Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.mft
File: mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.mft (raw, json)
Hash identifier: GPdc/Da+F2UnYI845G8aE4ru7mDiPT9z0zazkC5FW2w=
Subject key identifier: 29:2A:FB:62:DA:EA:B1:F3:DB:53:38:A4:78:A9:0A:BB:67:E0:01:52
Authority key identifier: 99:0D:9F:E7:93:B1:8E:EF:91:DC:76:FB:CB:A2:B2:CF:C5:2E:0B:C4
Certificate issuer: /CN=990d9fe793b18eef91dc76fbcba2b2cfc52e0bc4
Certificate serial: 0198D5BBAE8751B03235B49D45566C166BC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 07:01:43 +0000
Manifest this update: Sat 23 Aug 2025 07:01:43 +0000
Manifest next update: Sun 24 Aug 2025 07:01:43 +0000
Files and hashes: 1: mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.crl (hash: RNTtSuyGWLebnQ/kxy7UpcX0S8YVRPKKaJSHcQI86Ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:ae:87:51:b0:32:35:b4:9d:45:56:6c:16:6b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=990d9fe793b18eef91dc76fbcba2b2cfc52e0bc4
Validity
Not Before: Aug 23 07:01:43 2025 GMT
Not After : Aug 24 07:01:43 2025 GMT
Subject: CN=292afb62daeab1f3db5338a478a90abb67e00152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:64:f7:27:ed:18:d9:26:6b:09:d5:33:99:1d:
ca:6b:5c:50:9b:bb:d0:05:60:8d:a1:72:87:ab:f5:
a9:40:3f:07:a8:c9:ab:43:e6:88:81:6e:99:ea:f8:
af:e6:32:60:c8:68:e9:9e:bb:7d:98:bd:a4:1e:76:
f4:21:25:82:e9:86:bb:01:cb:5c:2b:ce:70:95:7e:
04:20:27:c7:13:b0:30:54:38:d6:e9:ad:34:18:88:
84:a0:e2:68:14:df:86:4e:c9:9f:dd:35:a2:7d:eb:
28:c0:e9:ea:5e:cc:78:2f:ba:79:f5:30:41:4c:59:
98:f2:2e:a5:ec:22:c4:89:86:31:32:60:57:81:54:
cb:cb:69:97:f1:60:c1:44:ea:c0:d2:53:43:5e:a9:
0b:59:df:72:eb:6b:1d:be:5f:9d:87:6e:cf:46:7e:
ef:64:d5:e2:bb:0e:90:83:cd:51:bf:10:2b:34:55:
ac:e9:03:e6:a9:24:ae:9c:bb:85:f3:15:68:ee:39:
6c:6d:8d:13:b7:c1:62:72:ce:98:68:01:db:20:ec:
dd:e5:7f:0d:96:11:0c:4b:0e:20:c8:d2:14:98:5e:
7b:8a:62:1b:7c:ad:f1:90:b9:5a:28:70:7e:5b:fa:
f4:23:e3:b3:d1:ed:b1:d6:29:69:6f:58:b7:c2:40:
59:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:2A:FB:62:DA:EA:B1:F3:DB:53:38:A4:78:A9:0A:BB:67:E0:01:52
X509v3 Authority Key Identifier:
keyid:99:0D:9F:E7:93:B1:8E:EF:91:DC:76:FB:CB:A2:B2:CF:C5:2E:0B:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:2b:aa:eb:1e:d8:0a:89:29:d9:eb:91:d0:df:2e:6e:64:06:
a8:c8:49:1b:58:d0:33:d9:06:ca:64:e8:36:2e:d2:eb:48:7c:
ec:ec:d2:af:19:b0:5c:1c:58:16:d8:b6:80:2b:c1:45:a0:be:
02:ab:25:f4:67:86:80:6c:78:a3:c7:fe:b9:81:7b:f7:77:26:
48:92:58:14:d2:42:f0:12:a6:db:35:d7:a8:7b:92:cc:ba:f3:
65:70:42:60:0d:46:99:8a:25:59:da:4f:90:9c:5a:aa:15:ae:
33:00:db:b9:b9:55:3d:69:43:f0:02:3b:89:ca:07:74:df:4d:
2e:b1:8f:9b:dc:78:b9:76:4a:e4:33:c3:16:3f:44:3e:53:ff:
ad:19:e7:fc:57:05:06:df:fd:17:ef:2e:64:54:8f:16:4b:c3:
0b:72:18:8c:79:ec:be:e9:7f:ac:94:76:a3:c2:16:b6:d6:c5:
a0:4d:92:37:c4:b3:8e:37:66:2d:7e:6b:a2:a5:c4:38:05:58:
80:fd:3d:1a:6d:54:6a:48:17:a0:fc:63:d5:9e:9f:44:a0:93:
c0:77:f4:99:d1:8e:bf:27:cf:86:d1:d1:31:99:dd:a9:6a:2f:
74:da:f3:d0:b8:f6:44:fe:d4:be:02:b7:7b:b5:6c:97:2e:3d:
26:4b:7b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:13:26 2025 by rpki-client