Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.mft
File: MryjKc1OJWX_DRPoNVpuxMwXlOE.mft (raw, json)
Hash identifier: DddeHxlwLa/9NVFTUhXeTc0aYzlbI42nmCrcPj8xwkc=
Subject key identifier: 9E:74:CD:E5:40:9C:33:3A:25:59:49:BA:80:20:39:A1:64:99:77:A9
Authority key identifier: 32:BC:A3:29:CD:4E:25:65:FF:0D:13:E8:35:5A:6E:C4:CC:17:94:E1
Certificate issuer: /CN=32bca329cd4e2565ff0d13e8355a6ec4cc1794e1
Certificate serial: 01988543B6B14C82FF8D14766C7392EDEB57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MryjKc1OJWX_DRPoNVpuxMwXlOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.mft
Manifest number: 0CD3
Signing time: Thu 07 Aug 2025 16:01:04 +0000
Manifest this update: Thu 07 Aug 2025 16:01:04 +0000
Manifest next update: Fri 08 Aug 2025 16:01:04 +0000
Files and hashes: 1: EY9B7xHMl-Tku1EaPiHTMSJd4UY.roa (hash: fngf8eQs7Bwu0pM4j6i0WPj4gj/7hDrn6NltGJxnSqw=)
2: MryjKc1OJWX_DRPoNVpuxMwXlOE.crl (hash: i+9VuzeunDpVtYyhZ5RDVUxhnos7pQ7vtW+Qb7PYyMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MryjKc1OJWX_DRPoNVpuxMwXlOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:43:b6:b1:4c:82:ff:8d:14:76:6c:73:92:ed:eb:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32bca329cd4e2565ff0d13e8355a6ec4cc1794e1
Validity
Not Before: Aug 7 16:01:04 2025 GMT
Not After : Aug 8 16:01:04 2025 GMT
Subject: CN=9e74cde5409c333a255949ba802039a1649977a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:75:f6:60:f5:df:7c:3f:20:ab:c8:a8:9a:42:
6c:08:df:28:e2:7a:8d:4b:88:ab:a0:b6:ac:9d:69:
dd:31:2b:85:9e:b3:ce:8f:27:ee:b6:4b:61:f1:2c:
9f:93:14:a4:8f:cf:b9:c4:bf:80:50:75:aa:4e:e2:
b7:0b:34:d5:78:4f:77:86:2e:02:bb:5d:8d:a1:5b:
8e:36:50:bb:b1:61:85:b6:00:3a:92:18:8f:02:2d:
3f:6a:b1:29:68:7c:77:bf:cd:69:e2:03:9e:f1:45:
f6:e1:8e:73:00:54:50:11:d2:ea:07:90:53:36:92:
08:d0:f9:6d:28:54:85:3f:91:a1:5b:03:f1:9b:db:
2b:01:37:82:e1:12:25:db:2b:8b:69:e2:85:e1:e3:
2b:52:ee:d5:d2:a4:94:77:21:b6:c7:74:b1:6a:90:
87:2f:68:82:8f:1f:95:dc:2f:6c:a9:46:b4:97:46:
37:3c:66:1d:3b:90:2e:93:fc:32:6d:7c:36:c2:ec:
eb:0c:cb:7e:17:59:24:94:8a:63:9d:8a:1b:9f:a8:
7f:7a:1b:27:f3:a7:d2:ff:a7:3d:eb:bd:cb:6e:59:
d3:e2:11:4b:02:0f:5e:f8:8e:a4:c8:a6:7b:74:b7:
38:2c:8c:7f:65:40:db:0b:34:f3:34:89:85:a3:e1:
ee:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:74:CD:E5:40:9C:33:3A:25:59:49:BA:80:20:39:A1:64:99:77:A9
X509v3 Authority Key Identifier:
keyid:32:BC:A3:29:CD:4E:25:65:FF:0D:13:E8:35:5A:6E:C4:CC:17:94:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MryjKc1OJWX_DRPoNVpuxMwXlOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:13:d2:0a:0e:06:a1:8d:81:c9:eb:f3:69:5e:90:6f:80:99:
80:c9:6b:1e:6f:c1:ae:9c:04:a1:fa:03:cb:4e:16:1f:da:0a:
d2:5a:8c:c6:d5:af:7d:ce:28:67:96:d6:33:17:17:bb:1b:3e:
12:55:b1:07:e1:dc:f2:53:90:7a:f3:88:5c:f0:29:12:04:54:
9e:62:3d:59:57:48:4e:63:8b:40:d0:4f:b2:f6:36:ef:7e:db:
b0:1b:15:dc:98:c2:b6:21:b2:a3:e8:66:86:bc:77:c4:36:ee:
c7:21:fd:6c:d9:48:2e:a6:bf:1d:ce:d5:3e:04:bd:2c:f9:22:
fc:62:8e:cb:ec:ce:61:ef:43:1c:3a:75:a8:62:6b:96:40:cc:
fc:bc:bf:f5:2d:b1:7c:f4:25:bb:51:4d:5a:1b:51:c1:6e:62:
2e:13:02:e0:bf:35:01:19:20:55:56:53:87:1a:f1:e5:4b:48:
42:1d:fc:38:f2:a9:63:a9:93:29:88:38:9f:5b:3b:5c:76:30:
0f:11:7c:f9:0e:2b:d2:4e:fd:e7:1b:8b:ca:62:e9:aa:70:d8:
72:b4:8e:aa:8f:42:6b:75:e0:44:3e:9b:c3:c2:95:db:34:2b:
fa:d5:8a:c7:22:6f:2c:27:d0:87:4d:30:71:f0:85:d9:52:39:
d1:6a:e5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:02:06 2025 by rpki-client