Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
File: mU78TONvxEPcWBYnTqwddpMCkIE.mft (raw, json)
Hash identifier: fgvdaJ8u8Vf4SIh0uUaO8ssS2lh24o99Ro+9w7dyEe4=
Subject key identifier: 5F:8F:BB:4D:56:38:27:17:9C:36:07:1A:B0:48:54:EA:F4:92:2E:8E
Authority key identifier: 99:4E:FC:4C:E3:6F:C4:43:DC:58:16:27:4E:AC:1D:76:93:02:90:81
Certificate issuer: /CN=994efc4ce36fc443dc5816274eac1d7693029081
Certificate serial: 0197B820D00176B41B34B148977F87595FC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 20:00:47 +0000
Manifest this update: Sat 28 Jun 2025 20:00:47 +0000
Manifest next update: Sun 29 Jun 2025 20:00:47 +0000
Files and hashes: 1: MhCfthOppsmBaiAYHVVk_2GAFYE.roa (hash: Prn81nEGvzCuVunt3w8adc4Qe6uMN6AiQAgwWZDR5Uo=)
2: mU78TONvxEPcWBYnTqwddpMCkIE.crl (hash: QdbzcDBySaAENTwJutTRSFF1+FYeDxcEaQa5d0cgjFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:d0:01:76:b4:1b:34:b1:48:97:7f:87:59:5f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994efc4ce36fc443dc5816274eac1d7693029081
Validity
Not Before: Jun 28 20:00:47 2025 GMT
Not After : Jun 29 20:00:47 2025 GMT
Subject: CN=5f8fbb4d563827179c36071ab04854eaf4922e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8b:1e:53:41:1d:f1:07:23:1c:de:a8:6f:61:
08:b9:a6:2e:b5:12:ed:31:a8:35:04:6b:2c:01:a9:
5c:bf:ca:d2:a9:af:9f:37:5f:22:4d:2d:2a:65:48:
2d:e9:72:2d:18:55:38:b9:37:f0:0d:45:dc:b6:e9:
9e:53:cf:82:53:6a:24:50:c4:4d:e2:43:27:76:f9:
d2:1c:cb:3e:3f:96:59:8c:0c:d6:05:3c:d7:b1:46:
db:5e:a4:91:d5:8b:09:34:f6:50:8d:a6:87:d3:32:
fd:30:bf:e4:43:a1:2b:a7:1d:5a:c8:ee:13:1b:5f:
29:ec:7f:83:15:44:1a:61:2e:e2:2a:9d:6f:9e:5e:
88:4e:9f:a3:fb:f4:7d:82:52:49:e7:fe:45:b1:88:
85:db:5c:4d:9c:04:99:e4:73:8a:85:1a:22:2e:c5:
1d:78:5e:8e:a0:6b:67:99:f3:04:63:ad:ad:65:13:
2f:51:22:95:45:07:41:2f:e6:5a:76:d2:b7:69:7c:
1a:fe:e7:66:c9:2f:af:8e:87:5b:cf:01:5e:ac:50:
94:d9:29:4a:8b:04:c9:c6:74:05:93:16:0b:5e:35:
e2:d3:d3:25:9a:b0:1a:52:22:f9:ca:8d:b0:d9:21:
03:91:ae:80:25:3a:0d:39:0e:b0:92:15:1d:33:71:
b9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:8F:BB:4D:56:38:27:17:9C:36:07:1A:B0:48:54:EA:F4:92:2E:8E
X509v3 Authority Key Identifier:
keyid:99:4E:FC:4C:E3:6F:C4:43:DC:58:16:27:4E:AC:1D:76:93:02:90:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:37:39:14:61:ad:2b:a2:6c:91:6b:f4:39:bc:35:46:69:ed:
13:4c:c5:43:90:b6:24:de:87:55:a3:f3:cd:a7:81:fb:c8:97:
8e:1f:a9:4b:ba:6e:47:17:9f:69:ba:8a:83:4b:b1:6d:c5:24:
f4:11:bf:d8:70:ee:33:63:9d:c4:56:f4:4e:95:10:6e:89:68:
38:a7:3d:b7:b8:5e:31:a4:9d:58:d1:9f:e5:7e:cd:7d:8f:d6:
13:91:50:6c:4b:b6:4a:21:2a:b6:b0:ad:5d:36:1e:a3:94:72:
03:ef:23:76:f7:6b:93:8c:58:08:f6:12:40:12:37:cd:90:00:
fa:6c:60:99:44:f5:55:32:38:f6:50:d5:1c:79:df:05:21:e7:
86:4a:a0:11:2c:70:ae:46:0a:2f:88:5e:50:e1:2a:6e:ac:5e:
df:8c:08:7b:3d:bf:11:fe:17:47:3d:de:86:c5:27:8c:a0:83:
c6:77:48:88:7a:12:a6:5c:63:09:2d:68:69:e7:bd:b4:15:c6:
59:73:a9:10:7c:02:8e:05:fc:54:ba:30:4f:24:8b:4b:2c:84:
70:5a:5f:b2:74:85:74:68:a4:44:0a:22:51:69:9b:65:42:fe:
61:f7:af:ca:5d:5b:f5:75:47:3f:24:e3:9b:ed:7e:8e:2d:07:
25:78:5e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:24 2025 by rpki-client