Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
File: mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft (raw, json)
Hash identifier: uk/9hRrCFPhSHxQJZGJVbHQWQwBvQUr26ZZyf5hLU3g=
Subject key identifier: 7E:AB:F8:36:E2:26:C2:F0:02:AA:EE:C8:5D:DB:A4:EF:49:F5:C0:98
Authority key identifier: 98:82:96:C5:0D:94:BB:ED:22:5F:28:67:23:1F:A5:09:3D:EB:EA:91
Certificate issuer: /CN=988296c50d94bbed225f2867231fa5093debea91
Certificate serial: 0198D54E8524C2206E7C0D9EDCD2942B078D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
Manifest number: 128E
Signing time: Sat 23 Aug 2025 05:02:29 +0000
Manifest this update: Sat 23 Aug 2025 05:02:29 +0000
Manifest next update: Sun 24 Aug 2025 05:02:29 +0000
Files and hashes: 1: UjP5WMZKRBsvIlHnzhDHFBUyi78.roa (hash: pQ6/nnpLIpK2rwKH9JMJUyXoOlk8zghaFAetdmitLfY=)
2: mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl (hash: QCAzRGkZ6gCqhYI6LY9V+yYtwWllvtXhBZHCSFDTNUI=)
3: oFqjjYPuOysZm8IvX2HFnZ2yMN8.roa (hash: xodF+0GY/o0dnV+Pf3SoupYGcpVAvzY6q/h09Jx9Nzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:85:24:c2:20:6e:7c:0d:9e:dc:d2:94:2b:07:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=988296c50d94bbed225f2867231fa5093debea91
Validity
Not Before: Aug 23 05:02:29 2025 GMT
Not After : Aug 24 05:02:29 2025 GMT
Subject: CN=7eabf836e226c2f002aaeec85ddba4ef49f5c098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fc:93:46:1f:c9:f2:18:40:d2:77:3e:49:db:
0f:f4:0a:83:1f:7c:7c:17:9f:75:f4:ce:7b:52:28:
f1:28:c0:5a:fe:59:5b:4a:b3:d0:1c:23:3c:e7:3a:
d1:f7:89:ef:06:9b:dd:c4:e0:68:36:e2:af:3d:34:
65:75:38:bd:e7:13:19:2a:41:dc:01:06:2e:22:93:
ec:e1:d7:49:8e:39:38:1a:bc:71:9c:02:e4:8c:ec:
4a:49:50:55:31:44:20:10:fa:36:12:ab:ea:54:2f:
1d:4c:29:76:b3:eb:93:5c:c8:64:d9:e6:00:f8:7b:
e1:9f:1a:6e:90:94:56:fa:da:28:c8:a2:52:8d:6f:
90:27:25:e2:11:6b:db:36:04:c7:35:25:c5:fd:53:
d0:b8:e2:4a:16:8e:ee:5b:e7:b5:f2:4d:32:29:f5:
fe:c2:1a:5e:38:32:1c:06:43:1e:a2:17:84:9f:c6:
c4:d1:15:1c:e7:68:ed:20:02:92:ed:cf:6e:8b:77:
e1:3d:77:06:90:8b:13:fc:5d:45:cc:2d:1e:89:a2:
4d:a8:9a:83:83:97:c6:f2:5b:19:a5:46:1e:ff:61:
ab:e5:e4:ce:51:46:b6:74:64:0f:d5:22:43:fe:66:
3d:56:c8:96:ec:7c:fc:94:9a:b2:f7:75:b6:df:96:
05:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:AB:F8:36:E2:26:C2:F0:02:AA:EE:C8:5D:DB:A4:EF:49:F5:C0:98
X509v3 Authority Key Identifier:
keyid:98:82:96:C5:0D:94:BB:ED:22:5F:28:67:23:1F:A5:09:3D:EB:EA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:3d:f3:e8:8f:03:9e:4f:3f:d0:38:4b:2a:6e:62:d3:a7:0d:
e3:47:8c:34:00:fb:60:12:3a:ff:67:4c:4b:e3:b7:8f:4a:0c:
35:cf:51:bc:d3:57:d8:0d:6e:e1:c1:fa:f1:bd:67:7e:01:60:
a8:79:80:c4:54:ab:fc:1d:59:f0:5b:b3:fb:39:9a:7b:e1:8f:
90:91:ae:f3:c8:9b:0a:78:c0:a2:af:8a:d9:03:1e:17:d5:51:
ec:75:cc:e7:a2:74:a3:ea:b2:66:df:37:d9:f3:f3:ea:c0:e3:
31:9d:de:ef:93:57:94:d1:d2:40:e3:09:3b:14:e2:4c:3c:76:
bd:be:a3:7b:20:9b:26:03:c0:99:59:70:b2:80:63:ac:c3:20:
85:ef:e6:30:7c:25:b7:f5:00:c6:53:23:34:b3:f5:da:a6:70:
c4:b0:ef:dc:f8:01:29:2a:5c:c5:7c:37:2a:69:fa:f3:58:e2:
4c:86:d3:75:f8:a2:c0:9b:ab:1e:55:c9:2e:8d:fe:9e:f5:f6:
4b:06:93:13:2f:a9:5b:87:5e:0f:0d:70:d7:4e:9e:38:50:d5:
6c:87:53:ba:1a:60:e8:68:db:60:02:8a:cf:24:aa:24:2d:3c:
08:43:0b:59:29:d8:b0:45:48:82:27:9a:fe:e1:b6:9a:ff:3d:
4e:11:98:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:23:27 2025 by rpki-client