Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.mft
File: MjiPz3TS5ZUk9OtNluRMUiLbY-E.mft (raw, json)
Hash identifier: 6/mC5xWLKl6Z13hSs0kfFewlNkLjVGyqIfbvux5ayvg=
Subject key identifier: F2:27:B7:F1:72:99:A9:9B:B8:D4:BA:82:FB:61:7C:69:23:1B:FC:22
Authority key identifier: 32:38:8F:CF:74:D2:E5:95:24:F4:EB:4D:96:E4:4C:52:22:DB:63:E1
Certificate issuer: /CN=32388fcf74d2e59524f4eb4d96e44c5222db63e1
Certificate serial: 01987D8A304938C0B9629DB008C546D7ADAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MjiPz3TS5ZUk9OtNluRMUiLbY-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.mft
Manifest number: 02E7
Signing time: Wed 06 Aug 2025 04:01:04 +0000
Manifest this update: Wed 06 Aug 2025 04:01:04 +0000
Manifest next update: Thu 07 Aug 2025 04:01:04 +0000
Files and hashes: 1: MjiPz3TS5ZUk9OtNluRMUiLbY-E.crl (hash: ypM9t4fC5BkI8kceD24AO24QpitC2PYQiXVS3gyaO3A=)
2: l_KNRz-DOMsGFsOq9QowWZSTlSY.roa (hash: npXTC3HvU34eVfQ3A8stCbWQJ3DirxlZznu2fCVNFbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/MjiPz3TS5ZUk9OtNluRMUiLbY-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:30:49:38:c0:b9:62:9d:b0:08:c5:46:d7:ad:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32388fcf74d2e59524f4eb4d96e44c5222db63e1
Validity
Not Before: Aug 6 04:01:04 2025 GMT
Not After : Aug 7 04:01:04 2025 GMT
Subject: CN=f227b7f17299a99bb8d4ba82fb617c69231bfc22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a0:a6:7c:f1:f5:bf:b6:08:c2:72:39:2b:37:
02:3e:81:2e:85:22:c2:99:40:b6:f1:82:1c:ba:21:
b1:7a:49:c5:0d:23:27:f6:0e:b0:ba:b5:81:82:49:
eb:a4:77:5a:08:60:91:e7:cf:fb:26:ed:e7:f9:4a:
8a:36:cf:41:18:20:6b:07:cc:cf:a7:9c:c6:df:7a:
72:b3:24:f2:a8:40:82:46:7e:04:3c:cd:d0:d9:23:
5e:6c:9c:bc:5a:c2:74:e6:9a:28:47:79:c7:17:71:
7b:5a:d8:08:95:2a:8e:d9:78:65:94:ce:6a:e1:8b:
b0:49:1e:4d:75:55:6c:c0:9c:0f:e9:08:b3:8d:94:
b4:bc:d0:0d:fe:60:d4:7b:87:18:64:5f:ef:49:be:
e6:fd:aa:53:d3:ba:7e:14:22:ea:86:60:b8:0e:7f:
7f:7e:5c:e5:95:69:d0:e9:ad:e1:3c:ff:cb:4e:b8:
0c:65:4e:7d:17:e4:3e:e2:21:d0:09:31:58:4c:f7:
32:b3:80:b5:73:4e:38:c7:1b:30:fe:25:49:2c:50:
c7:92:c3:4b:68:24:da:00:f0:0c:88:aa:e0:da:54:
07:28:1a:a1:a5:b3:e6:3a:0f:83:53:df:b1:7f:f6:
89:f1:54:5c:05:17:31:c2:90:30:c3:e1:1b:56:3e:
02:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:27:B7:F1:72:99:A9:9B:B8:D4:BA:82:FB:61:7C:69:23:1B:FC:22
X509v3 Authority Key Identifier:
keyid:32:38:8F:CF:74:D2:E5:95:24:F4:EB:4D:96:E4:4C:52:22:DB:63:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MjiPz3TS5ZUk9OtNluRMUiLbY-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:64:61:d0:76:4e:41:43:17:51:40:a1:64:00:a9:a7:69:88:
ec:82:98:70:bc:58:29:f7:b7:ec:4b:f7:54:22:b7:6c:88:7e:
5c:52:4a:18:3a:2d:02:15:7a:1f:52:3f:d7:1f:61:a2:ef:e1:
bf:32:bf:29:d7:15:08:23:f9:12:13:1f:ff:cd:ed:c4:22:d5:
51:29:09:1b:c3:73:30:86:0d:9f:da:c4:79:43:d9:ae:76:fd:
ad:50:19:48:3d:b8:b1:36:ba:e5:5a:3b:31:51:d2:69:73:7d:
7e:88:22:a2:67:64:84:1b:90:ee:a4:17:de:69:08:38:1f:f0:
f3:2b:56:81:0e:e9:3b:23:f0:cb:5e:18:ad:e8:e1:8a:08:3d:
97:c4:0d:18:65:57:dc:7e:88:f6:e9:11:fa:4d:5e:de:61:68:
c8:62:7c:90:40:ad:4d:ab:17:06:ee:93:97:27:5a:f0:e1:cf:
cb:71:c5:5b:3e:21:cf:b0:19:27:8b:7c:1f:79:34:43:7a:25:
e9:71:14:c3:de:1e:a0:63:79:75:ed:57:ac:52:89:9e:cf:70:
dd:48:0a:ea:68:ab:16:e7:ea:e6:04:03:da:8b:ba:fd:12:21:
4e:35:e8:ed:3e:c1:23:4a:18:f1:35:13:08:d6:d3:48:f3:e4:
ba:9d:aa:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:07:57 2025 by rpki-client