Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
File: mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft (raw, json)
Hash identifier: KXdZr5Y7yZil/ZAuB+XqarMTL5TWQkbfHFEY66yD/ek=
Subject key identifier: AA:1F:BD:99:33:45:BB:42:EB:D1:7F:B2:A6:ED:D6:F9:6E:1A:3F:4E
Authority key identifier: 99:06:CE:2B:1A:98:0F:BD:1E:F9:9C:3F:56:53:68:AD:62:1B:C4:F4
Certificate issuer: /CN=9906ce2b1a980fbd1ef99c3f565368ad621bc4f4
Certificate serial: 0198D65FECD89DFC742289C45DBBB1F2040B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
Manifest number: 0379
Signing time: Sat 23 Aug 2025 10:01:07 +0000
Manifest this update: Sat 23 Aug 2025 10:01:07 +0000
Manifest next update: Sun 24 Aug 2025 10:01:07 +0000
Files and hashes: 1: mQbOKxqYD70e-Zw_VlNorWIbxPQ.crl (hash: q+s6HkqBojtnVFgF81yDSAcxqbKgNeXdq9WxBUYH1VM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:ec:d8:9d:fc:74:22:89:c4:5d:bb:b1:f2:04:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9906ce2b1a980fbd1ef99c3f565368ad621bc4f4
Validity
Not Before: Aug 23 10:01:07 2025 GMT
Not After : Aug 24 10:01:07 2025 GMT
Subject: CN=aa1fbd993345bb42ebd17fb2a6edd6f96e1a3f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:04:91:73:e4:99:f6:8d:7e:e0:44:74:12:48:
d1:39:7d:18:2c:e8:7d:8e:05:58:b3:c2:5e:e6:cd:
bd:70:5b:d9:47:33:31:a3:eb:13:1d:a8:d8:fa:75:
d7:cd:64:3d:a4:0a:9f:d5:8e:b8:d1:e6:b5:59:4c:
c6:dc:82:d5:99:ca:c0:a6:5c:58:54:f4:97:0c:61:
0b:93:b6:a8:ac:41:8b:f6:33:fb:1b:ad:e5:20:f6:
d7:d5:45:c7:0c:49:8d:44:8c:c4:33:74:03:35:ce:
fe:d0:ea:21:fb:33:a2:32:8e:5d:1b:f7:52:09:a5:
28:4c:5e:1e:83:4c:92:c0:da:9e:53:ee:3a:69:ca:
d6:6e:b2:7c:b6:fa:73:89:c8:9d:59:20:ea:73:b3:
6f:9c:2e:e9:5b:cf:b4:69:47:b0:88:72:dc:4c:8c:
d8:b3:9e:65:4c:aa:0e:5b:5b:03:d7:a4:6c:e8:42:
a6:ed:32:a0:ee:01:2a:04:65:0e:b8:87:e8:75:4e:
19:bd:ba:18:97:8d:90:3a:11:1e:ee:2b:96:fa:c3:
12:96:97:ee:f5:67:3d:81:28:a3:91:f4:b6:06:68:
97:76:aa:19:5b:92:24:5c:7e:63:a8:2b:75:71:aa:
a5:49:69:fd:de:a3:c5:27:45:a7:d0:6c:19:a4:9c:
ef:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1F:BD:99:33:45:BB:42:EB:D1:7F:B2:A6:ED:D6:F9:6E:1A:3F:4E
X509v3 Authority Key Identifier:
keyid:99:06:CE:2B:1A:98:0F:BD:1E:F9:9C:3F:56:53:68:AD:62:1B:C4:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:1e:db:99:d1:e6:0b:51:3f:bf:19:c9:53:78:4a:fc:3f:d5:
64:9b:92:85:0a:d6:41:d1:a4:67:40:04:ff:1c:b9:cc:55:b9:
c1:27:e0:f6:9f:d0:3a:f6:ec:26:9c:46:cc:24:41:9d:ca:0d:
98:49:5d:a2:88:ba:86:3f:fb:34:f8:a4:55:af:03:a8:28:13:
4d:ed:3e:54:fc:f9:ee:f6:6b:db:b0:e4:04:c1:28:12:bd:28:
69:a5:4e:2e:0f:45:1f:7f:59:93:9c:fe:6f:12:3f:85:45:06:
4f:7d:05:f9:bb:1b:00:89:4b:b4:c8:92:6c:35:69:10:84:68:
b5:5c:82:de:1d:0a:39:f3:ef:3d:c5:1f:ca:80:1b:67:40:3b:
49:e4:95:46:11:6e:e8:10:59:9c:0e:41:c7:8f:f3:3b:6e:99:
ad:b1:be:a8:8d:aa:f6:4d:b6:e5:ec:78:c8:53:b9:d8:0b:b4:
f2:44:8f:3e:00:8b:53:f2:a2:3c:7c:a9:5f:28:7c:4e:a9:2d:
ff:4d:d6:fe:27:58:ff:44:32:8c:c6:bd:d9:1d:e2:a6:70:02:
0c:c6:4f:95:50:3f:da:ac:f3:1f:bb:16:46:48:61:06:98:aa:
95:b0:c5:db:08:46:d9:9a:b8:3d:12:ed:b7:bd:58:8c:aa:47:
f4:9c:1b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:15:57 2025 by rpki-client