
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.mft
File: mjfe_wVaUdk-HtL3xzIX12B6jPI.mft (raw, json)
Hash identifier: lfleT45ajpyKED+z8m/F00J9YkZnAztcJndxwKE5fh4=
Subject key identifier: 24:F6:78:52:3F:3B:E5:7F:5B:06:3B:B6:20:A6:4D:15:70:40:F5:62
Authority key identifier: 9A:37:DE:FF:05:5A:51:D9:3E:1E:D2:F7:C7:32:17:D7:60:7A:8C:F2
Certificate issuer: /CN=9a37deff055a51d93e1ed2f7c73217d7607a8cf2
Certificate serial: 01992331694F07B4366EAD876986FFE4E33D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjfe_wVaUdk-HtL3xzIX12B6jPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.mft
Manifest number: 043D
Signing time: Sun 07 Sep 2025 08:01:04 +0000
Manifest this update: Sun 07 Sep 2025 08:01:04 +0000
Manifest next update: Mon 08 Sep 2025 08:01:04 +0000
Files and hashes: 1: YxveI4ih6pTB1sKFupGdm18Smzc.roa (hash: dR429rKnleksdPGeSDctkW6MMPKSaofQtmcnafzS7xs=)
2: mjfe_wVaUdk-HtL3xzIX12B6jPI.crl (hash: GXyG2fbfQy0KCAO1Jg74P7RwunO7IHwh+pqOn5U522U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mjfe_wVaUdk-HtL3xzIX12B6jPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:69:4f:07:b4:36:6e:ad:87:69:86:ff:e4:e3:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a37deff055a51d93e1ed2f7c73217d7607a8cf2
Validity
Not Before: Sep 7 08:01:04 2025 GMT
Not After : Sep 8 08:01:04 2025 GMT
Subject: CN=24f678523f3be57f5b063bb620a64d157040f562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:e3:d2:55:b5:86:ea:0c:f3:95:b0:00:dd:c8:
5e:dc:c4:ca:be:5b:b7:22:a5:95:14:77:7e:72:ed:
19:bb:b7:37:3b:ad:f2:58:d8:0c:90:38:43:86:76:
17:ea:01:bf:ee:62:31:73:3f:82:03:af:37:35:65:
60:4e:7e:24:2c:2d:7a:09:70:d7:5f:73:b2:92:17:
17:f2:37:59:a2:27:5d:54:0c:2d:92:54:c1:24:17:
7e:87:21:c3:e9:2e:1d:6b:83:41:88:20:6e:12:cc:
1e:45:8a:e3:6d:61:b3:d9:23:46:7c:44:ee:35:cf:
55:ee:0c:ed:91:b5:1f:2d:f2:4d:f6:71:49:15:3d:
39:3f:76:c8:fa:11:7c:d9:b4:56:89:77:8e:5d:37:
da:80:4d:ef:24:52:6f:a2:ad:7d:4a:7e:77:12:df:
83:12:89:a7:20:b1:6b:01:61:5d:fb:a7:b3:6d:90:
03:33:8a:f2:4f:bd:48:38:64:c5:f7:43:e9:61:c1:
3f:4a:ef:fe:f1:8a:a8:4f:ab:22:15:0b:dc:ad:ee:
2b:af:35:87:b2:c4:e5:04:8b:11:e3:db:c0:1a:11:
65:7b:c8:32:14:3f:68:53:cf:7f:a2:b1:23:96:af:
98:ba:24:92:44:02:e6:1a:d0:32:fd:82:94:d6:49:
ef:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F6:78:52:3F:3B:E5:7F:5B:06:3B:B6:20:A6:4D:15:70:40:F5:62
X509v3 Authority Key Identifier:
keyid:9A:37:DE:FF:05:5A:51:D9:3E:1E:D2:F7:C7:32:17:D7:60:7A:8C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjfe_wVaUdk-HtL3xzIX12B6jPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:93:5d:4f:e6:7a:fe:d5:d0:59:3d:a6:a4:ab:9c:8d:66:48:
17:0d:9f:b3:b0:af:f6:a8:19:bc:65:d6:c4:83:8f:72:06:f7:
d4:a7:65:f2:59:3c:98:69:02:1d:bc:2d:fa:d1:de:b1:5c:05:
9e:d4:3a:68:00:30:47:e0:dd:6e:a3:d4:35:4a:ae:0e:cd:c7:
5c:79:f9:8c:28:c8:16:cd:87:4a:0b:a6:43:94:09:83:c4:a5:
cc:f7:eb:82:72:44:9e:79:34:97:97:78:90:53:6b:14:5b:17:
8a:de:51:80:ea:e2:7d:57:a2:a7:d2:63:88:0f:68:ff:7c:87:
06:3c:56:e9:b0:da:21:fd:9f:84:e8:1c:14:4d:39:09:e9:94:
85:3c:17:b0:4c:57:b1:12:16:15:db:bc:d2:9f:d1:24:ea:78:
83:d2:d4:f2:60:54:e2:d5:91:b4:f2:58:c5:39:5c:d2:18:9b:
b9:63:e1:e3:04:c2:eb:bf:9e:e7:8b:c1:c0:fc:9e:22:1e:1d:
ca:26:2f:ac:c1:68:d8:99:6a:c4:0f:73:d6:c5:fa:36:d5:14:
2a:2c:be:78:e4:4e:38:0d:ef:e3:28:9b:94:a3:2e:43:35:61:
b6:8d:61:31:15:aa:f0:b0:fe:d7:89:70:19:1d:b4:72:da:21:
7d:38:fa:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:46:37 2025 by rpki-client