Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft
File: MobxwgXuMYfirBpKW8BJ80Sf9mc.mft (raw, json)
Hash identifier: Ui46TN7RkRCxoMT2UJY4CRV7otP8ZmNdNc6pgtm2MlQ=
Subject key identifier: CA:98:7E:C1:C9:F6:A4:37:07:5B:07:E1:68:32:6C:EE:B4:2B:DA:0D
Authority key identifier: 32:86:F1:C2:05:EE:31:87:E2:AC:1A:4A:5B:C0:49:F3:44:9F:F6:67
Certificate issuer: /CN=3286f1c205ee3187e2ac1a4a5bc049f3449ff667
Certificate serial: 0198D54E5B8CF8F39D09858DAC7B2D62E388
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MobxwgXuMYfirBpKW8BJ80Sf9mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft
Manifest number: 131A
Signing time: Sat 23 Aug 2025 05:02:18 +0000
Manifest this update: Sat 23 Aug 2025 05:02:18 +0000
Manifest next update: Sun 24 Aug 2025 05:02:18 +0000
Files and hashes: 1: MobxwgXuMYfirBpKW8BJ80Sf9mc.crl (hash: mJCPlYyW/1Tj8egv8eRfmoU3jIVdAHxGZXmf7b45iQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MobxwgXuMYfirBpKW8BJ80Sf9mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:5b:8c:f8:f3:9d:09:85:8d:ac:7b:2d:62:e3:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3286f1c205ee3187e2ac1a4a5bc049f3449ff667
Validity
Not Before: Aug 23 05:02:18 2025 GMT
Not After : Aug 24 05:02:18 2025 GMT
Subject: CN=ca987ec1c9f6a437075b07e168326ceeb42bda0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:41:cf:97:6d:b4:4f:c4:e3:13:2c:ed:b4:83:
b3:b9:08:11:93:62:a4:49:cf:f5:1e:05:45:79:f8:
4a:9c:60:16:22:4d:73:97:51:d4:b3:05:d7:19:c4:
79:65:6c:4e:44:c4:3f:7b:e3:8f:d1:5d:19:26:52:
14:93:6a:46:01:e9:3f:4a:9c:89:6c:e8:85:c5:46:
0e:7e:4a:d3:6f:04:4c:52:80:12:30:38:fc:f1:86:
10:2c:80:dd:fc:a3:1b:67:89:6f:a2:37:73:f0:b7:
77:af:4a:42:ee:26:6c:df:a3:b3:0b:73:dc:18:a0:
f7:1c:53:49:79:35:e5:80:a1:09:54:ed:1c:15:9b:
0e:bd:1e:3d:8c:5a:51:fa:63:85:a5:fb:b3:87:d0:
75:37:8f:43:8b:b0:6e:ab:26:f8:b6:91:16:79:eb:
3a:77:f5:50:57:fb:eb:51:74:f3:f6:32:62:59:2c:
13:6f:ae:44:1d:17:ac:21:e4:e6:c3:b4:3d:24:18:
e0:7a:08:8d:24:48:f2:92:9d:bf:ea:cf:64:21:4d:
e1:ee:2a:8c:dd:eb:b6:4a:72:c5:1e:94:ad:4a:e2:
b1:9c:f1:4e:07:fa:a8:8c:4a:04:66:4f:16:23:e4:
cd:d3:42:72:15:92:a9:d7:27:b7:e3:aa:65:84:87:
b7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:98:7E:C1:C9:F6:A4:37:07:5B:07:E1:68:32:6C:EE:B4:2B:DA:0D
X509v3 Authority Key Identifier:
keyid:32:86:F1:C2:05:EE:31:87:E2:AC:1A:4A:5B:C0:49:F3:44:9F:F6:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MobxwgXuMYfirBpKW8BJ80Sf9mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:80:e5:7b:ff:5d:6a:71:3b:74:85:97:3c:c6:79:b5:57:1d:
