Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.mft
File: MjiPz3TS5ZUk9OtNluRMUiLbY-E.mft (raw, json)
Hash identifier: g1Q+mxmg3WZbkF6Vp544a8K62V4QHbrUXW5c7gbVfEs=
Subject key identifier: 90:00:51:AC:4B:BD:D8:59:0B:D7:64:A0:9D:49:B3:7F:75:4B:F0:F4
Authority key identifier: 32:38:8F:CF:74:D2:E5:95:24:F4:EB:4D:96:E4:4C:52:22:DB:63:E1
Certificate issuer: /CN=32388fcf74d2e59524f4eb4d96e44c5222db63e1
Certificate serial: 01984B5391F515DCE44737D97AA9D68EC5DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MjiPz3TS5ZUk9OtNluRMUiLbY-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.mft
Manifest number: 02CD
Signing time: Sun 27 Jul 2025 10:00:24 +0000
Manifest this update: Sun 27 Jul 2025 10:00:24 +0000
Manifest next update: Mon 28 Jul 2025 10:00:24 +0000
Files and hashes: 1: MjiPz3TS5ZUk9OtNluRMUiLbY-E.crl (hash: vinAN9Ml5w2GyqDG0IPPZudE9/TNfp0Vd0uzRVu//y0=)
2: l_KNRz-DOMsGFsOq9QowWZSTlSY.roa (hash: npXTC3HvU34eVfQ3A8stCbWQJ3DirxlZznu2fCVNFbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/MjiPz3TS5ZUk9OtNluRMUiLbY-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:91:f5:15:dc:e4:47:37:d9:7a:a9:d6:8e:c5:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32388fcf74d2e59524f4eb4d96e44c5222db63e1
Validity
Not Before: Jul 27 10:00:24 2025 GMT
Not After : Jul 28 10:00:24 2025 GMT
Subject: CN=900051ac4bbdd8590bd764a09d49b37f754bf0f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c5:cb:ec:45:c8:46:7c:dc:7b:ed:a7:35:6d:
b9:0c:f4:74:70:4f:85:61:bf:e6:c3:2a:65:de:4f:
9d:02:28:40:6a:76:02:d7:30:c8:70:0f:9d:40:41:
7c:4b:70:7d:58:c9:a4:7e:e4:4e:96:2a:d1:13:3b:
a3:38:7a:ab:8b:f4:57:20:84:42:a8:77:7d:d6:16:
b7:e2:cb:64:de:c2:9c:6a:91:1a:4d:5d:1b:41:95:
01:31:cf:e8:fb:e8:56:c1:84:22:08:c9:bc:38:88:
cc:57:d9:06:65:14:91:cb:59:ba:de:95:8e:c8:43:
d3:f4:85:43:00:d9:c2:0a:f7:3b:40:ad:1f:c7:b3:
eb:b3:af:64:90:22:fd:41:a2:81:66:4d:9f:47:01:
fd:29:2c:f5:60:16:6a:45:33:93:cc:47:38:8d:f7:
08:4e:c2:cb:dc:cb:d3:f4:8b:2f:95:cb:91:84:e7:
4b:e0:d2:da:6b:b9:4d:4f:d3:5c:c9:09:cb:be:0d:
58:20:a6:5c:d0:c0:a3:97:b6:07:3b:07:d6:16:96:
38:63:80:64:cc:c3:3e:ee:99:4d:24:e0:6f:af:61:
cc:84:63:34:b5:37:6b:ac:a5:2e:11:55:41:ac:8f:
c7:33:ab:77:bb:54:a1:f6:31:ea:13:d4:22:d2:08:
b5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:00:51:AC:4B:BD:D8:59:0B:D7:64:A0:9D:49:B3:7F:75:4B:F0:F4
X509v3 Authority Key Identifier:
keyid:32:38:8F:CF:74:D2:E5:95:24:F4:EB:4D:96:E4:4C:52:22:DB:63:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MjiPz3TS5ZUk9OtNluRMUiLbY-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:94:89:e5:95:cf:89:b8:9c:4b:de:2a:b4:49:9a:6c:09:06:
9d:82:ef:b7:26:d0:f2:a3:2b:b7:6e:7c:d0:82:fa:ae:74:fb:
59:ea:40:02:1c:78:26:cd:f5:cf:0b:6f:9e:22:b9:ba:8b:ce:
ac:79:33:28:49:f3:14:73:a2:f2:78:38:24:3a:e5:e0:80:2e:
d2:d1:ee:83:76:b2:28:be:11:84:05:7f:55:45:1c:3f:a6:54:
3f:c1:68:7c:d1:28:e3:ba:fe:3a:dc:73:df:ca:5d:3f:31:76:
51:e8:67:e4:21:28:0e:55:40:05:f3:2e:fb:ac:1a:79:87:ad:
85:64:5c:b2:d9:b6:26:37:89:15:c3:bf:39:66:e1:88:da:86:
27:49:20:d6:39:42:8b:31:cb:95:f4:c3:f6:5c:d8:21:27:0b:
af:c0:69:33:d5:07:f8:a3:74:ef:7b:a5:31:88:a9:78:b3:79:
80:1d:b7:9a:40:a3:b5:9c:3b:b7:24:03:56:87:77:75:4d:51:
1c:44:ef:e1:c4:c2:9e:f0:a7:53:1b:97:3e:b9:68:c6:96:ed:
5d:c6:dc:6e:57:96:92:12:93:d3:52:08:e2:f6:7e:bc:43:e5:
76:a7:8b:83:39:a3:d9:e9:1d:ca:1c:5e:3a:56:92:7a:ec:b2:
39:23:0e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:57:03 2025 by rpki-client