Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft
File: moBTvNLE2KeioyXit0ZBZqXkjd0.mft (raw, json)
Hash identifier: XlQjnnwh83dGvfZZXVowxUCJMU778nFCHUnjgChUCoE=
Subject key identifier: FD:9D:0F:84:17:E0:5B:F2:54:71:C1:BF:07:98:DF:3C:1A:3A:1D:33
Authority key identifier: 9A:80:53:BC:D2:C4:D8:A7:A2:A3:25:E2:B7:46:41:66:A5:E4:8D:DD
Certificate issuer: /CN=9a8053bcd2c4d8a7a2a325e2b7464166a5e48ddd
Certificate serial: 0197B6A1FAF7A190789B804E6334C6D78ACE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/moBTvNLE2KeioyXit0ZBZqXkjd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft
Manifest number: 1040
Signing time: Sat 28 Jun 2025 13:02:38 +0000
Manifest this update: Sat 28 Jun 2025 13:02:38 +0000
Manifest next update: Sun 29 Jun 2025 13:02:38 +0000
Files and hashes: 1: cxA-RyOMLkq935v_LceKQwYPwHs.roa (hash: HnGDMBYysRSj3AGQ0kR7dSJMblTeuNonvUsGSEcjwQ4=)
2: moBTvNLE2KeioyXit0ZBZqXkjd0.crl (hash: zLGCG7+j5N6jmG/m8hT9v8sytQu3prj5AvMM91AzGyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/moBTvNLE2KeioyXit0ZBZqXkjd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:fa:f7:a1:90:78:9b:80:4e:63:34:c6:d7:8a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a8053bcd2c4d8a7a2a325e2b7464166a5e48ddd
Validity
Not Before: Jun 28 13:02:38 2025 GMT
Not After : Jun 29 13:02:38 2025 GMT
Subject: CN=fd9d0f8417e05bf25471c1bf0798df3c1a3a1d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:28:d8:16:cd:23:c9:cf:c2:b8:66:b7:d6:35:
0d:c6:be:88:0f:8d:0e:ef:17:92:46:d8:c2:82:18:
58:b8:00:d6:05:42:11:d4:aa:c2:a2:52:f8:de:2a:
2b:15:34:5c:49:ab:4a:b1:9a:04:64:77:7c:06:5c:
0f:3f:28:41:19:7a:cc:2c:44:9e:52:be:95:d5:9c:
ab:41:a6:0c:76:73:d7:56:04:19:93:b2:6c:e5:de:
9c:26:16:ff:97:05:f9:7b:df:2f:a5:15:9f:19:ca:
52:9d:34:ce:b8:60:f0:4a:6c:5b:41:49:61:30:e7:
d1:fe:08:7e:02:d0:c3:f8:fd:a6:50:9e:82:0b:ff:
28:a3:c1:1b:09:68:a0:a4:4e:5c:1a:d5:82:2f:b5:
4c:f3:25:06:23:67:b6:57:bb:4c:2f:7c:95:fa:fa:
b3:09:c4:b5:f3:8d:33:93:47:67:a5:f9:21:fc:3e:
58:1c:db:e5:05:67:8d:ab:ed:ef:b8:db:cd:dc:7e:
6f:74:db:5c:03:1d:97:92:bc:8c:b2:f5:86:45:1f:
fa:eb:3a:b6:57:af:23:04:a0:1c:e8:31:21:02:0a:
31:61:19:79:62:3d:ff:8e:d3:12:08:3c:c2:92:b9:
19:fb:3e:98:19:ea:3b:1a:59:ab:53:24:b4:0c:d0:
f8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:9D:0F:84:17:E0:5B:F2:54:71:C1:BF:07:98:DF:3C:1A:3A:1D:33
X509v3 Authority Key Identifier:
keyid:9A:80:53:BC:D2:C4:D8:A7:A2:A3:25:E2:B7:46:41:66:A5:E4:8D:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/moBTvNLE2KeioyXit0ZBZqXkjd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:d5:51:7d:e1:d7:13:1b:d0:63:7f:de:f5:cb:8e:cc:11:04:
f2:67:c4:f4:2e:62:5a:db:37:dd:59:a3:91:24:8e:a9:3a:59:
bb:45:b4:f7:83:53:38:b5:d7:4a:b8:1d:98:12:d7:3c:34:e4:
0a:10:2e:49:53:ce:59:8c:57:b9:a9:67:a6:bd:43:66:41:93:
6f:d2:04:b6:10:44:f6:1a:33:3a:b7:6c:31:59:a2:fc:a9:cd:
ca:7a:3e:d3:6f:17:a9:f0:8b:9e:1a:83:8d:cb:61:67:49:7b:
51:89:ce:1d:43:ac:03:e1:e3:26:32:a4:f7:d8:9f:90:fa:12:
15:87:f7:23:6f:52:15:e1:cc:75:6c:68:39:42:7c:dd:0f:3e:
80:f3:2f:7b:9d:d4:37:db:63:17:7a:30:bc:6e:da:c8:b6:01:
cd:75:40:5e:8b:72:03:bd:8f:52:3d:33:4b:b3:2b:cd:95:a7:
0a:1c:9a:6b:43:98:48:1d:90:ca:62:d8:11:cd:be:86:67:ef:
ad:da:ce:79:1e:7d:b7:08:32:de:a6:d9:c3:4c:2b:b6:ad:99:
7a:53:6c:70:73:ad:a7:40:95:13:4c:6c:f1:2b:6b:ee:40:e5:
94:b7:5b:83:80:3c:2b:1e:0a:85:96:83:ad:2a:32:65:80:23:
c2:0f:a8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:53:20 2025 by rpki-client