Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
File: mU78TONvxEPcWBYnTqwddpMCkIE.mft (raw, json)
Hash identifier: uYmqrl8uZodsNZbLJCrpGJKu3twB6DsvuXjFfqeyoxA=
Subject key identifier: 1F:2F:9D:B5:21:20:7F:32:CE:61:A6:A0:73:38:00:A0:B4:A7:81:06
Authority key identifier: 99:4E:FC:4C:E3:6F:C4:43:DC:58:16:27:4E:AC:1D:76:93:02:90:81
Certificate issuer: /CN=994efc4ce36fc443dc5816274eac1d7693029081
Certificate serial: 0198D5F1681ED25310039AD98236B68BE39A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 08:00:24 +0000
Manifest this update: Sat 23 Aug 2025 08:00:24 +0000
Manifest next update: Sun 24 Aug 2025 08:00:24 +0000
Files and hashes: 1: MhCfthOppsmBaiAYHVVk_2GAFYE.roa (hash: Prn81nEGvzCuVunt3w8adc4Qe6uMN6AiQAgwWZDR5Uo=)
2: mU78TONvxEPcWBYnTqwddpMCkIE.crl (hash: eeYmqIl9Y2a2l+6okWjVxDtgNQ7bIeLmVhuKwyNB+Os=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:68:1e:d2:53:10:03:9a:d9:82:36:b6:8b:e3:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994efc4ce36fc443dc5816274eac1d7693029081
Validity
Not Before: Aug 23 08:00:24 2025 GMT
Not After : Aug 24 08:00:24 2025 GMT
Subject: CN=1f2f9db521207f32ce61a6a0733800a0b4a78106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:96:1e:97:20:fa:4d:f6:93:af:98:3d:5d:07:
11:8e:90:3b:0f:7f:f0:3a:ff:c9:44:8e:c8:8c:1e:
b0:63:9e:cf:7c:94:74:5c:29:3b:56:4c:ff:da:ff:
2c:5f:66:1b:19:c9:a8:6f:7d:24:06:cc:4a:5c:d8:
91:b1:1d:18:6e:6d:b1:bb:11:d2:6a:7a:e4:7e:31:
a7:01:03:88:a7:e3:bf:13:5d:a4:7e:d6:93:7a:4f:
1b:e3:c6:f7:2d:b6:e3:fc:3e:de:06:c2:cd:22:3a:
99:23:39:db:6c:85:3c:7d:40:e9:16:57:38:b6:df:
71:4d:4d:05:e3:47:49:3d:22:64:13:f3:ea:22:06:
17:f1:00:8c:d5:a2:16:1d:82:6f:d1:db:c5:06:10:
e3:10:fc:ef:09:d8:3a:87:a5:17:b8:6f:7f:26:b7:
27:40:f7:56:c8:94:65:37:be:6e:5f:2c:78:82:94:
63:99:e3:98:8c:15:f5:53:fb:b9:89:07:d5:fb:e4:
10:4f:6e:6e:8d:6f:5c:b8:87:58:bf:0a:25:2a:d3:
f9:2d:74:3c:54:7b:cf:39:b4:8a:ab:7c:f6:99:ba:
17:d0:5d:da:0c:22:b3:23:73:88:26:1c:68:87:3d:
0f:39:06:cd:d1:4a:ae:5f:70:75:87:46:0d:a1:93:
25:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:2F:9D:B5:21:20:7F:32:CE:61:A6:A0:73:38:00:A0:B4:A7:81:06
X509v3 Authority Key Identifier:
keyid:99:4E:FC:4C:E3:6F:C4:43:DC:58:16:27:4E:AC:1D:76:93:02:90:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:4c:ae:32:ea:1b:55:b5:6e:1f:c2:2a:76:d8:17:57:04:66:
ad:4a:60:17:d4:27:f0:63:39:90:e5:45:1c:df:07:22:fa:86:
41:da:e4:91:bb:62:a2:03:88:23:e1:c2:90:15:0f:a2:36:2a:
4a:f9:e2:49:d8:54:48:dd:2e:57:e2:57:f0:57:ba:9b:c4:10:
21:76:22:57:28:19:5d:4d:90:39:c4:9a:d0:56:21:4a:4a:8c:
6b:f4:3c:31:89:17:01:e9:56:c0:db:ee:e7:cd:c1:ba:81:18:
57:11:24:f8:ba:d5:09:4c:ef:49:e7:81:2b:4d:fc:0b:5c:7d:
20:f1:08:9e:8f:91:0c:43:bb:51:b6:b1:ab:17:34:72:5c:80:
b0:bc:cd:0e:3f:a8:7d:bb:ec:0e:2a:81:50:ba:8a:55:4b:79:
46:32:6c:37:33:b9:3b:08:3e:8d:b3:d6:c4:c1:9a:e1:e4:4d:
bb:98:17:13:7d:45:e8:92:ce:5b:89:d5:4d:86:09:06:fe:38:
6f:61:0d:ed:34:6c:06:44:f2:ec:c2:20:31:50:d7:96:61:70:
6c:26:18:82:f8:b4:68:77:94:41:2e:43:42:fd:3e:85:5e:3e:
00:d1:ea:19:84:ea:f1:3c:18:cc:ab:9a:3b:29:52:84:5d:18:
0a:95:6b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:34:53 2025 by rpki-client