
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft
File: Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft (raw, json)
Hash identifier: x5l1YVt0e0wVbEIp9JxvtjpGFZBMY09rKa8E8M2tpIQ=
Subject key identifier: 38:3C:DA:BB:05:71:02:37:72:21:A6:81:DA:5C:6D:37:9C:D3:E5:28
Authority key identifier: 32:BD:EC:F2:B1:A4:10:F6:52:3C:20:E6:30:82:67:09:CB:6D:AC:19
Certificate issuer: /CN=32bdecf2b1a410f6523c20e630826709cb6dac19
Certificate serial: 01984C9D5CFCCA5ED5302FB08218653671C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mr3s8rGkEPZSPCDmMIJnCcttrBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft
Manifest number: 0E1D
Signing time: Sun 27 Jul 2025 16:00:38 +0000
Manifest this update: Sun 27 Jul 2025 16:00:38 +0000
Manifest next update: Mon 28 Jul 2025 16:00:38 +0000
Files and hashes: 1: 1ykQwAr7tjzYeu5N5mzq1ApyYvM.roa (hash: 5NLaYiuNwek7qbqlr2qTFyj4HJSwenOAixDp+ZTkHiw=)
2: Mr3s8rGkEPZSPCDmMIJnCcttrBk.crl (hash: bcPgJA1BGtqzkmk0I1Eor2iIbANx4xRlrGZ/13pjciU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mr3s8rGkEPZSPCDmMIJnCcttrBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:9d:5c:fc:ca:5e:d5:30:2f:b0:82:18:65:36:71:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32bdecf2b1a410f6523c20e630826709cb6dac19
Validity
Not Before: Jul 27 16:00:38 2025 GMT
Not After : Jul 28 16:00:38 2025 GMT
Subject: CN=383cdabb057102377221a681da5c6d379cd3e528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a4:24:e6:6d:c6:90:43:a8:00:b4:01:50:f5:
cd:3f:89:72:b0:1f:ca:3b:26:9c:7b:68:a6:9d:78:
c1:9a:22:57:f9:cb:57:eb:28:64:a4:bb:e2:15:f4:
30:64:8a:b7:f8:88:5c:4a:4e:4b:a7:e9:2b:33:5d:
0d:31:3d:28:ad:23:b8:92:43:b0:18:80:3d:6d:db:
84:15:15:5c:98:ea:b3:82:d4:f2:f8:64:9f:ae:05:
c2:02:af:b1:a8:22:7d:d6:12:d1:f1:d0:d7:f2:42:
d7:3e:79:69:eb:b7:08:bb:ed:34:7c:61:6d:57:60:
69:94:4a:62:4d:93:19:fe:70:d2:78:af:ba:bd:1d:
fa:d2:44:98:d6:2d:7a:09:68:27:0c:2e:2f:a6:b9:
c8:bb:6b:cc:49:c3:08:3b:45:d7:27:7b:d1:81:a7:
ee:3d:31:95:32:0c:44:71:62:d1:3a:b9:e3:1f:ed:
0f:2e:d4:7c:63:46:c0:ae:b1:84:5f:08:13:fa:68:
74:dd:39:22:bc:d7:ae:5e:a8:92:6c:fd:11:4b:ac:
30:26:4b:ec:f3:06:ef:56:54:83:8c:ab:87:26:c7:
45:df:b4:d0:c1:5d:76:18:12:0b:51:88:ae:7a:17:
60:43:a5:b9:9d:a2:47:e5:25:ea:ef:81:b6:01:40:
34:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:3C:DA:BB:05:71:02:37:72:21:A6:81:DA:5C:6D:37:9C:D3:E5:28
X509v3 Authority Key Identifier:
keyid:32:BD:EC:F2:B1:A4:10:F6:52:3C:20:E6:30:82:67:09:CB:6D:AC:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mr3s8rGkEPZSPCDmMIJnCcttrBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ef:a8:95:b9:87:51:c5:44:a1:b3:78:64:7d:fa:c3:20:67:
89:6f:be:d3:e4:e8:1b:47:7d:98:85:47:9c:48:3b:b2:07:7a:
10:5a:4c:50:fa:d6:6b:61:c4:03:46:85:f7:e7:62:03:36:71:
de:3c:60:bd:1b:4e:49:31:4e:0b:9e:01:b9:0e:3d:c2:d2:ed:
42:dd:f4:a0:4f:50:a7:ab:98:e2:68:92:a3:15:43:d1:ca:21:
36:96:70:92:e4:c8:9b:29:7b:4c:24:c1:51:03:28:3f:f1:41:
8f:70:dc:af:57:50:a6:28:ed:5d:31:c0:72:09:b0:c9:70:7c:
20:ea:62:19:dc:45:a2:03:a2:72:df:14:e6:81:e7:b2:fc:d8:
e2:b0:68:7e:20:64:c5:b5:81:5a:d8:0c:58:88:55:d1:9e:ca:
70:8a:29:0d:38:bf:24:c6:7d:b4:2e:aa:4a:90:da:2c:4c:2b:
0d:55:b7:cf:1e:43:ca:ae:13:eb:b2:ab:a1:a2:31:fb:eb:21:
7e:65:d0:b7:7c:9c:1d:5b:1d:bf:9a:9e:da:7b:cf:50:ae:9f:
92:47:09:a4:99:f8:7e:f5:7f:d7:51:34:39:ab:6c:ac:e2:0d:
24:29:e4:27:48:17:82:03:06:aa:d5:cb:42:c6:38:52:52:25:
74:72:74:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 18:02:56 2025 by rpki-client