WgGE8SmHkkHtiKjEfowQOh6KXV8.roa (hash: 22fxBEDWF5kPp/e3BDEYhqrTgPBi1KncqCiTSsX2CWM=)
3: pvxgjOK61sSAIjSKXGp9wCqGnds.roa (hash: cyj8Q0roEhc5/yo7oP4F2A5FfhnYWsPzbSEckXutgEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f4:f9:0f:66:a9:07:5a:68:cf:1d:31:1a:58:bd:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32f047a34212872b0b1ff804ee022b02af75ffed
Validity
Not Before: Aug 4 12:01:08 2025 GMT
Not After : Aug 5 12:01:08 2025 GMT
Subject: CN=d97967d23a781780c9c7559b351e87e0a55a5241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5c:24:fe:1e:ff:41:94:30:6e:e5:bf:7c:ae:
58:20:9b:e7:e8:90:c9:3e:38:f6:11:d1:d0:36:b6:
66:04:06:01:05:af:c9:00:bf:e7:08:a3:5e:37:1a:
d8:8b:ed:aa:38:a8:7a:0e:43:18:60:f7:aa:03:4e:
65:1b:4b:f3:a5:53:05:63:b4:c6:55:52:07:be:db:
13:64:59:37:27:8b:fb:93:2f:cb:0e:73:49:3e:21:
d7:bd:6f:f0:9e:57:3c:6e:3b:80:86:10:12:75:b8:
27:8f:18:ce:71:77:e0:1e:c3:bf:10:68:64:67:63:
bc:8d:55:d7:9e:59:e7:42:07:41:11:29:75:ef:e3:
b8:01:cc:76:74:86:ce:ea:37:b3:24:06:69:2b:b9:
f6:e3:30:77:fe:bb:05:66:bd:33:b9:6d:6e:15:69:
ac:2e:c0:65:27:6a:44:f4:f9:fa:8e:fb:9d:62:5e:
42:42:36:9d:7a:ea:ee:72:e3:46:93:1a:62:75:5d:
bc:8a:a3:c3:ae:e2:8c:91:db:0e:22:9d:81:49:2e:
50:43:94:5b:71:85:17:95:4f:a9:34:04:a8:7f:ca:
fe:c8:05:98:ec:77:37:d5:d6:88:58:2c:45:c3:a7:
a9:35:ec:99:64:7c:0b:49:b5:ad:70:a7:49:91:d9:
3a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:79:67:D2:3A:78:17:80:C9:C7:55:9B:35:1E:87:E0:A5:5A:52:41
X509v3 Authority Key Identifier:
keyid:32:F0:47:A3:42:12:87:2B:0B:1F:F8:04:EE:02:2B:02:AF:75:FF:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:02:59:fa:84:b2:6f:61:39:cc:95:ad:ec:fb:42:f8:0a:01:
b6:88:ac:4f:09:b4:41:c9:f8:79:f8:ce:44:85:7d:8a:08:1c:
9c:91:90:68:77:9e:26:1b:d3:8c:9f:a9:08:ff:e5:72:56:81:
39:1c:f5:11:4f:c2:d8:a9:88:cd:34:cc:ff:d0:e4:b0:2c:52:
54:4c:ef:41:67:06:9e:bc:52:95:69:6c:9c:aa:99:84:5c:03:
39:bd:63:6e:eb:56:03:c9:fa:d0:bc:96:22:ff:5c:93:37:5f:
52:74:3d:0a:1c:52:a6:de:99:e2:4c:77:45:1d:04:70:b2:f9:
77:9c:9a:ad:88:c1:b9:79:3e:b8:c9:34:2c:bf:95:9c:9b:51:
a1:6f:fc:06:71:03:6c:31:30:70:6a:a0:f1:0c:05:69:41:4a:
dd:28:d3:41:9d:6d:4a:7d:84:82:b4:ee:a2:41:d3:53:a6:3d:
04:ec:82:6a:cc:bb:ee:bd:0c:f5:5d:1d:e8:61:94:0f:8f:a5:
e5:4c:15:d2:03:de:e9:8e:fc:3c:5e:9d:98:0b:95:3e:71:ea:
18:aa:37:b1:ad:2f:ba:2a:b8:c6:2f:f2:d0:74:0c:24:97:9e:
21:31:34:b2:d3:5f:60:b1:07:ef:f1:a4:bc:75:6f:f4:46:46:
07:24:b9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:14:13 2025 by rpki-client