Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft
File: MobxwgXuMYfirBpKW8BJ80Sf9mc.mft (raw, json)
Hash identifier: 0JcvxAXwsL1g6EbdJd6n3WSuaptq7h+LZoy6dH+ZzEA=
Subject key identifier: 88:96:43:66:E4:DC:7E:82:31:7E:C5:7F:79:F1:6C:13:A8:5B:17:3C
Authority key identifier: 32:86:F1:C2:05:EE:31:87:E2:AC:1A:4A:5B:C0:49:F3:44:9F:F6:67
Certificate issuer: /CN=3286f1c205ee3187e2ac1a4a5bc049f3449ff667
Certificate serial: 0199FAD816E3DABD5FCF457EFE78AA33AD25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MobxwgXuMYfirBpKW8BJ80Sf9mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft
Manifest number: 13B2
Signing time: Sun 19 Oct 2025 05:01:29 +0000
Manifest this update: Sun 19 Oct 2025 05:01:29 +0000
Manifest next update: Mon 20 Oct 2025 05:01:29 +0000
Files and hashes: 1: MobxwgXuMYfirBpKW8BJ80Sf9mc.crl (hash: R5QBYbTmQWHdmGLxzMmcwgQ4giTNm/rUUvcyHcjRX2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MobxwgXuMYfirBpKW8BJ80Sf9mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:16:e3:da:bd:5f:cf:45:7e:fe:78:aa:33:ad:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3286f1c205ee3187e2ac1a4a5bc049f3449ff667
Validity
Not Before: Oct 19 05:01:29 2025 GMT
Not After : Oct 20 05:01:29 2025 GMT
Subject: CN=88964366e4dc7e82317ec57f79f16c13a85b173c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:83:19:54:35:59:d6:ba:46:02:96:89:3d:76:
19:a9:a0:93:f4:1f:da:f9:ad:f3:c7:aa:be:dc:10:
9a:f0:60:e2:b2:39:56:8f:9b:61:00:69:6e:19:dd:
e3:44:af:c8:9b:ab:92:bc:e6:37:5b:ea:6a:30:09:
2c:fe:20:84:e3:7e:78:fd:ff:84:0e:2d:16:e3:7e:
15:84:9b:6c:bb:f8:4c:3d:5b:8b:c5:3e:be:a2:d7:
d3:2e:a3:ea:81:75:d8:5d:e8:60:56:ec:70:46:bf:
63:66:60:a9:fd:9a:38:66:e3:df:2f:16:7e:68:ab:
48:56:c6:12:7a:72:cc:95:dc:d8:c3:0d:cc:09:be:
e4:a0:e4:28:b7:81:fb:36:eb:50:f4:18:8e:41:68:
85:2c:88:85:f9:73:72:ff:93:78:55:14:f5:5f:9b:
95:cb:1c:40:16:a8:a3:5b:c0:33:75:44:47:7a:a2:
94:34:32:44:a4:fa:6a:12:9b:02:47:ee:ea:4f:5a:
19:cf:7a:ef:bf:2c:a8:9d:b2:4a:9d:c0:2c:2b:44:
13:0a:3f:7c:7c:b7:e7:35:28:c6:3a:23:d5:69:12:
6d:68:4e:8d:e6:e1:01:27:6d:87:03:fc:86:9d:0f:
5d:a9:37:cc:ae:f1:12:27:f0:a6:73:51:d3:26:e1:
90:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:96:43:66:E4:DC:7E:82:31:7E:C5:7F:79:F1:6C:13:A8:5B:17:3C
X509v3 Authority Key Identifier:
keyid:32:86:F1:C2:05:EE:31:87:E2:AC:1A:4A:5B:C0:49:F3:44:9F:F6:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MobxwgXuMYfirBpKW8BJ80Sf9mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:a1:59:c6:65:07:55:12:32:65:5f:1b:7d:47:80:58:a1:61:
67:9f:c0:a2:9e:29:38:f9:5d:f3:73:d4:70:02:3b:57:ad:97:
93:ca:64:33:ef:92:b1:80:3e:a4:e4:73:af:fb:b4:29:ea:b5:
36:cb:b8:ee:d7:3b:c4:1d:6c:ef:f8:60:46:a4:0d:c6:d4:e1:
c4:64:25:ad:a3:20:69:ae:40:12:77:87:8f:22:0f:79:99:0d:
77:27:b8:75:57:c5:f6:2d:4c:5d:92:a2:57:bc:e6:80:e0:f4:
40:88:62:53:b2:d3:8e:72:6f:97:b4:19:c6:cc:5e:87:09:f9:
e5:69:ec:1f:92:1e:55:00:66:72:f1:da:fd:79:6c:da:74:7d:
a7:95:c9:1a:7b:c5:0e:63:f2:6d:db:71:67:06:9f:88:b2:0c:
91:c8:5a:58:42:2e:11:16:46:12:2f:e8:86:2c:da:24:13:ea:
2a:78:dc:1a:f7:52:05:ac:44:57:5a:36:5a:7a:62:e5:50:31:
38:81:ff:17:47:a0:02:34:0b:d5:ec:b7:fc:34:7a:5a:64:11:
1b:8f:73:79:34:0e:45:b1:0c:ef:52:43:4c:be:92:96:7f:16:
99:e0:12:9c:2f:1f:72:1e:26:b8:8d:4e:f2:9f:c8:0c:39:12:
84:a9:ab:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:44 2025 by rpki-client