
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.mft
File: MVlVxK8-sajTQAqGYl42XCYpjWo.mft (raw, json)
Hash identifier: oesKAZibY1//8tU5546FuWFcnPJm6QTJWeMoEAbkMrc=
Subject key identifier: 3C:23:03:3F:4A:58:0B:93:07:E0:DA:27:30:87:E5:17:F0:03:89:D2
Authority key identifier: 31:59:55:C4:AF:3E:B1:A8:D3:40:0A:86:62:5E:36:5C:26:29:8D:6A
Certificate issuer: /CN=315955c4af3eb1a8d3400a86625e365c26298d6a
Certificate serial: 01993500D11AA18B8A05F19D401B78ED275A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MVlVxK8-sajTQAqGYl42XCYpjWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.mft
Manifest number: 1423
Signing time: Wed 10 Sep 2025 19:01:09 +0000
Manifest this update: Wed 10 Sep 2025 19:01:09 +0000
Manifest next update: Thu 11 Sep 2025 19:01:09 +0000
Files and hashes: 1: AaZqekVqXMtY7zZxpFlHfm5QAjY.roa (hash: sZGw/ceX9GbcsyDNRtsXxQmamgue/4b7o8nJC51Ghrc=)
2: MVlVxK8-sajTQAqGYl42XCYpjWo.crl (hash: oc9anGlgaq7jbNHQ3T37ANaRe622L8NalWuFWKQGYZc=)
3: w_D9zm0G6d-xgLYZDk_6k0Fdo0Y.roa (hash: uNakKZ5cInU4w53MHNcs8H1FEfnS50QeJJ6h44hvoXU=)
4: xFbU4UXG5RajcOwoLmpvCSpG_lI.roa (hash: EpP3aMWHOolyh4RCM05UrLn8Zcfi0zy+85a7iQrKm9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MVlVxK8-sajTQAqGYl42XCYpjWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:00:d1:1a:a1:8b:8a:05:f1:9d:40:1b:78:ed:27:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=315955c4af3eb1a8d3400a86625e365c26298d6a
Validity
Not Before: Sep 10 19:01:09 2025 GMT
Not After : Sep 11 19:01:09 2025 GMT
Subject: CN=3c23033f4a580b9307e0da273087e517f00389d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c6:bb:06:01:ac:31:37:18:ef:35:2e:d0:71:
57:b2:b2:04:7f:67:37:91:4b:e3:3f:b6:6a:bb:67:
a5:23:fe:45:52:7d:d6:e8:0f:9e:74:77:d4:54:a4:
e4:79:9b:5a:95:db:8d:3a:ce:7b:f5:15:9a:83:5b:
33:9f:b8:b5:af:3a:fd:c8:25:fd:b2:6e:55:cd:34:
bd:f3:9e:8e:d0:d7:53:4d:19:41:a1:fa:e1:8a:74:
df:91:4e:9d:99:2c:45:25:f6:06:c9:01:24:13:3f:
4b:dd:14:5d:37:21:13:80:b1:65:fd:f3:58:b0:4b:
cc:5c:17:26:7c:e4:0b:97:e2:88:6a:b2:c8:1f:15:
86:50:6a:9e:74:28:a5:30:71:83:8b:6a:65:8a:39:
63:f6:c1:dc:bd:0a:f7:6d:9d:23:57:0f:84:85:e9:
3b:31:8c:fe:19:fa:78:22:69:10:3c:c8:26:65:87:
b9:0c:45:2b:2e:a4:f3:59:4b:d2:12:b4:a1:d7:60:
10:e5:4c:36:a4:a1:75:d8:bd:95:cf:99:0b:c3:ea:
f4:d3:c4:b8:1d:3d:e2:8f:d6:71:24:01:c5:04:42:
fc:25:dd:b6:48:70:d0:8f:fe:dc:14:ee:06:a6:b5:
79:a0:8e:04:23:bf:d7:f9:81:0d:a7:f3:d4:49:7f:
d4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:23:03:3F:4A:58:0B:93:07:E0:DA:27:30:87:E5:17:F0:03:89:D2
X509v3 Authority Key Identifier:
keyid:31:59:55:C4:AF:3E:B1:A8:D3:40:0A:86:62:5E:36:5C:26:29:8D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVlVxK8-sajTQAqGYl42XCYpjWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:82:f8:cb:46:d7:3a:19:ae:ae:ae:25:f8:9f:b6:20:a5:a0:
7f:e6:cb:77:18:7d:89:bf:83:48:cb:cb:4a:ee:d6:fa:a8:46:
14:15:8f:c3:08:d9:01:76:7e:99:9d:4e:fd:3e:9a:cf:1a:a4:
cc:b4:93:cf:88:fe:6a:6d:4f:a8:8b:35:ba:b5:11:13:e7:90:
3f:5b:41:e2:99:4f:7f:22:26:d9:f4:da:82:8b:18:62:e9:bd:
d5:4f:f6:68:da:ce:4b:1a:35:5f:cd:b9:cb:d4:4e:13:01:ce:
45:bc:aa:90:88:52:a7:69:b2:b1:6b:f1:ef:2e:bc:73:b9:08:
f5:d3:e3:7e:9d:09:7e:d1:6d:2a:03:d8:82:4c:42:b5:1c:60:
a8:78:e9:12:28:b2:a7:8f:27:87:8f:90:07:dd:49:ae:63:ec:
07:91:f7:a0:af:e5:29:1c:18:c3:08:ab:f5:bc:90:1f:6e:81:
ee:81:a4:e4:76:36:46:16:b9:33:77:98:fd:c2:88:c0:05:a7:
f0:d7:32:db:ff:9b:78:8c:34:14:d2:ad:53:92:f1:33:1c:5e:
b8:fc:22:6f:f9:07:18:e9:2e:d6:29:83:f8:fb:3c:04:e2:52:
17:f6:7d:bb:6a:38:48:7c:2b:14:1a:bf:dc:54:bc:fb:30:37:
e0:ef:12:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 22:54:29 2025 by rpki-client