4e:5f:a3:79:ab:8d:e9:a7:97:c4:77:05:2d:bf:50:30:8a:b8:
d1:e8:b6:1f:a0:51:b5:d3:3b:b2:71:b1:03:bf:62:47:e0:43:
91:3a:19:3d:f9:ec:4e:18:c5:c7:5d:97:ab:91:88:b6:fd:25:
62:6d:24:ad:b7:d0:30:94:3c:b1:74:5d:1e:61:28:d6:e3:18:
ce:30:1c:7f:a1:1c:68:f0:54:76:ba:24:60:0f:25:24:ad:6c:
e5:9a:60:8a:9f:97:25:8f:19:3c:dc:3b:66:bf:07:a4:00:e5:
b5:d7:b3:94:e6:29:59:cb:b3:44:06:53:c5:57:e2:d5:14:43:
6a:b5:18:d8:da:59:08:7c:b2:35:da:69:1f:eb:b5:03:dd:60:
ba:f7:1f:77:d1:6d:2e:04:39:f7:2b:e5:80:48:68:13:fd:5e:
8a:89:19:52:06:7a:bd:ed:ed:9e:d1:08:f7:3d:f1:43:bc:78:
84:74:04:30:a0:4d:5d:d9:f8:8a:2a:8c:1f:77:1c:b7:30:59:
41:36:3d:61:ab:37:af:f5:52:54:a0:29:aa:d4:a6:90:1b:59:
f2:32:aa:bb:40:56:4e:d7:b5:d1:93:5d:f7:ad:d9:a5:cd:a3:
d7:43:ea:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTluM+POdCYWNrHstYuOIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyODZmMWMyMDVlZTMxODdlMmFjMWE0YTViYzA0OWYzNDQ5
ZmY2NjcwHhcNMjUwODIzMDUwMjE4WhcNMjUwODI0MDUwMjE4WjAzMTEwLwYDVQQD
EyhjYTk4N2VjMWM5ZjZhNDM3MDc1YjA3ZTE2ODMyNmNlZWI0MmJkYTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUHPl220T8TjEyzttIOzuQgRk2Kk
Sc/1HgVFefhKnGAWIk1zl1HUswXXGcR5ZWxORMQ/e+OP0V0ZJlIUk2pGAek/SpyJ
bOiFxUYOfkrTbwRMUoASMDj88YYQLIDd/KMbZ4lvojdz8Ld3r0pC7iZs36OzC3Pc
GKD3HFNJeTXlgKEJVO0cFZsOvR49jFpR+mOFpfuzh9B1N49Di7Buqyb4tpEWees6
d/VQV/vrUXTz9jJiWSwTb65EHResIeTmw7Q9JBjgegiNJEjykp2/6s9kIU3h7iqM
3eu2SnLFHpStSuKxnPFOB/qojEoEZk8WI+TN00JyFZKp1ye346plhIe3ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMqYfsHJ9qQ3B1sH4WgybO60K9oNMB8GA1UdIwQY
MBaAFDKG8cIF7jGH4qwaSlvASfNEn/ZnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTW9ieHdnWHVNWWZpckJwS1c4Qko4MFNmOW1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8yYmNmYzUtM2JjOS00NzdmLWJjNDIt
MzI0ZWYzNGViZWEyLzEvTW9ieHdnWHVNWWZpckJwS1c4Qko4MFNmOW1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny8yYmNmYzUtM2JjOS00NzdmLWJjNDItMzI0ZWYzNGViZWEy
LzEvTW9ieHdnWHVNWWZpckJwS1c4Qko4MFNmOW1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK4Dle/9d
anE7dIWXPMZ5tVcdTl+jeauN6aeXxHcFLb9QMIq40ei2H6BRtdM7snGxA79iR+BD
kToZPfnsThjFx12Xq5GItv0lYm0krbfQMJQ8sXRdHmEo1uMYzjAcf6EcaPBUdrok
YA8lJK1s5Zpgip+XJY8ZPNw7Zr8HpADltdezlOYpWcuzRAZTxVfi1RRDarUY2NpZ
CHyyNdppH+u1A91guvcfd9FtLgQ59yvlgEhoE/1eiokZUgZ6ve3tntEI9z3xQ7x4
hHQEMKBNXdn4iiqMH3cctzBZQTY9Yas3r/VSVKApqtSmkBtZ8jKqu0BWTte10ZNd
963Zpc2j10PqtA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:26 2025 by rpki-client