Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6ecfca-feb2-4af0-aefe-799509d19ac3/1/Mj4i0VNpL6h29FppimQHCr0puzk.mft
File: Mj4i0VNpL6h29FppimQHCr0puzk.mft (raw, json)
Hash identifier: 7Ba29Wtg3ktiY7UKRQbl4esjOdllopyM9S05aBTBfKQ=
Subject key identifier: 5E:69:BA:A8:83:C7:07:45:DC:CE:B8:4B:C8:D9:1A:05:EA:6B:04:0D
Authority key identifier: 32:3E:22:D1:53:69:2F:A8:76:F4:5A:69:8A:64:07:0A:BD:29:BB:39
Certificate issuer: /CN=323e22d153692fa876f45a698a64070abd29bb39
Certificate serial: 01989ECD20A7A14C1FB02238CD300BEB51A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mj4i0VNpL6h29FppimQHCr0puzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6ecfca-feb2-4af0-aefe-799509d19ac3/1/Mj4i0VNpL6h29FppimQHCr0puzk.mft
Manifest number: E8
Signing time: Tue 12 Aug 2025 15:01:40 +0000
Manifest this update: Tue 12 Aug 2025 15:01:40 +0000
Manifest next update: Wed 13 Aug 2025 15:01:40 +0000
Files and hashes: 1: Mj4i0VNpL6h29FppimQHCr0puzk.crl (hash: xCdTOr96ujD06/LrMog1bd01DiduSR/zMSfuQDqM//U=)
2: UPOmKS-wCVFYZbdnuQ3DjxycBYs.roa (hash: wDCKtOot6cNGvhctv9YJsxtzSFcNno8Vt28nw8UusF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6ecfca-feb2-4af0-aefe-799509d19ac3/1/Mj4i0VNpL6h29FppimQHCr0puzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6ecfca-feb2-4af0-aefe-799509d19ac3/1/Mj4i0VNpL6h29FppimQHCr0puzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mj4i0VNpL6h29FppimQHCr0puzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 15:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:cd:20:a7:a1:4c:1f:b0:22:38:cd:30:0b:eb:51:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=323e22d153692fa876f45a698a64070abd29bb39
Validity
Not Before: Aug 12 15:01:40 2025 GMT
Not After : Aug 13 15:01:40 2025 GMT
Subject: CN=5e69baa883c70745dcceb84bc8d91a05ea6b040d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:81:5b:ef:fa:43:19:18:99:32:ae:e0:f9:79:
3e:05:85:fc:e2:0b:eb:04:63:83:f6:38:2f:65:2c:
56:db:f2:62:4d:ed:7e:fc:9a:7b:61:e0:d3:69:b0:
e9:5e:4b:78:1d:c9:67:2a:77:23:75:04:a4:86:95:
db:41:d8:d5:6e:db:46:5c:c0:97:84:0e:19:4a:6f:
e7:6c:df:67:44:96:e4:ca:73:c3:74:1f:22:e1:14:
4f:25:fc:4c:f0:af:7d:80:f5:72:d8:74:68:7c:ed:
a1:78:1c:5a:3c:e7:d9:aa:10:4d:bc:d5:b7:fc:48:
47:45:7d:22:3a:e3:25:12:2b:70:dc:e1:9e:fb:b0:
e3:b0:c8:d6:a1:13:e4:e3:57:f3:18:bd:6f:2e:ee:
10:84:35:30:8a:0f:41:93:8d:57:3d:3a:d5:46:b8:
3e:1b:24:6f:a6:13:30:00:2d:fc:9e:b9:47:05:d3:
e2:9f:77:d8:07:4a:8c:fe:33:e1:41:a6:24:90:92:
e8:61:ee:8a:bc:4f:57:b5:3b:25:fe:dc:13:75:9e:
bf:97:04:27:98:b3:26:f4:ee:89:97:10:56:c9:eb:
f8:d1:43:a3:ea:a5:3b:63:4a:cc:94:e6:f0:7b:a4:
38:ab:e6:d4:bf:24:3b:3f:93:c4:9f:e4:d6:40:3d:
ad:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:69:BA:A8:83:C7:07:45:DC:CE:B8:4B:C8:D9:1A:05:EA:6B:04:0D
X509v3 Authority Key Identifier:
keyid:32:3E:22:D1:53:69:2F:A8:76:F4:5A:69:8A:64:07:0A:BD:29:BB:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mj4i0VNpL6h29FppimQHCr0puzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6ecfca-feb2-4af0-aefe-799509d19ac3/1/Mj4i0VNpL6h29FppimQHCr0puzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6ecfca-feb2-4af0-aefe-799509d19ac3/1/Mj4i0VNpL6h29FppimQHCr0puzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ac:93:70:c2:d3:63:15:00:f7:a2:76:92:8d:5d:97:f8:29:
39:37:da:fe:2f:c7:09:25:76:07:4d:fb:3f:2d:c0:02:83:3f:
03:55:97:66:89:ff:43:84:21:94:dc:a4:72:0c:c4:fc:03:2f:
eb:65:8b:ee:e2:09:5b:bb:f6:33:ad:04:83:ca:86:54:d6:76:
ff:90:f7:3b:35:60:46:b3:f6:1c:ac:40:0c:62:2b:44:96:65:
6b:fb:9a:8d:f0:3b:c1:ec:5d:40:8b:ab:a6:5b:69:29:53:df:
a7:0c:6d:b1:3c:fd:bc:72:da:12:15:84:0e:05:a8:45:2d:81:
cd:48:bc:74:b4:5c:91:46:31:af:d4:59:e2:c6:ee:70:51:1d:
de:9b:8e:59:f5:c5:1e:76:da:0d:c9:0d:66:5e:8b:f4:7a:dc:
46:c9:d5:4f:5e:96:04:89:2d:94:fb:48:d1:3a:62:77:89:ab:
d6:fa:19:8e:f0:19:01:7c:16:6f:fb:4d:23:4a:29:7a:db:36:
db:ed:2b:a5:5a:03:0f:b5:8d:b1:10:05:bb:8f:94:80:a4:e3:
3a:a0:1c:ce:71:b2:5c:a0:6b:04:b4:56:66:67:27:81:05:c7:
59:a3:e1:55:44:c5:9d:40:5f:65:f0:cd:63:f9:3c:d2:4a:be:
f5:d1:67:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:37:46 2025 by rpki-client