Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.mft
File: MtOVxX39MMDNLDD0IziuTBSnUKE.mft (raw, json)
Hash identifier: kzAZvk3z+jWbtEaksCfi1SXl0ghAU+T4fEQYZoX3OWw=
Subject key identifier: 8B:D5:E8:B8:F1:D5:97:1D:90:DB:09:99:D4:28:25:C4:B9:57:A8:4A
Authority key identifier: 32:D3:95:C5:7D:FD:30:C0:CD:2C:30:F4:23:38:AE:4C:14:A7:50:A1
Certificate issuer: /CN=32d395c57dfd30c0cd2c30f42338ae4c14a750a1
Certificate serial: 0198578EF89974C86E16531BA90E08BDE40E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtOVxX39MMDNLDD0IziuTBSnUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.mft
Manifest number: 0AF1
Signing time: Tue 29 Jul 2025 19:00:44 +0000
Manifest this update: Tue 29 Jul 2025 19:00:44 +0000
Manifest next update: Wed 30 Jul 2025 19:00:44 +0000
Files and hashes: 1: MtOVxX39MMDNLDD0IziuTBSnUKE.crl (hash: wzmk2AzdSARwVEK9fvjAnupWthcuJQlalMvyY/mTA8A=)
2: SwDsrRhvfBw9F4XGJ9jQ9aLMXmM.roa (hash: 3d2l7JTHz6vbNzzhkSjJTHAcnYSSZFmoaOBcI2qRo/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MtOVxX39MMDNLDD0IziuTBSnUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 14:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:57:8e:f8:99:74:c8:6e:16:53:1b:a9:0e:08:bd:e4:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d395c57dfd30c0cd2c30f42338ae4c14a750a1
Validity
Not Before: Jul 29 19:00:44 2025 GMT
Not After : Jul 30 19:00:44 2025 GMT
Subject: CN=8bd5e8b8f1d5971d90db0999d42825c4b957a84a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4b:72:54:13:80:70:25:bb:db:bd:a0:f4:5d:
32:fc:fe:68:e7:dc:97:76:57:c4:da:01:bd:ba:ca:
08:d8:75:0a:85:e2:23:2f:08:2e:5e:eb:4f:f2:05:
1b:e8:41:2c:28:cd:e7:e5:46:0a:05:2d:93:9f:f0:
e7:7f:27:21:3a:04:5a:82:d1:e8:48:57:ca:d6:28:
d2:be:6b:93:30:7a:8f:d8:95:5b:36:d9:02:3c:89:
93:a5:c2:8c:d7:1e:eb:28:a7:7d:d8:1a:d6:3c:51:
f2:76:19:4c:16:83:3f:aa:6d:3c:ba:52:ba:82:b9:
bc:3e:1b:d4:87:cd:4a:54:55:99:64:3e:5c:de:e9:
2e:e6:bd:df:31:3d:ef:3a:36:53:25:48:f4:bf:43:
41:9a:49:95:3c:fe:af:84:a5:2e:4e:c8:8f:98:07:
25:f3:ba:3d:5b:55:53:d4:37:e9:26:1e:a6:be:26:
b1:95:77:7b:62:64:00:a6:51:4e:88:fc:8c:05:b1:
f2:14:b7:eb:ff:39:47:aa:b6:bc:c7:a8:4d:75:91:
69:a1:ef:25:29:08:6a:9f:61:31:0f:93:7c:0f:05:
8f:87:16:ca:a0:e1:ea:5b:91:5b:4d:74:77:28:3d:
d6:ef:bc:93:98:a5:d5:9b:c5:3b:17:d9:75:45:9c:
df:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D5:E8:B8:F1:D5:97:1D:90:DB:09:99:D4:28:25:C4:B9:57:A8:4A
X509v3 Authority Key Identifier:
keyid:32:D3:95:C5:7D:FD:30:C0:CD:2C:30:F4:23:38:AE:4C:14:A7:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtOVxX39MMDNLDD0IziuTBSnUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/35b49b-03a3-4101-a3fe-1d8e19df4a62/1/MtOVxX39MMDNLDD0IziuTBSnUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:6c:00:2c:2f:c8:8d:bd:c8:e8:54:b1:72:45:4c:ff:e1:5a:
81:a0:be:d1:2c:26:50:19:e0:e7:49:7f:35:54:c9:a2:04:66:
fc:79:07:91:45:a4:e6:01:4d:65:fa:83:c2:65:f8:af:6b:ce:
23:d5:88:97:11:0e:12:2c:3e:a0:c4:69:78:af:c7:1f:b6:24:
55:65:31:28:1b:98:f0:58:75:a8:0e:bb:a4:b5:57:0a:1e:ca:
be:96:89:58:ee:bc:b9:6d:96:5a:b1:e3:1f:b4:a8:2a:de:6e:
03:55:57:67:30:b5:c0:98:cb:03:5c:79:44:79:21:9a:72:5b:
70:82:7f:54:d9:12:46:36:12:84:c0:0a:19:23:af:e6:ff:bb:
4e:bf:a8:11:91:a9:6c:98:34:b3:66:fd:2a:2c:39:23:02:cd:
3b:a8:92:aa:d0:b9:bf:f7:51:e0:05:fe:9b:ad:e5:a6:bf:00:
ff:d4:0c:de:12:5b:b1:7f:23:4d:c1:a2:fe:aa:2a:bb:ad:f8:
7a:7a:8e:85:16:eb:d9:a6:3a:54:b6:83:39:12:75:02:74:8f:
b9:85:b1:93:58:e0:4c:23:9c:a3:1a:22:f4:2a:d9:ae:cd:b9:
f1:b1:8f:44:ea:9e:4f:d8:ba:db:23:41:75:e1:a6:29:50:4f:
92:e7:59:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 21:25:46 2025 by rpki-client