Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.mft
File: MOEXssTnX9dTA9FNsD6eL0tyK4g.mft (raw, json)
Hash identifier: U3SctbTiUuzBA0WKScfekPPksdyKlTDUa5JW6VcTOQc=
Subject key identifier: A2:54:12:96:9B:61:FB:7D:21:39:AF:E1:B4:D9:FA:64:48:1D:77:74
Authority key identifier: 30:E1:17:B2:C4:E7:5F:D7:53:03:D1:4D:B0:3E:9E:2F:4B:72:2B:88
Certificate issuer: /CN=30e117b2c4e75fd75303d14db03e9e2f4b722b88
Certificate serial: 0197B70E961BBC5F806477AA1EC67CACE679
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MOEXssTnX9dTA9FNsD6eL0tyK4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.mft
Manifest number: 0129
Signing time: Sat 28 Jun 2025 15:01:15 +0000
Manifest this update: Sat 28 Jun 2025 15:01:15 +0000
Manifest next update: Sun 29 Jun 2025 15:01:15 +0000
Files and hashes: 1: MOEXssTnX9dTA9FNsD6eL0tyK4g.crl (hash: bED+9gXANKzwWMBRVb8K98E7QYZGCTP5IbO9UqPbpyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/MOEXssTnX9dTA9FNsD6eL0tyK4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:96:1b:bc:5f:80:64:77:aa:1e:c6:7c:ac:e6:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30e117b2c4e75fd75303d14db03e9e2f4b722b88
Validity
Not Before: Jun 28 15:01:15 2025 GMT
Not After : Jun 29 15:01:15 2025 GMT
Subject: CN=a25412969b61fb7d2139afe1b4d9fa64481d7774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d3:88:c6:b0:f5:66:87:92:46:cd:7d:1a:a5:
12:52:8a:eb:c8:82:ec:35:db:cc:5f:f0:23:fd:71:
ba:fc:fa:2e:1d:17:fa:ff:a0:f3:ae:c6:cd:2f:08:
97:79:5e:fe:c6:11:26:b5:ed:6a:b5:f1:0c:17:d4:
2c:97:2c:f7:be:bd:e3:be:5e:d8:8d:34:53:dd:5d:
bd:b9:4a:33:50:cb:14:66:e5:ad:ec:62:af:15:ea:
43:09:7a:a3:56:50:30:88:30:fe:26:ac:70:e2:f1:
86:ec:4d:b4:eb:10:4f:bb:ea:45:cd:5d:5b:8d:bf:
3a:81:f3:66:2d:34:27:e0:27:68:60:12:dd:e9:09:
7b:0f:04:8e:e2:45:22:bb:b9:7a:e3:5f:59:a3:6f:
2f:ac:4f:54:53:f3:5e:a9:8b:57:97:15:36:21:23:
bb:5b:64:c2:5f:e6:be:89:6d:6b:69:9e:d1:06:f6:
56:c9:d9:a3:f7:83:38:ba:a7:ed:1b:7f:a1:27:db:
ab:a1:11:d5:52:a2:a4:60:cb:92:b5:f8:b5:ea:5d:
d2:64:2b:d5:f4:81:1d:cd:7c:83:07:3a:be:73:d1:
30:96:de:cc:8d:4b:ce:fb:cc:c5:a8:81:a9:f1:d8:
78:e2:17:21:a6:fc:a3:d9:2a:c4:a2:29:60:de:ec:
47:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:54:12:96:9B:61:FB:7D:21:39:AF:E1:B4:D9:FA:64:48:1D:77:74
X509v3 Authority Key Identifier:
keyid:30:E1:17:B2:C4:E7:5F:D7:53:03:D1:4D:B0:3E:9E:2F:4B:72:2B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MOEXssTnX9dTA9FNsD6eL0tyK4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:90:5f:cd:70:8d:59:9e:5b:63:36:bb:5c:22:8a:36:fe:94:
46:37:04:86:28:7d:51:79:41:c7:b7:b8:61:46:f8:af:d7:d3:
81:cc:57:a4:08:fe:ee:ba:49:3f:72:22:b0:c7:b0:c5:3e:6c:
f2:88:29:90:4f:66:7c:2d:b8:21:7c:05:a2:b1:14:f3:6c:f7:
a9:7c:cd:07:20:c1:51:2c:cf:e7:8b:d2:c3:df:24:86:db:f0:
4d:09:69:1b:b3:ac:09:2f:79:ba:00:ae:76:a7:a9:d5:92:28:
65:e2:3a:0d:f0:93:a9:ce:92:9d:77:a5:b9:5d:a9:ae:7f:b2:
ab:5d:d7:75:61:c6:cd:1e:2f:9a:2a:02:f6:59:df:6f:84:1c:
4b:d8:2d:4b:6d:5f:e7:ee:42:74:4b:58:4d:76:06:c6:67:99:
36:ff:bc:0d:33:16:3a:b1:fa:33:f5:47:6a:b9:0b:f6:74:b9:
eb:0c:10:c1:a1:60:04:a2:dd:38:80:97:cd:16:a4:33:b7:d6:
32:0c:61:9a:4c:5c:f3:f8:10:79:e0:de:e4:d5:44:f6:33:da:
9d:be:0d:dd:b5:91:ce:1f:f6:27:81:e3:6d:33:64:37:e8:fc:
39:19:9e:93:4e:db:82:eb:f9:d1:39:82:f9:4e:01:8c:c6:6c:
ec:58:dc:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:42:18 2025 by rpki-client