Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
File: mUt9MMHE9iQxgtPs09BTn0L6rP0.mft (raw, json)
Hash identifier: 3uGBqsIVavKdTn/42QiK7Lrs37FemE5h7YTKdAuS3po=
Subject key identifier: 1E:80:F7:C0:B0:80:3E:87:12:E4:26:EF:AE:8C:15:59:CE:33:11:EC
Authority key identifier: 99:4B:7D:30:C1:C4:F6:24:31:82:D3:EC:D3:D0:53:9F:42:FA:AC:FD
Certificate issuer: /CN=994b7d30c1c4f6243182d3ecd3d0539f42faacfd
Certificate serial: 0198D51580158018809889D804F2B0B78981
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 04:00:12 +0000
Manifest this update: Sat 23 Aug 2025 04:00:12 +0000
Manifest next update: Sun 24 Aug 2025 04:00:12 +0000
Files and hashes: 1: 11EUti3lnSrvcME_sLAUVVEJCyA.roa (hash: zosfyuqqMAp/geMMw6u9z8/OyVXxmv9rqLq+GU2ia9c=)
2: mUt9MMHE9iQxgtPs09BTn0L6rP0.crl (hash: JzMTXFveuR3oQLXUj7PPe0IX3GvNdcsdZlr6uzR+ods=)
3: pUNUzoKVem25Y_u6Wr9POh9WQoA.roa (hash: dUP9J5+eurE18pK8nZH6ohMEustwLaoHJPJpeZdkUDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:80:15:80:18:80:98:89:d8:04:f2:b0:b7:89:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994b7d30c1c4f6243182d3ecd3d0539f42faacfd
Validity
Not Before: Aug 23 04:00:12 2025 GMT
Not After : Aug 24 04:00:12 2025 GMT
Subject: CN=1e80f7c0b0803e8712e426efae8c1559ce3311ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e2:7b:34:57:f2:99:92:a8:94:a2:97:f9:b8:
e1:64:85:bc:92:6a:ae:c3:6a:ee:62:09:64:66:6d:
04:28:0f:a9:fb:ef:6f:6c:8f:58:18:11:ca:05:8a:
3f:48:16:41:8b:6d:7f:cc:eb:62:ca:67:c9:16:c1:
47:a3:76:36:d5:27:e1:42:d7:b0:8b:39:df:20:52:
86:ce:61:a9:85:a2:55:b9:09:bb:4f:8a:c3:c5:f7:
59:84:ca:3f:b8:36:9d:12:0d:fa:0b:af:0f:08:5b:
12:ac:a0:39:d9:0f:bb:d9:a4:a9:c1:00:cd:6f:0d:
23:8a:44:b4:9a:55:53:2e:ee:8e:58:62:e5:67:9b:
b9:a4:45:f8:4b:be:a0:44:a8:dd:10:a7:c1:12:a5:
9a:36:dc:13:14:26:10:55:25:00:39:68:bd:b4:e1:
4e:0a:c3:d0:11:b2:cd:af:75:18:fd:74:37:14:53:
f2:5a:97:c3:e0:75:d4:03:a0:b6:1c:2e:cc:61:b2:
c1:e8:3e:3f:02:eb:8a:15:bf:58:ad:6b:d6:b0:1d:
09:fd:e6:ad:2a:ed:90:1b:af:d1:e3:9b:de:c6:e2:
11:46:36:ca:78:f7:7f:bd:00:61:6f:a8:28:c6:48:
28:69:1c:33:9c:7f:4e:64:90:79:cc:93:98:de:09:
0a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:80:F7:C0:B0:80:3E:87:12:E4:26:EF:AE:8C:15:59:CE:33:11:EC
X509v3 Authority Key Identifier:
keyid:99:4B:7D:30:C1:C4:F6:24:31:82:D3:EC:D3:D0:53:9F:42:FA:AC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:fd:02:9c:16:d6:93:90:86:9c:1d:77:8a:d7:d4:35:18:85:
75:0e:c2:d5:28:b3:7c:3e:21:84:34:fc:26:26:25:64:73:ce:
b3:3a:85:d8:33:aa:75:36:58:42:a3:1a:53:e8:f5:b7:09:ed:
ab:ec:3f:11:cd:2a:a6:0a:c0:12:ea:a2:30:4b:72:ed:4a:46:
46:59:17:60:43:70:50:aa:90:3f:92:18:2d:2c:77:28:b3:30:
7e:44:3d:9d:6f:3d:62:c3:35:0a:28:79:6d:65:84:35:66:5a:
d0:46:62:60:ca:8f:f7:31:ac:2d:1c:e5:a2:61:ac:b7:b5:94:
73:e5:67:20:77:f8:52:ca:19:a7:fe:3f:0d:46:11:52:18:c2:
8d:3e:57:5f:fd:34:45:82:f1:b5:61:02:60:4e:a9:45:2c:4c:
c6:ac:54:12:95:f7:fc:c3:6b:04:ad:fd:68:0d:e1:d6:18:