Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.mft
File: _mxqYEID4ZvSNsDjZBrmlkTUqnQ.mft (raw, json)
Hash identifier: 8uQGOcwHO4cTU+qRX5BVxPmeNCZp8Cvydw2d9TYnqg0=
Subject key identifier: 10:4E:10:24:87:66:9F:62:D1:8E:0D:04:8F:9F:01:A4:24:3A:8B:8D
Authority key identifier: FE:6C:6A:60:42:03:E1:9B:D2:36:C0:E3:64:1A:E6:96:44:D4:AA:74
Certificate issuer: /CN=fe6c6a604203e19bd236c0e3641ae69644d4aa74
Certificate serial: 0198D4E024078C6956CF62EFD88CBD0C9265
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.mft
Manifest number: 9C
Signing time: Sat 23 Aug 2025 03:01:55 +0000
Manifest this update: Sat 23 Aug 2025 03:01:55 +0000
Manifest next update: Sun 24 Aug 2025 03:01:55 +0000
Files and hashes: 1: _mxqYEID4ZvSNsDjZBrmlkTUqnQ.crl (hash: i6tju2gbSRJjBeag91rRZlggatRBgg5r14h/Qa8rTIw=)
2: oidQOFv_T3t4hgPCm6h_UreADsw.roa (hash: y9QfSR0j2NSF/2jSZyP0tv3TDh1rVPF+ZeadaUNAaYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:24:07:8c:69:56:cf:62:ef:d8:8c:bd:0c:92:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe6c6a604203e19bd236c0e3641ae69644d4aa74
Validity
Not Before: Aug 23 03:01:55 2025 GMT
Not After : Aug 24 03:01:55 2025 GMT
Subject: CN=104e102487669f62d18e0d048f9f01a4243a8b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:db:bf:9b:71:68:b6:13:3b:70:1e:9c:a2:4f:
db:87:9e:8d:36:12:e3:2c:2f:e0:ff:a4:2e:99:19:
9f:60:13:b0:c1:2c:c7:c4:bc:e4:fd:7b:3f:9b:bb:
8e:68:e1:b5:b0:86:4f:9d:37:64:09:6b:29:d7:a1:
e5:4f:a1:86:f2:05:c2:c6:90:95:b8:45:b2:d6:30:
cb:01:97:72:80:bd:4b:69:36:49:ba:8b:36:3d:c4:
d0:5e:58:3f:3b:82:23:6d:02:2d:d5:aa:a3:d6:73:
f4:6d:5b:81:29:63:7f:30:20:1d:51:6a:71:97:c1:
6f:75:1f:56:b5:44:b4:0f:76:a3:9a:6e:b7:b4:18:
9d:6a:33:94:47:39:96:38:98:24:6c:45:cf:95:01:
f2:b5:21:ea:f6:cd:09:d1:63:a6:ca:58:f7:19:d9:
03:6a:d6:db:fd:8b:6f:aa:cb:af:54:cc:ea:cc:96:
64:61:f7:18:b6:cc:7e:79:22:7f:a6:e0:97:34:95:
9c:0e:fe:df:8a:ac:7a:dc:5c:a0:72:c8:71:2d:71:
d1:a1:a6:eb:44:a2:b6:e4:ba:7e:cb:4e:6c:86:95:
a0:c7:93:3f:28:dd:8f:7a:30:77:02:7c:cf:60:ca:
8f:3c:1b:a5:13:c0:6e:2a:7f:56:bf:38:bc:06:77:
6b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:4E:10:24:87:66:9F:62:D1:8E:0D:04:8F:9F:01:A4:24:3A:8B:8D
X509v3 Authority Key Identifier:
keyid:FE:6C:6A:60:42:03:E1:9B:D2:36:C0:E3:64:1A:E6:96:44:D4:AA:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:00:e3:f1:4c:d2:b5:f2:74:9d:0f:5d:9a:c1:87:b4:61:e0:
cb:96:01:4c:88:dd:f6:aa:16:d1:90:48:ec:c9:dc:7a:ad:9e:
1a:30:07:57:67:dc:6f:03:2a:ba:9e:9c:b8:9b:45:6d:ee:96:
23:a5:af:49:78:6c:a5:2a:46:f5:83:da:ca:55:70:c0:89:51:
c7:e8:a9:a2:3e:51:17:08:3d:55:5b:7e:e3:62:3e:68:df:e8:
67:a9:c3:66:54:ce:8d:a0:9e:c7:28:ab:12:e0:a8:be:d5:fc:
f8:b9:ae:3b:e0:6b:01:0d:64:9f:1d:e7:1e:de:b6:de:8f:e7:
ce:ae:fd:00:15:7f:48:a1:44:15:a4:55:02:74:21:7b:1f:d6:
35:83:96:27:cd:2a:15:c7:8f:f2:ae:37:af:8c:06:29:41:b3:
a5:c1:60:3e:f4:d4:1f:aa:6c:f8:e0:dc:d7:d1:42:df:19:08:
e0:8c:ac:a0:06:01:c5:12:10:c8:10:12:82:4f:dc:d3:96:3b:
4f:97:35:df:f8:8c:a2:ea:64:66:b7:e1:02:ec:f4:80:5a:bb:
cc:9a:c5:22:26:f5:a8:db:b7:85:67:a2:07:e5:e6:d7:3d:4b:
71:e0:2f:f1:2a:c1:f3:4a:33:56:63:c3:a7:28:2b:79:5f:9c:
76:c8:70:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:17 2025 by rpki-client