Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.mft
File: MJbXr7uKXjFaXEiazqfct1qmXQQ.mft (raw, json)
Hash identifier: CG4GfblxqJEnkHJK9PS8fwu6Hh68791ButkLhZQ58hc=
Subject key identifier: C9:AE:35:9A:5C:F6:C5:34:7D:13:30:85:C3:F7:55:69:9A:87:33:91
Authority key identifier: 30:96:D7:AF:BB:8A:5E:31:5A:5C:48:9A:CE:A7:DC:B7:5A:A6:5D:04
Certificate issuer: /CN=3096d7afbb8a5e315a5c489acea7dcb75aa65d04
Certificate serial: 01984776DFF4050A158404000ACF9CA7A190
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MJbXr7uKXjFaXEiazqfct1qmXQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.mft
Manifest number: 160A
Signing time: Sat 26 Jul 2025 16:00:29 +0000
Manifest this update: Sat 26 Jul 2025 16:00:29 +0000
Manifest next update: Sun 27 Jul 2025 16:00:29 +0000
Files and hashes: 1: MJbXr7uKXjFaXEiazqfct1qmXQQ.crl (hash: 841eC0Pn3lRfBGz5XFzVaWTLHcu4luENw/y3cs4Aaq4=)
2: a9vur_G-Sv_-WDNvoaN6FO-mp_Q.roa (hash: 5mLv65w3uElW3I7UtSlBFzQFnR6wfzkGH2z+n02Go3s=)
3: ckPg9sFMxT2re8tM8nExJep_9Qs.roa (hash: DU25ajodIpeW2jQoXz2wnkJ8CRhq6NHvl6w7hFsUi60=)
4: yFSjMkcgtQ4jugHf3jpWTH9Nbv0.roa (hash: hqHHntvNx6acptoTgy50EVxfDKrmw52pRvx+yFRJ3nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MJbXr7uKXjFaXEiazqfct1qmXQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:df:f4:05:0a:15:84:04:00:0a:cf:9c:a7:a1:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3096d7afbb8a5e315a5c489acea7dcb75aa65d04
Validity
Not Before: Jul 26 16:00:29 2025 GMT
Not After : Jul 27 16:00:29 2025 GMT
Subject: CN=c9ae359a5cf6c5347d133085c3f755699a873391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:72:6a:c6:46:d4:ef:39:a2:88:da:fb:7c:98:
b5:1d:43:a4:84:d1:e3:70:f3:6c:1b:15:1d:ec:13:
4b:ee:9c:fe:95:c2:5d:ed:5b:08:e1:d3:79:5e:9f:
49:65:fd:64:03:23:ed:13:e7:64:da:e2:9b:07:ce:
da:aa:98:b5:cf:74:b7:c1:30:2e:5d:db:6b:b2:27:
f8:4b:ae:bb:07:6e:7c:9b:6b:a2:21:4a:48:a7:14:
0c:72:b2:04:84:8a:7c:01:5c:49:8c:fd:3b:7c:b7:
67:53:3b:fa:74:fe:30:0c:b5:79:f2:10:a6:4d:ad:
0b:45:7c:31:87:4c:94:f2:78:ab:8f:8b:43:19:08:
4a:13:59:c7:0f:43:a8:5d:65:fa:3c:ba:1c:7e:51:
02:b6:76:7a:3f:29:b4:d1:76:11:4a:86:44:55:40:
af:9b:df:7b:6e:bf:9e:9d:74:2c:e7:9a:32:9f:76:
26:4a:eb:ab:c4:77:6a:4f:af:d1:4f:2e:33:b2:cb:
19:87:ec:97:fe:c2:42:6f:d5:57:d5:9b:ab:76:2e:
75:4f:85:c1:09:a2:c4:90:8e:0f:59:63:dd:fb:92:
6f:b3:8c:ff:e2:20:5d:e9:de:fd:11:4e:57:fe:b7:
13:f7:ba:9a:39:a7:47:83:6f:a4:de:89:86:3b:07:
1e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:AE:35:9A:5C:F6:C5:34:7D:13:30:85:C3:F7:55:69:9A:87:33:91
X509v3 Authority Key Identifier:
keyid:30:96:D7:AF:BB:8A:5E:31:5A:5C:48:9A:CE:A7:DC:B7:5A:A6:5D:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJbXr7uKXjFaXEiazqfct1qmXQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a0:09:a7:cd:5d:8c:ef:43:7d:0a:ca:0d:0c:d2:4e:1e:f9:
00:41:c0:18:08:72:28:e6:cc:a6:ca:0a:d6:73:59:85:60:3f:
67:f5:81:98:47:0e:9f:8e:16:ec:11:39:01:cf:2b:f2:c1:93:
f0:60:ce:2d:2f:c0:ea:8a:47:4a:00:0f:fa:e9:2f:7b:f0:95:
02:c8:ee:16:a0:ed:79:62:61:11:4c:3f:57:82:78:bc:52:28:
9e:e1:16:02:00:88:ff:4a:7e:56:1b:97:83:1c:39:ff:36:f3:
85:a7:fc:1c:54:ac:c7:4a:f3:82:d1:bf:71:ea:3b:c0:08:ff:
41:62:99:c9:38:d1:a4:5f:77:1d:4d:98:60:0f:e0:1b:66:68:
dc:1b:97:e9:41:72:06:fd:86:bd:b2:19:2b:1f:dc:d2:4c:15:
52:26:45:a8:ad:37:d7:d5:5a:66:e2:7f:cd:ce:4b:1c:fe:b0:
de:20:0f:20:49:02:0d:33:1d:88:10:b1:75:eb:dd:2d:5f:1f:
c3:78:00:f2:f3:eb:b8:87:3e:c9:80:e7:fd:53:25:50:31:0b:
ef:91:5c:29:d4:2d:f4:ad:91:cb:52:68:50:d2:5d:c8:95:45:
c6:5a:95:39:c7:3a:46:b1:98:99:11:00:49:ac:65:22:22:e2:
4e:8a:16:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 18:44:59 2025 by rpki-client