Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.mft
File: mRXw1qlhquvGsLUInaApObMQpRw.mft (raw, json)
Hash identifier: LPl6bkhaba7HHXRjksa27w/y4iwWny2C2hB4q8hwbwQ=
Subject key identifier: BD:EC:D1:DB:65:64:29:80:5C:47:FA:FF:1F:03:B8:30:56:6E:B0:11
Authority key identifier: 99:15:F0:D6:A9:61:AA:EB:C6:B0:B5:08:9D:A0:29:39:B3:10:A5:1C
Certificate issuer: /CN=9915f0d6a961aaebc6b0b5089da02939b310a51c
Certificate serial: 0197B70E99BD41CAB28C50D1F9E5B224C00E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRXw1qlhquvGsLUInaApObMQpRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.mft
Manifest number: 1547
Signing time: Sat 28 Jun 2025 15:01:16 +0000
Manifest this update: Sat 28 Jun 2025 15:01:16 +0000
Manifest next update: Sun 29 Jun 2025 15:01:16 +0000
Files and hashes: 1: 3EoDXcpFiHwKQL3NphGsn39OCs8.roa (hash: ComC0hDOhJ69SVTLkm+pHNkS7oN++Uq45Amm8PB7U5o=)
2: mRXw1qlhquvGsLUInaApObMQpRw.crl (hash: Qghf9Ju8Bwngz1EvNPqcqbfcCTVcnzY2lZffq8y+FsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mRXw1qlhquvGsLUInaApObMQpRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:99:bd:41:ca:b2:8c:50:d1:f9:e5:b2:24:c0:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9915f0d6a961aaebc6b0b5089da02939b310a51c
Validity
Not Before: Jun 28 15:01:16 2025 GMT
Not After : Jun 29 15:01:16 2025 GMT
Subject: CN=bdecd1db656429805c47faff1f03b830566eb011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cf:3e:b4:31:d6:49:3f:1f:90:24:25:62:b9:
eb:68:40:b0:e7:3c:4e:16:f8:78:47:60:19:dd:90:
65:94:bf:24:33:09:2a:1c:78:5f:a3:30:e6:9c:2b:
d2:b9:ec:2e:45:a5:af:bb:42:13:96:bb:bd:5a:ed:
02:2b:28:6d:38:1d:87:0f:9e:b1:1e:a6:e2:9c:ef:
52:14:fe:bf:33:bf:81:54:04:f5:fe:c8:28:78:c4:
f5:81:55:53:b4:43:1c:07:10:45:56:c4:5b:86:09:
a5:ab:e1:ab:2a:e1:4e:ff:78:64:12:b8:07:9a:7b:
ab:3e:53:60:3a:a7:3d:8b:f6:a4:1b:4d:f1:64:ed:
f0:c0:10:2d:28:02:fe:02:a2:1d:d8:ca:bc:f8:50:
5e:1f:62:3c:ba:16:d8:b9:f3:b7:c4:7a:1b:e3:b9:
cb:a6:62:13:ff:24:06:78:da:00:83:fe:d0:7a:74:
9f:83:6f:b5:0b:f9:53:fc:6e:ec:3d:60:93:ca:e4:
ca:9f:e3:ee:32:c8:48:11:c7:85:ce:dd:70:78:fd:
fd:88:09:fc:08:b7:e7:5f:ea:e1:c2:60:fe:f1:2d:
ef:5d:5f:76:f4:30:56:1b:44:65:c3:fb:b6:e8:71:
b7:70:97:20:f4:06:b3:f5:ee:ca:66:75:c0:36:fb:
18:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:EC:D1:DB:65:64:29:80:5C:47:FA:FF:1F:03:B8:30:56:6E:B0:11
X509v3 Authority Key Identifier:
keyid:99:15:F0:D6:A9:61:AA:EB:C6:B0:B5:08:9D:A0:29:39:B3:10:A5:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRXw1qlhquvGsLUInaApObMQpRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:35:aa:10:02:fd:3b:81:86:5c:8b:69:60:eb:ae:99:f2:62:
2b:5e:26:51:54:76:1c:9a:39:bd:28:6e:dc:fc:4d:f1:a0:59:
05:82:47:a3:32:8c:cf:f4:b7:9b:76:7d:66:a5:25:13:fd:ef:
46:09:f3:7a:f5:1f:14:45:ca:66:dc:ef:75:1a:e7:ac:b3:0e:
a7:c9:db:43:d4:06:04:32:90:90:23:ab:b8:53:ab:d2:ac:13:
96:cf:be:be:8c:9d:a7:2f:fd:e4:a3:4d:a1:d9:39:95:52:e5:
1f:60:3d:d5:2a:6d:47:25:0d:e1:07:fa:2b:6e:96:9b:7a:f4:
ed:f8:fd:31:88:33:58:75:6c:43:b4:dc:38:af:df:86:a6:8c:
ee:ca:cd:74:83:e8:84:df:43:be:76:5b:d7:f3:cb:79:c5:4e:
28:1a:3f:2d:ef:57:f3:38:db:cc:69:ba:a3:19:b5:fc:af:fd:
cb:ef:4e:35:91:63:1f:53:c3:65:a0:10:26:11:5d:08:22:b3:
d4:b9:44:31:b6:4f:f3:8b:98:a8:2d:4d:34:40:5c:e3:26:f6:
1e:9c:3f:46:8a:c8:c0:bb:a7:ef:c1:dc:b1:1a:23:e9:bb:79:
91:8d:35:c2:b8:fb:bf:c7:e7:5f:7d:4b:07:16:3a:05:82:fb:
ca:e8:f7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:55:46 2025 by rpki-client