Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6ecfca-feb2-4af0-aefe-799509d19ac3/1/Mj4i0VNpL6h29FppimQHCr0puzk.mft
File: Mj4i0VNpL6h29FppimQHCr0puzk.mft (raw, json)
Hash identifier: d1Z1EMnJQmlDkJIKISLpQBTsiMLYC8K+9TLbmvkNGZE=
Subject key identifier: 31:BB:7C:0A:8C:41:73:B8:9A:3B:67:7A:23:6D:E7:DC:9C:5D:4D:C4
Authority key identifier: 32:3E:22:D1:53:69:2F:A8:76:F4:5A:69:8A:64:07:0A:BD:29:BB:39
Certificate issuer: /CN=323e22d153692fa876f45a698a64070abd29bb39
Certificate serial: 01985F1237F9031B1EC8F0B7BE32F634E080
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mj4i0VNpL6h29FppimQHCr0puzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6ecfca-feb2-4af0-aefe-799509d19ac3/1/Mj4i0VNpL6h29FppimQHCr0puzk.mft
Manifest number: C7
Signing time: Thu 31 Jul 2025 06:01:25 +0000
Manifest this update: Thu 31 Jul 2025 06:01:25 +0000
Manifest next update: Fri 01 Aug 2025 06:01:25 +0000
Files and hashes: 1: Mj4i0VNpL6h29FppimQHCr0puzk.crl (hash: JFnch5BT6Sy+PuSXLCzp4TN3ZTkM25VaKU+JURZ1WqA=)
2: UPOmKS-wCVFYZbdnuQ3DjxycBYs.roa (hash: wDCKtOot6cNGvhctv9YJsxtzSFcNno8Vt28nw8UusF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6ecfca-feb2-4af0-aefe-799509d19ac3/1/Mj4i0VNpL6h29FppimQHCr0puzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6ecfca-feb2-4af0-aefe-799509d19ac3/1/Mj4i0VNpL6h29FppimQHCr0puzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mj4i0VNpL6h29FppimQHCr0puzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 Aug 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5f:12:37:f9:03:1b:1e:c8:f0:b7:be:32:f6:34:e0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=323e22d153692fa876f45a698a64070abd29bb39
Validity
Not Before: Jul 31 06:01:25 2025 GMT
Not After : Aug 1 06:01:25 2025 GMT
Subject: CN=31bb7c0a8c4173b89a3b677a236de7dc9c5d4dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:80:25:95:06:0f:20:aa:96:50:15:60:b4:47:
17:8a:40:60:10:49:50:76:48:a0:af:dd:3e:03:05:
58:51:ff:55:1a:6d:3d:76:7e:93:35:74:8d:33:32:
72:6e:0d:15:77:d2:fd:f1:09:45:f3:dd:b8:0b:ac:
64:a8:cd:a4:ba:3e:69:34:4d:6a:e8:4f:a1:e2:81:
09:49:f3:dd:51:fb:e9:c9:6d:d1:dd:b2:06:68:9c:
c4:bd:6a:13:2c:78:6c:3e:e8:48:70:c9:18:8e:b5:
ac:37:ab:13:19:df:88:61:0c:e4:24:33:3d:79:bd:
da:c4:2d:a7:ec:56:2b:74:52:7c:22:f0:da:de:44:
ac:a6:1f:d6:13:66:a6:82:fa:2f:9f:27:c1:5e:e6:
9f:9e:2d:a6:ab:d9:f9:d4:f1:26:51:4e:b8:41:48:
fe:33:bc:05:a7:31:39:ad:e8:33:1b:63:18:4a:56:
42:5a:57:fe:99:7d:0f:2a:06:29:0e:f2:42:a4:cf:
b2:b0:27:29:7a:67:b7:6f:fb:c1:6d:b1:38:47:e4:
f2:58:e2:5f:18:5b:65:f9:05:00:99:74:25:07:71:
67:90:22:b2:ba:bf:eb:21:78:c8:9c:bd:a2:55:94:
f6:35:3a:12:b1:8c:02:c0:a0:f8:4a:f9:6d:b0:90:
90:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:BB:7C:0A:8C:41:73:B8:9A:3B:67:7A:23:6D:E7:DC:9C:5D:4D:C4
X509v3 Authority Key Identifier:
keyid:32:3E:22:D1:53:69:2F:A8:76:F4:5A:69:8A:64:07:0A:BD:29:BB:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mj4i0VNpL6h29FppimQHCr0puzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6ecfca-feb2-4af0-aefe-799509d19ac3/1/Mj4i0VNpL6h29FppimQHCr0puzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6ecfca-feb2-4af0-aefe-799509d19ac3/1/Mj4i0VNpL6h29FppimQHCr0puzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:b8:45:01:7e:58:28:8b:0f:ed:94:55:6a:05:31:e2:b0:72:
99:a9:6f:3d:d5:ef:e1:6e:40:76:9a:bd:bd:17:44:ca:10:47:
2e:35:66:94:88:fc:e2:9e:aa:2b:71:d4:0a:43:31:cd:e1:69:
42:2e:47:27:9f:51:e9:ac:38:9a:d3:1f:47:34:8b:38:b4:47:
35:de:1e:13:09:69:74:5f:49:10:64:44:7e:37:76:72:b9:2f:
eb:78:f3:a3:3d:1d:db:20:45:c6:54:64:94:3e:8c:4d:b2:05:
0d:7b:4f:48:cf:b2:38:59:9b:cd:49:0f:17:e6:51:7f:99:8a:
ce:e0:32:1d:42:ae:2a:e7:0b:66:91:27:fc:2b:35:81:3b:fd:
09:a8:7c:1d:4e:ac:92:dc:26:58:d2:c9:e2:4a:37:57:3b:97:
1f:b6:c1:41:6c:7a:44:32:e4:65:7a:21:60:25:d1:e1:77:a4:
91:3a:ab:14:cd:be:d6:08:2f:56:d8:29:cf:6a:01:eb:e0:1f:
99:bf:5d:ca:91:20:5c:05:88:cb:a3:0e:77:ec:a9:86:71:62:
d2:70:7a:0e:1a:ba:97:07:03:68:89:71:25:21:cc:c0:dd:e4:
d5:86:3f:4b:06:74:f9:3b:c4:30:c0:7b:4c:00:f1:75:e5:9f:
1b:f6:89:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 09:37:42 2025 by rpki-client