Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
File: MXvyYLzaMCviwgdijPsWRHhhT-U.mft (raw, json)
Hash identifier: 65nk3NKJWf7XnUTbapS8bLbOZl7d0whyjgs1PyUe8Rw=
Subject key identifier: 9E:4B:58:C0:54:A6:8B:37:9D:F2:77:A3:C2:34:C3:9E:14:2B:49:23
Authority key identifier: 31:7B:F2:60:BC:DA:30:2B:E2:C2:07:62:8C:FB:16:44:78:61:4F:E5
Certificate issuer: /CN=317bf260bcda302be2c207628cfb164478614fe5
Certificate serial: 019847E50DD342237B1C39FE63C36D6E826A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
Manifest number: 0D74
Signing time: Sat 26 Jul 2025 18:00:50 +0000
Manifest this update: Sat 26 Jul 2025 18:00:50 +0000
Manifest next update: Sun 27 Jul 2025 18:00:50 +0000
Files and hashes: 1: MXvyYLzaMCviwgdijPsWRHhhT-U.crl (hash: lg5VkQ/wPZ/MN8OHGVZyeS6SXyxOJry/5gQzFUgNThE=)
2: penXvalgbMBLZqcx96rUayqK3NQ.roa (hash: vb/Iw29Kb6TCjGenAwHcr/Ra62ZOMD3/iU+HDEP/27c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e5:0d:d3:42:23:7b:1c:39:fe:63:c3:6d:6e:82:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317bf260bcda302be2c207628cfb164478614fe5
Validity
Not Before: Jul 26 18:00:50 2025 GMT
Not After : Jul 27 18:00:50 2025 GMT
Subject: CN=9e4b58c054a68b379df277a3c234c39e142b4923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:95:43:7c:7b:90:54:8a:cc:46:73:4b:f0:5a:
f7:19:dc:fa:a3:0b:ce:99:42:6c:bb:32:db:37:64:
16:d0:af:9a:d3:01:35:fe:db:f7:ef:52:e4:ae:58:
96:dc:49:b6:42:f5:02:85:3a:7d:24:af:78:47:82:
1c:5f:54:d2:6b:69:da:dc:ce:c5:8a:3c:39:5e:b0:
55:9c:6e:2a:4b:5d:10:df:22:60:9e:2c:e9:a1:7b:
0f:5d:75:08:75:01:43:48:bc:11:bc:45:c4:e5:51:
9c:bb:01:3f:3d:52:99:2b:d4:28:8b:45:88:79:67:
29:83:2e:f7:0c:9f:29:e8:1d:5f:7a:f7:be:91:b1:
ca:8a:fc:94:6f:8b:55:d5:ec:41:11:3d:df:bc:b1:
0e:4d:03:f1:82:94:2d:b1:78:1e:fd:c9:3b:2a:f6:
5f:6c:5d:40:d0:bd:6c:eb:43:40:70:14:4e:70:ca:
79:4e:91:31:95:5e:16:f4:0d:52:94:4e:f7:4a:71:
21:a5:f5:1c:d9:c7:e1:0d:c0:06:eb:1f:ba:7c:d6:
5a:94:f2:0b:8d:b8:8e:4e:f0:f9:0a:24:3b:8f:32:
6f:ce:52:eb:48:86:f2:07:22:d2:b8:bd:25:c4:b2:
6f:2e:6d:11:b6:89:a4:3a:ca:43:32:e1:f5:17:0e:
8a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:4B:58:C0:54:A6:8B:37:9D:F2:77:A3:C2:34:C3:9E:14:2B:49:23
X509v3 Authority Key Identifier:
keyid:31:7B:F2:60:BC:DA:30:2B:E2:C2:07:62:8C:FB:16:44:78:61:4F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:c7:77:b3:e0:be:35:03:17:a6:f6:e5:6b:86:37:f3:3d:74:
19:b9:b1:03:bf:f9:f7:36:d3:f4:c5:c4:5b:54:72:64:e3:68:
57:82:46:99:71:65:b5:3d:9e:23:04:c9:7c:96:1e:e8:04:d9:
00:ca:29:a3:bf:89:ed:00:52:c2:3d:94:73:be:80:31:15:66:
49:ac:30:05:da:db:4c:f1:4e:e8:15:71:78:8f:f9:39:f2:77:
7c:b6:9f:10:00:fa:00:b2:d6:cd:34:54:ef:99:2e:e8:9c:44:
2a:68:c9:f5:99:33:55:a8:30:f8:1f:1a:dd:03:d0:27:ee:ec:
31:ee:eb:04:77:7f:32:18:0d:6b:7b:43:d9:17:7b:54:4f:87:
22:59:cb:63:18:0c:96:96:6e:41:67:b3:73:9f:8b:61:d9:09:
b7:87:c9:a2:73:f6:9b:46:2d:98:42:38:e7:99:d8:52:97:cb:
5c:93:fd:54:9a:5b:0f:82:05:e4:24:38:e4:ed:4b:aa:14:eb:
53:dc:5f:f0:df:3d:1a:b9:da:c3:32:d7:22:3a:2e:7a:46:2f:
b6:d7:83:b0:ff:5e:a3:58:e5:7e:91:6a:51:07:6e:d4:5c:cf:
36:b7:df:9a:2e:42:86:97:26:86:f7:0e:c7:00:32:b3:7e:38:
95:c7:ef:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:53:46 2025 by rpki-client