Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.mft
File: Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.mft (raw, json)
Hash identifier: WhhKsBUuk7cjop0u5eCzBCuWU60noBW96A3FLmyEh9o=
Subject key identifier: CF:89:EF:E3:EB:29:BB:84:53:94:5D:70:B0:A8:C0:F5:2C:C1:43:1F
Authority key identifier: 32:38:78:6E:9F:70:E6:DB:74:23:0D:72:67:5A:48:3B:D2:4E:F2:56
Certificate issuer: /CN=3238786e9f70e6db74230d72675a483bd24ef256
Certificate serial: 019923315BB64A20DCE94883DEBB241E5CDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.mft
Manifest number: 152A
Signing time: Sun 07 Sep 2025 08:01:01 +0000
Manifest this update: Sun 07 Sep 2025 08:01:01 +0000
Manifest next update: Mon 08 Sep 2025 08:01:01 +0000
Files and hashes: 1: Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.crl (hash: yTBvylzS1iJOK5aLVROj/iez7AjXfydl5Xzyd078Yhk=)
2: l77XDKqfVAj_0QN9hL5E5zPQSwI.roa (hash: JB8S1ZVJbd9P8hIkFLEuRz8lxPAo3SSfvjCCRc2tF5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:5b:b6:4a:20:dc:e9:48:83:de:bb:24:1e:5c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3238786e9f70e6db74230d72675a483bd24ef256
Validity
Not Before: Sep 7 08:01:01 2025 GMT
Not After : Sep 8 08:01:01 2025 GMT
Subject: CN=cf89efe3eb29bb8453945d70b0a8c0f52cc1431f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:54:39:28:3b:b6:83:1b:a4:a5:ed:ec:b1:f9:
7d:ae:94:84:02:b1:2e:f4:e8:e7:6f:70:09:fe:e4:
5b:48:0b:16:3a:0b:14:a4:1d:6a:8f:1e:b6:8b:c0:
4d:50:af:9b:08:8f:7f:7a:18:81:a9:c4:15:b0:25:
8e:d2:9b:43:dc:05:58:bd:26:dc:8c:d4:d4:89:be:
2b:86:9d:d7:c4:12:a7:bf:f5:d8:fa:d6:be:98:bc:
7b:b4:6c:5b:29:99:56:f2:04:b4:09:ef:70:a4:99:
84:b4:ca:19:dc:b9:97:00:16:88:cc:f4:d4:fc:ed:
24:8d:05:68:e4:44:e8:08:54:f1:ea:d0:56:92:43:
93:22:74:22:55:97:88:f6:c0:22:41:b9:a9:37:47:
cf:5a:2b:cb:60:b3:4a:8d:ee:25:20:09:f3:c7:2b:
23:d3:79:e2:1f:a1:6c:f3:44:9a:6a:e6:d0:28:e9:
af:81:73:e8:3c:64:58:5e:2b:f2:1d:71:c8:b0:7d:
db:af:d7:57:5c:b0:4e:68:f8:fa:77:d4:98:2a:82:
94:36:c3:b2:4d:16:5d:a3:97:f0:5b:e9:d4:3b:fe:
38:4d:81:69:e8:f0:d0:8e:02:94:f8:88:28:1a:f8:
c0:ee:3f:c0:9a:9c:b1:93:a0:a5:d5:73:35:04:a6:
10:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:89:EF:E3:EB:29:BB:84:53:94:5D:70:B0:A8:C0:F5:2C:C1:43:1F
X509v3 Authority Key Identifier:
keyid:32:38:78:6E:9F:70:E6:DB:74:23:0D:72:67:5A:48:3B:D2:4E:F2:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:84:b5:25:6e:7e:f5:e2:1c:97:12:63:e2:75:78:e2:73:15:
73:8f:45:7b:64:50:9b:a4:10:33:17:d2:60:77:4e:3e:64:5c:
7f:bb:33:2f:39:ea:5a:ee:ed:9f:48:12:36:0b:e8:90:f0:68:
78:16:7f:21:79:84:04:88:c3:5e:15:db:e7:88:d3:f7:68:b0:
e5:fe:63:23:33:6f:63:83:91:35:89:fa:91:b8:52:78:b0:83:
ce:0e:5b:6b:bb:e3:2e:f0:99:49:45:77:78:dd:8a:27:ea:de:
58:89:2b:ab:69:a6:8c:ba:9c:b3:3a:aa:bf:30:a7:59:61:6d:
e0:27:6e:48:b1:48:48:f5:0f:fd:68:8c:1c:57:8e:dd:fd:7a:
da:3c:15:9b:6f:63:a3:81:ae:f3:b0:9e:a6:89:e5:0d:f7:b8:
06:c9:a7:3c:5b:9f:2b:d3:8c:c2:11:ce:57:30:68:57:f8:06:
a4:ad:56:52:13:0c:ca:77:50:da:87:4b:f7:82:77:50:0b:8e:
38:47:f9:e3:25:c6:11:79:13:28:b9:cd:cc:75:17:c8:c3:22:
80:23:1b:25:f8:31:19:b6:52:98:ba:c1:6c:4e:fb:c4:d3:ad:
07:8b:af:06:63:ba:b8:d5:51:04:bf:eb:19:40:09:3a:34:14:
0a:b5:46:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:42 2025 by rpki-client