Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/8ab976-e53a-4c43-a8e8-2014fe0a1611/1/Mj4wCntjrU_vuuZx9Rq8JPEShxk.mft
File: Mj4wCntjrU_vuuZx9Rq8JPEShxk.mft (raw, json)
Hash identifier: UQznchmbthkGUtRzRc+oxoruTFi3hceXrBGCrj5YgmI=
Subject key identifier: 7F:CC:E7:69:B1:04:81:00:A6:B5:22:0E:CE:78:4C:92:42:F6:F5:DF
Authority key identifier: 32:3E:30:0A:7B:63:AD:4F:EF:BA:E6:71:F5:1A:BC:24:F1:12:87:19
Certificate issuer: /CN=323e300a7b63ad4fefbae671f51abc24f1128719
Certificate serial: 0199221ECB780F90A0E1BA1C626BF1A25D6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mj4wCntjrU_vuuZx9Rq8JPEShxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/8ab976-e53a-4c43-a8e8-2014fe0a1611/1/Mj4wCntjrU_vuuZx9Rq8JPEShxk.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 03:01:07 +0000
Manifest this update: Sun 07 Sep 2025 03:01:07 +0000
Manifest next update: Mon 08 Sep 2025 03:01:07 +0000
Files and hashes: 1: Mj4wCntjrU_vuuZx9Rq8JPEShxk.crl (hash: hLA4F8PM7MJcQfFuUiP19SElyQcnpY/UoweEHknZ6QU=)
2: nG0u5JVbsOz2NWyBPT2f0id55qg.roa (hash: rcOcuJUXRrdjca7vuzAqSL0w9cdWcN3PeqOknKKlStg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/8ab976-e53a-4c43-a8e8-2014fe0a1611/1/Mj4wCntjrU_vuuZx9Rq8JPEShxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/8ab976-e53a-4c43-a8e8-2014fe0a1611/1/Mj4wCntjrU_vuuZx9Rq8JPEShxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mj4wCntjrU_vuuZx9Rq8JPEShxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:cb:78:0f:90:a0:e1:ba:1c:62:6b:f1:a2:5d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=323e300a7b63ad4fefbae671f51abc24f1128719
Validity
Not Before: Sep 7 03:01:07 2025 GMT
Not After : Sep 8 03:01:07 2025 GMT
Subject: CN=7fcce769b1048100a6b5220ece784c9242f6f5df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9e:32:ad:33:d4:37:84:51:c6:3e:47:a6:f3:
6f:4f:55:37:d4:24:99:c8:1f:ad:86:79:c2:63:30:
06:47:6a:14:b3:d7:59:47:fa:9b:b9:bc:ee:9f:44:
17:c6:64:28:a4:8e:cb:09:8c:86:a0:a2:d7:14:4a:
a9:86:30:55:ea:4a:bb:75:5d:c0:db:9c:c1:80:81:
3b:0e:8e:43:f7:08:55:b7:61:e4:40:22:e3:6f:9e:
94:cf:93:8e:50:e6:78:34:e6:82:a9:5c:89:51:f6:
1f:6b:aa:73:7b:d5:cb:46:cf:a8:4b:77:b4:96:ef:
c2:d9:f6:f8:e0:c7:9b:47:9d:f4:f3:8e:44:02:de:
2d:b6:59:19:fb:89:03:bc:55:6a:12:8f:7c:ab:3b:
c4:fb:81:c3:52:26:93:16:b0:8c:84:76:b1:8d:5a:
9e:36:2c:d4:1e:9a:b6:76:b3:1a:a3:19:cd:00:ba:
05:53:8a:67:32:f0:37:c2:7a:d4:b9:2b:3c:d8:04:
ee:56:7b:09:85:1e:d2:02:5d:1a:22:fb:11:7a:46:
62:54:3c:ea:75:48:37:42:78:b9:d4:33:7e:00:11:
1b:b0:32:a0:55:cf:18:f4:10:70:75:a5:1c:0a:cb:
d1:9b:73:df:c6:0f:00:a8:f2:d8:ef:81:bb:0e:e9:
13:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:CC:E7:69:B1:04:81:00:A6:B5:22:0E:CE:78:4C:92:42:F6:F5:DF
X509v3 Authority Key Identifier:
keyid:32:3E:30:0A:7B:63:AD:4F:EF:BA:E6:71:F5:1A:BC:24:F1:12:87:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mj4wCntjrU_vuuZx9Rq8JPEShxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/8ab976-e53a-4c43-a8e8-2014fe0a1611/1/Mj4wCntjrU_vuuZx9Rq8JPEShxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/8ab976-e53a-4c43-a8e8-2014fe0a1611/1/Mj4wCntjrU_vuuZx9Rq8JPEShxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:35:5e:45:f2:2e:7f:4c:74:45:94:0a:dc:c5:01:f5:e8:4f:
29:24:eb:e1:8d:bc:02:6b:08:fd:9e:4e:a1:71:05:18:eb:11:
1c:18:9b:a4:7f:20:7b:24:7b:3e:2c:23:4c:3f:54:79:96:d1:
d2:c5:0d:da:61:1e:03:e3:02:fc:1c:26:92:8f:69:fb:46:64:
1e:58:ce:45:64:5a:07:e9:ee:8d:7c:b3:25:72:bd:e0:ea:91:
b0:88:8b:dd:36:11:89:17:b1:a6:1c:75:14:c8:02:73:c3:65:
31:25:c1:04:45:2b:0f:27:43:4c:75:5e:f4:9a:e6:1b:35:e2:
db:45:57:aa:35:fd:b3:c3:3e:40:ae:0e:fa:4e:44:83:b5:b0:
d5:52:29:12:2d:d2:24:c1:f4:96:af:07:78:34:ca:c9:59:d3:
ec:93:e5:43:60:5d:8c:e5:c0:a1:f1:9d:21:67:c8:45:7f:07:
d3:08:8f:b1:02:40:aa:2a:ca:c9:7f:e2:a1:c7:bf:a2:f8:f9:
a2:6d:d7:d4:38:9c:37:93:e1:bf:06:cd:9a:da:68:6d:fe:7a:
eb:64:ee:9f:fa:ea:fc:a2:cf:74:83:a4:6a:c5:28:87:3c:64:
a1:df:89:bd:8f:f8:56:f4:f8:b1:33:f9:0d:a0:bb:b5:0a:f1:
d0:21:74:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:26:02 2025 by rpki-client