
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft
File: Mx7T17pRHKYALYRbPAqoERo1Wc8.mft (raw, json)
Hash identifier: itkAdp6FTF6gdXevMEcvsJMsGRjz4UVjafnfN+YFUdU=
Subject key identifier: B6:90:3A:8E:09:B4:6C:2B:57:86:76:DA:38:B7:B5:E3:D1:50:36:EF
Authority key identifier: 33:1E:D3:D7:BA:51:1C:A6:00:2D:84:5B:3C:0A:A8:11:1A:35:59:CF
Certificate issuer: /CN=331ed3d7ba511ca6002d845b3c0aa8111a3559cf
Certificate serial: 0198D583E9CFD68469C7DDC999EDBCBDB1CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft
Manifest number: 1188
Signing time: Sat 23 Aug 2025 06:00:48 +0000
Manifest this update: Sat 23 Aug 2025 06:00:48 +0000
Manifest next update: Sun 24 Aug 2025 06:00:48 +0000
Files and hashes: 1: 7xzJYQfSecQlqzNk8l-W27jHcOI.roa (hash: ps+7bwhqh3PxptYGlo1NLgo3i2axXsvqt1tqey/ittM=)
2: Mx7T17pRHKYALYRbPAqoERo1Wc8.crl (hash: QP2yrWIGQ2nBV74HuIIOgWe9RLYQ17mYzRtjKMABM/I=)
3: UPg3vbNeBa0K3r83hVpRQlJtNtA.roa (hash: rL5UsY5SPfEI1TxP4iOcbaWk1Mab4y1SRdaX4pFPAv4=)
4: xCVG5Eg07bQVQbLXGuCZVmkeEkE.roa (hash: 2faWVDdASFQnuZ0/R41bZ5L6lJZ4Mpj+/5ne9mCr0Fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:e9:cf:d6:84:69:c7:dd:c9:99:ed:bc:bd:b1:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331ed3d7ba511ca6002d845b3c0aa8111a3559cf
Validity
Not Before: Aug 23 06:00:48 2025 GMT
Not After : Aug 24 06:00:48 2025 GMT
Subject: CN=b6903a8e09b46c2b578676da38b7b5e3d15036ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:02:5b:bc:f5:aa:bd:35:0b:4d:0e:17:76:b9:
25:07:54:25:81:c5:a3:8b:11:b9:36:3f:83:f0:db:
f6:1d:fe:31:9c:d2:3e:1c:e5:09:bb:bd:f3:d8:43:
dc:fd:dd:45:3c:dc:fa:66:dd:ea:76:33:b5:94:81:
55:79:bc:1a:50:b8:dd:ce:48:49:37:4a:91:70:ca:
91:15:4f:72:52:a0:f4:39:37:5a:de:fe:ff:57:19:
3e:f9:90:2c:83:d1:b6:e9:e2:1b:0d:37:4f:2b:24:
67:72:5e:79:27:67:2a:6e:24:f4:20:1f:14:48:12:
6d:6c:4f:6e:3b:28:01:50:d8:d3:4d:7d:5c:48:84:
07:89:96:6c:1f:4d:6a:3e:c5:bd:e8:cb:75:5e:6a:
2e:d2:e9:a9:2a:e8:1e:f8:65:a9:8c:c4:13:4a:52:
1c:4e:29:67:8b:31:18:a1:7b:4a:ff:73:c7:6f:e2:
09:05:22:0b:4b:98:ba:45:f5:c4:43:1b:f3:10:8b:
43:d2:37:92:d8:1f:be:a7:62:8c:7c:19:c9:95:f3:
1b:a7:b9:50:ee:de:93:f9:00:4d:d8:ce:55:51:e9:
f8:fe:4a:7d:fa:30:9b:59:ea:8d:35:35:92:c6:9f:
9e:21:9c:19:04:06:0b:f1:d5:70:cd:70:b8:96:7b:
1d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:90:3A:8E:09:B4:6C:2B:57:86:76:DA:38:B7:B5:E3:D1:50:36:EF
X509v3 Authority Key Identifier:
keyid:33:1E:D3:D7:BA:51:1C:A6:00:2D:84:5B:3C:0A:A8:11:1A:35:59:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:47:3d:9a:b1:91:44:e9:3e:3a:43:3d:fc:f3:24:5b:b0:cf:
67:e6:81:31:f2:bf:c2:b1:92:bf:29:a8:87:1b:b5:56:43:c2:
38:0c:88:5c:45:dd:50:6d:74:94:28:6c:1e:7b:52:23:29:09:
53:e9:c6:e4:e9:51:73:50:f9:75:34:ce:38:bd:4d:f7:9f:b8:
4d:21:59:fb:a5:f4:09:d3:6c:5d:88:a3:33:e4:b3:da:04:f4:
27:b8:65:2b:44:87:6c:86:d0:34:ec:a3:1b:88:8b:2e:8e:d7:
08:79:b5:34:b9:ce:61:87:0b:fe:de:d2:9d:61:c1:14:a3:89:
06:cd:14:d8:a8:a5:ef:da:22:73:fc:a9:78:3c:72:a9:b2:2b:
8c:ef:56:b4:3f:8b:cc:57:04:60:17:8e:c3:4c:82:4c:e4:27:
37:eb:a9:23:a9:85:1b:e6:8c:1a:ba:57:38:74:80:f2:df:a6:
29:58:ee:53:27:d0:8d:ab:99:4d:e6:21:ca:cb:13:79:ee:1f:
5c:2c:27:0b:c4:1b:11:9b:72:40:25:eb:ad:49:9f:3e:d9:7f:
65:70:37:8b:14:72:16:a8:1d:d7:9a:db:70:df:d4:de:c0:3a:
b2:96:b3:ca:a1:30:b7:09:36:92:30:40:c5:09:a9:ba:f8:ab:
b9:9a:93:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:23:59 2025 by rpki-client