Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.mft
File: mUqt73Cb43uczULMK4xzLDlxUPo.mft (raw, json)
Hash identifier: iOzJBYLOtCPu//Y+YJY0yMWJb9DRlZLX9LghvvLPDw8=
Subject key identifier: 33:ED:96:5C:03:EE:2E:6C:68:E1:15:9D:90:4F:89:A3:6F:AC:B4:85
Authority key identifier: 99:4A:AD:EF:70:9B:E3:7B:9C:CD:42:CC:2B:8C:73:2C:39:71:50:FA
Certificate issuer: /CN=994aadef709be37b9ccd42cc2b8c732c397150fa
Certificate serial: 0197B7EA7E748AE229F5C41AB2A2D9DB5A28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mUqt73Cb43uczULMK4xzLDlxUPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.mft
Manifest number: 1599
Signing time: Sat 28 Jun 2025 19:01:27 +0000
Manifest this update: Sat 28 Jun 2025 19:01:27 +0000
Manifest next update: Sun 29 Jun 2025 19:01:27 +0000
Files and hashes: 1: mUqt73Cb43uczULMK4xzLDlxUPo.crl (hash: NYun2RR8MDkHAm0PIAB2ypNTZ9LlbIRdFoATKZp+e88=)
2: rCQFs6YvGWUAxg9vVWInZlNxQI4.roa (hash: +0NX89cMUvPysuXc7Y1nf0CYHUBQMqz9BTCGNPE3tAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mUqt73Cb43uczULMK4xzLDlxUPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:7e:74:8a:e2:29:f5:c4:1a:b2:a2:d9:db:5a:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994aadef709be37b9ccd42cc2b8c732c397150fa
Validity
Not Before: Jun 28 19:01:27 2025 GMT
Not After : Jun 29 19:01:27 2025 GMT
Subject: CN=33ed965c03ee2e6c68e1159d904f89a36facb485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:49:68:2c:3e:31:e0:74:30:8b:56:6b:36:43:
4f:b0:54:75:82:19:cb:28:c5:67:d2:3c:77:6d:04:
d6:7b:f2:e0:f7:b3:1a:ef:a1:1f:9a:4b:a6:c9:bd:
98:5f:58:a2:f3:31:91:65:be:70:79:06:9d:97:c3:
08:bd:6f:db:9b:23:b7:e6:7b:31:f5:e8:f8:c6:bd:
c8:4a:f5:16:bf:70:9e:be:6e:c5:b0:e5:93:88:0e:
4f:ed:71:f9:d2:1a:e5:ac:50:98:2b:cc:1f:10:97:
03:f4:03:57:34:57:2b:d1:03:e9:4c:f0:bd:ca:02:
08:5e:a0:c9:d6:39:9c:4d:77:27:83:b6:9c:dd:de:
da:9e:7f:9a:3a:48:6c:57:35:ea:d0:12:99:dd:0b:
66:e1:8a:b2:c3:5d:1a:51:90:9e:62:37:8d:f7:5f:
06:af:ff:f6:7f:47:1d:02:f6:3f:19:d4:21:94:cc:
78:6e:9c:21:32:8a:89:8d:69:81:1b:38:60:75:76:
49:e4:7d:4c:60:02:89:5d:5c:ea:fc:82:bc:9c:8f:
9e:ca:c8:40:58:39:e7:0d:9e:2c:c9:cb:32:76:4c:
9d:10:be:6c:46:04:cc:08:6b:84:ad:26:67:45:11:
7b:21:2e:c2:11:57:0b:f1:32:2c:c3:75:03:a1:ab:
36:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:ED:96:5C:03:EE:2E:6C:68:E1:15:9D:90:4F:89:A3:6F:AC:B4:85
X509v3 Authority Key Identifier:
keyid:99:4A:AD:EF:70:9B:E3:7B:9C:CD:42:CC:2B:8C:73:2C:39:71:50:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUqt73Cb43uczULMK4xzLDlxUPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:70:38:02:77:e6:b5:5b:d9:fc:d7:17:e4:ff:a7:06:b8:9a:
d5:ba:81:ee:bd:fb:e7:02:67:e9:30:06:19:04:46:10:54:2e:
73:e2:bb:be:85:a4:d0:cd:ca:f5:78:68:94:97:cf:6c:66:88:
3d:97:c9:70:d9:bb:f0:31:3f:40:56:fe:79:20:eb:ee:e4:3d:
fa:0d:86:98:6c:b0:b6:dc:07:a5:d1:db:b3:77:f5:ab:e2:c7:
4d:ad:b4:97:3c:3a:07:b6:7a:e5:4f:3a:24:d6:5e:a9:aa:7c:
50:1f:18:d0:0f:43:af:a0:31:c7:e6:e3:b0:b2:9f:00:25:ca:
2b:3e:6b:a6:bf:7c:21:b3:27:1f:e7:0b:4a:d3:da:68:22:76:
49:cd:07:aa:90:cc:18:ed:f6:1c:cf:5f:34:11:76:2a:11:c5:
75:de:e3:97:ee:17:4e:44:59:9d:f2:b9:32:4d:77:5e:b1:c4:
3f:28:c7:14:52:25:58:0f:b5:dc:10:81:49:3f:d7:48:95:fd:
50:65:9b:ce:c1:70:09:f9:1e:71:bf:51:4d:66:73:9f:9a:ec:
b4:08:e6:9f:60:79:da:a1:57:40:fb:c9:60:07:6a:c7:82:39:
bc:61:1a:1e:8b:1c:5b:9d:d3:63:79:43:24:13:e8:fe:48:c9:
56:ec:6b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:58:10 2025 by rpki-client