Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft
File: Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft (raw, json)
Hash identifier: 5lE97AKaCjiuHpoufSbjkteOOnT7pz29CfU7NU00Wow=
Subject key identifier: 81:31:DA:AC:05:7D:F9:3C:0B:44:1B:F7:D0:BE:19:17:0F:E7:05:BD
Authority key identifier: 32:BD:EC:F2:B1:A4:10:F6:52:3C:20:E6:30:82:67:09:CB:6D:AC:19
Certificate issuer: /CN=32bdecf2b1a410f6523c20e630826709cb6dac19
Certificate serial: 0198733D012E31B831C5674FA76209C8502D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mr3s8rGkEPZSPCDmMIJnCcttrBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft
Manifest number: 0E31
Signing time: Mon 04 Aug 2025 04:00:34 +0000
Manifest this update: Mon 04 Aug 2025 04:00:34 +0000
Manifest next update: Tue 05 Aug 2025 04:00:34 +0000
Files and hashes: 1: 1ykQwAr7tjzYeu5N5mzq1ApyYvM.roa (hash: 5NLaYiuNwek7qbqlr2qTFyj4HJSwenOAixDp+ZTkHiw=)
2: Mr3s8rGkEPZSPCDmMIJnCcttrBk.crl (hash: Icqw0N8Z1epSqSv1kYFSxnFodDjjBio0tA9AIW8udLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mr3s8rGkEPZSPCDmMIJnCcttrBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:01:2e:31:b8:31:c5:67:4f:a7:62:09:c8:50:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32bdecf2b1a410f6523c20e630826709cb6dac19
Validity
Not Before: Aug 4 04:00:34 2025 GMT
Not After : Aug 5 04:00:34 2025 GMT
Subject: CN=8131daac057df93c0b441bf7d0be19170fe705bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:32:ed:dc:26:9b:7b:36:ce:3b:72:54:99:cf:
79:a7:ce:d4:f9:66:9f:e5:1d:aa:5e:86:ac:5b:96:
f7:7d:c2:b7:e1:29:9d:ad:e6:04:4d:6f:7c:18:92:
61:15:3e:ff:b6:c8:75:df:ff:36:37:12:16:91:07:
13:d7:f9:a9:06:8a:4c:6e:17:da:ec:d9:83:a2:58:
7b:c3:e5:f5:a6:78:06:67:37:c2:cc:3b:6d:fb:95:
96:9f:d2:ca:ed:17:d7:cc:2a:e6:a8:96:24:0a:a1:
f3:5d:0c:da:27:b3:b8:a9:6f:aa:c7:d8:c9:2b:d0:
34:c2:8a:ee:6a:04:ab:43:fc:63:24:c2:cb:26:61:
0d:3e:40:58:d9:a5:91:b1:ab:a2:89:19:e1:92:2b:
51:99:89:d4:c0:5f:45:40:c2:bc:85:bc:57:64:dc:
88:45:1f:e2:b0:9b:3d:45:61:ae:2a:f2:d7:00:f7:
0f:0c:87:17:22:bc:ad:cb:8a:76:c3:d7:9b:5b:f9:
98:ba:d5:1b:48:9c:77:ed:90:30:57:15:af:98:39:
ed:2f:54:20:2e:52:14:76:5c:6b:b5:c4:cb:09:73:
40:96:67:14:00:8a:e7:c6:48:0a:ce:61:b6:a4:8f:
1e:89:79:10:cc:11:82:ec:f3:2a:8b:7e:fd:59:f6:
ef:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:31:DA:AC:05:7D:F9:3C:0B:44:1B:F7:D0:BE:19:17:0F:E7:05:BD
X509v3 Authority Key Identifier:
keyid:32:BD:EC:F2:B1:A4:10:F6:52:3C:20:E6:30:82:67:09:CB:6D:AC:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mr3s8rGkEPZSPCDmMIJnCcttrBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:17:f5:65:0f:0f:15:23:2f:b6:5a:c2:da:21:84:22:5d:cc:
e8:27:dd:ef:6b:0f:c4:41:bf:45:6d:da:cb:47:da:0b:21:80:
f0:6c:41:26:50:99:97:0d:05:7a:cb:15:1f:7f:1e:5b:e4:d4:
ae:33:44:68:fe:76:23:f8:6f:74:5b:ef:10:2c:8e:4e:19:b0:
33:c6:11:20:ef:b0:08:b5:fa:d3:3f:42:22:29:1a:87:49:a8:
9e:ef:c7:4d:c3:4c:89:36:ae:69:a1:89:bd:e1:0f:e5:49:50:
55:34:e5:0d:28:f3:0d:4b:25:6b:52:94:5d:e7:30:66:73:48:
b5:66:df:28:4f:da:6c:17:2c:f3:e5:35:a1:45:06:26:c0:e2:
e7:99:d5:df:60:e5:59:05:50:c2:6c:ad:bb:33:e0:c6:04:24:
d7:01:35:9c:f2:bf:b0:2d:ed:b1:0a:d1:7f:6e:47:ba:0e:48:
5b:ff:dc:45:a4:bb:58:12:1c:34:93:d6:e4:f0:b8:73:a6:8f:
ec:2b:97:c9:3c:a6:5e:df:48:50:de:b5:ce:41:c0:c5:7c:b6:
e1:93:8a:d3:f6:1c:30:af:97:ad:47:c8:ff:9d:b6:ed:96:00:
9a:ed:81:6d:23:df:f7:90:8d:e3:47:35:03:4e:7e:89:d0:e5:
3b:0f:2a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:32 2025 by rpki-client