Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
File: MvrPXQJzAmjTsedslrD4WI2Zi08.mft (raw, json)
Hash identifier: heQPOoSzutMgnCYseyvy1UgBLojjN+LJOxZjqc6ncPg=
Subject key identifier: 74:03:D2:7C:9D:0B:4A:78:41:7A:6A:BA:75:99:1D:5D:A7:DC:9D:F5
Authority key identifier: 32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F
Certificate issuer: /CN=32facf5d02730268d3b1e76c96b0f8588d998b4f
Certificate serial: 019847AD8B855493DB2F393DA5EE3A0095B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
Manifest number: 134F
Signing time: Sat 26 Jul 2025 17:00:12 +0000
Manifest this update: Sat 26 Jul 2025 17:00:12 +0000
Manifest next update: Sun 27 Jul 2025 17:00:12 +0000
Files and hashes: 1: MvrPXQJzAmjTsedslrD4WI2Zi08.crl (hash: 3PneFTpy+P+gmPbeW0QY+FSBYSLsV3bqtB3NUz3tKEg=)
2: kZhmU11AcLMU9j0H5R4zLY4tMkU.roa (hash: 4zjf1YfmBA/3a2ksRPti6rOa+1AdjV5zlhfDUSPHUS4=)
3: macgBtbCg5Mxhslrz0OHJiQKlew.roa (hash: GBS8E51Gp7YKQrT0Z2MAz5xnX4MGpebSlxO7yoAgVFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:8b:85:54:93:db:2f:39:3d:a5:ee:3a:00:95:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32facf5d02730268d3b1e76c96b0f8588d998b4f
Validity
Not Before: Jul 26 17:00:12 2025 GMT
Not After : Jul 27 17:00:12 2025 GMT
Subject: CN=7403d27c9d0b4a78417a6aba75991d5da7dc9df5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:45:34:ca:48:45:b3:52:8e:e9:f4:7b:e7:19:
ad:f1:7b:bd:35:0b:0d:63:cb:e0:94:2d:4e:03:5e:
28:de:00:b1:84:bf:40:79:0a:92:33:35:2a:be:7f:
cf:ad:71:70:a9:2e:4e:55:2d:15:11:e3:4f:60:b1:
01:9c:db:2d:08:5d:54:28:6d:59:a2:6d:02:d4:e4:
eb:65:b2:3a:c8:95:bd:22:df:67:6f:3b:99:5d:d3:
d8:5d:4f:b4:df:8b:7d:55:07:f7:8f:17:17:73:b0:
be:27:81:50:e0:4b:1a:25:a9:22:ef:25:36:a9:6d:
c4:cd:bd:db:d4:db:1d:ec:0f:d3:75:29:34:76:5e:
55:7a:f0:39:e8:35:a6:13:99:9f:41:b8:18:f5:b1:
a8:68:68:a3:b7:4c:a2:e7:16:60:53:3f:4f:97:d2:
1e:fa:17:11:53:29:5d:08:6f:8f:f4:c3:6a:a2:e0:
d8:af:5a:58:54:90:7e:5e:19:78:53:1b:9b:67:2c:
46:a0:5f:c1:10:21:ed:a6:97:f0:6d:1c:b1:84:e4:
27:41:ea:44:aa:e9:b9:00:67:a5:28:06:89:79:31:
22:3d:25:1d:0c:7b:f5:f0:06:66:6c:50:f2:a5:6c:
ed:2f:36:66:e3:70:16:8f:ee:93:b6:04:d4:ef:5a:
c1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:03:D2:7C:9D:0B:4A:78:41:7A:6A:BA:75:99:1D:5D:A7:DC:9D:F5
X509v3 Authority Key Identifier:
keyid:32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:64:ee:04:de:ee:c0:8e:40:4e:66:ab:c8:9d:ab:39:78:2f:
55:19:50:01:09:09:b4:79:19:dc:0a:54:80:11:27:04:36:d7:
a3:24:23:28:c8:0a:f5:af:fb:63:6d:ef:36:f9:69:36:a8:ef:
c7:69:66:84:20:b9:5f:a3:0a:e7:da:1c:ba:8b:1c:e3:e7:bd:
3b:dc:de:21:91:c7:80:bf:48:ce:af:b8:0f:1b:d8:50:5e:b8:
81:b4:08:f1:1c:2f:6f:83:59:fd:58:92:1f:df:fd:b3:72:d7:
d9:33:e3:a7:73:7e:0c:4b:6e:0a:5e:bc:5f:b5:72:f6:6d:8e:
d2:e6:c2:91:3c:47:ea:cb:0a:d6:98:f6:f9:60:f3:ef:88:2d:
62:62:46:54:e2:1b:79:51:bd:36:50:61:12:0f:3a:16:40:b9:
34:02:37:8b:51:60:a4:d8:93:0f:b1:bb:3b:c8:a5:02:76:fa:
5a:e2:a4:5a:5a:5c:9d:d4:60:a2:f5:ba:f6:ea:b1:98:ec:d2:
ef:af:f9:bd:c3:a9:5f:e7:1c:56:42:f3:d6:35:3c:b8:08:50:
e7:2f:b3:a9:83:20:22:8c:37:b0:a5:f5:04:e6:2f:f8:b1:2a:
bd:f5:85:82:2d:c2:bc:ac:5d:38:ed:4f:32:90:7a:c8:bc:a0:
44:7b:9c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:45:20 2025 by rpki-client