Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.mft
File: MDeJJY5gnz5VjXezv9CKzzUV-pI.mft (raw, json)
Hash identifier: +iCs6fUkOBllPBiPIuKmyrJwT01L2Gi7CWkv2a9hl7w=
Subject key identifier: 38:2C:F7:1C:50:44:E4:A8:42:9F:29:DD:78:D6:CC:4F:6E:BC:F0:AB
Authority key identifier: 30:37:89:25:8E:60:9F:3E:55:8D:77:B3:BF:D0:8A:CF:35:15:FA:92
Certificate issuer: /CN=303789258e609f3e558d77b3bfd08acf3515fa92
Certificate serial: 01989893F4FB8469ADB7140481D2E90E7E0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDeJJY5gnz5VjXezv9CKzzUV-pI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.mft
Manifest number: 1004
Signing time: Mon 11 Aug 2025 10:01:30 +0000
Manifest this update: Mon 11 Aug 2025 10:01:30 +0000
Manifest next update: Tue 12 Aug 2025 10:01:30 +0000
Files and hashes: 1: CxgP4WGmDc-j3ZUPD_Rcb4uV8ns.roa (hash: XodVBcVXpLoQd1C4J0bRPfMq7vIVpbrh7r32+gpZkVk=)
2: MDeJJY5gnz5VjXezv9CKzzUV-pI.crl (hash: T3V+zvLme0CLEODzaHm9e5CM9GyccfjWP3RHbJ8u15s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MDeJJY5gnz5VjXezv9CKzzUV-pI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 10:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:98:93:f4:fb:84:69:ad:b7:14:04:81:d2:e9:0e:7e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=303789258e609f3e558d77b3bfd08acf3515fa92
Validity
Not Before: Aug 11 10:01:30 2025 GMT
Not After : Aug 12 10:01:30 2025 GMT
Subject: CN=382cf71c5044e4a8429f29dd78d6cc4f6ebcf0ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:46:45:2f:0a:11:a3:00:9c:3e:63:e9:70:9f:
41:5b:8d:57:00:9a:57:5f:52:e1:23:aa:3f:1a:34:
67:01:42:30:7a:06:06:28:07:fc:d0:7c:a5:64:33:
9f:90:94:a7:8f:d5:64:5b:55:cb:26:1c:af:49:09:
e9:5f:77:31:4c:7a:d5:05:b4:1c:3c:e0:f2:a7:17:
ca:bf:46:4d:0e:ef:75:4e:7c:fc:2f:47:b6:f0:36:
4a:da:19:83:e0:17:0a:25:fe:86:4c:11:cc:61:7a:
10:ab:21:f6:41:2a:5b:06:05:f6:c8:50:ea:97:b9:
9b:08:30:37:1a:ba:c6:53:74:c8:b1:ac:c9:6c:d3:
5b:d2:b7:56:6f:a9:1a:dd:2f:ff:d2:e1:d8:ab:f7:
f4:17:9d:6c:ee:53:5c:38:9b:bc:ee:bd:bd:5a:3c:
49:f3:97:b1:c2:10:46:a3:e4:fd:74:f2:40:cd:0d:
ac:b8:d2:1e:4d:ee:49:58:34:4a:54:bc:e4:5e:64:
2f:cc:72:aa:5a:3b:dc:52:e7:bc:be:8f:c9:9a:8f:
1e:a9:12:32:53:49:d2:fc:3a:6f:aa:6a:c1:91:96:
94:11:25:df:c1:1d:9e:0a:45:0a:e9:a5:e4:13:25:
7f:76:15:e1:b9:48:98:d5:0e:8e:f3:a0:8d:07:b9:
7d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:2C:F7:1C:50:44:E4:A8:42:9F:29:DD:78:D6:CC:4F:6E:BC:F0:AB
X509v3 Authority Key Identifier:
keyid:30:37:89:25:8E:60:9F:3E:55:8D:77:B3:BF:D0:8A:CF:35:15:FA:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDeJJY5gnz5VjXezv9CKzzUV-pI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:90:fa:40:2b:9d:5e:48:c0:a7:a3:4a:eb:06:62:14:bf:aa:
ec:2c:04:24:0e:b2:56:9d:08:20:6d:a5:b4:4f:53:1f:ca:8d:
69:b8:9e:2f:9a:fa:0e:e8:07:50:a5:38:6e:64:0f:3b:16:74:
e2:e7:da:c5:0d:07:cb:92:0f:3e:be:4e:c4:24:7a:a6:38:d6:
b4:33:96:31:6c:36:82:80:de:cd:ff:e3:94:a8:c4:2a:f0:c9:
98:6f:21:72:8b:92:41:6a:2c:9c:ff:86:0e:6d:d4:74:eb:13:
a8:ec:ef:7f:ed:43:38:cd:3c:3f:1c:ca:7a:16:76:5c:72:cc:
19:8b:ad:96:ca:f9:e1:27:ea:c9:e4:11:8c:a9:4a:03:e2:c8:
df:33:ef:2b:45:d0:e2:1a:29:76:db:8e:2e:2d:bb:dc:80:f4:
36:c9:8e:b9:3d:4e:bf:62:d2:9b:14:db:9d:50:16:5a:f3:2b:
4a:96:70:3d:f9:38:46:c2:34:eb:56:46:81:ea:97:f3:c1:ee:
7f:44:33:98:0b:0a:c8:94:b9:e4:b7:76:81:18:20:bb:13:8d:
55:2f:7c:85:6a:df:9c:09:6e:68:e9:0a:48:91:1d:77:10:60:
d4:fd:82:61:cd:92:e8:28:f4:2d:bd:3a:63:67:ab:d6:24:b3:
f0:eb:45:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 12:52:03 2025 by rpki-client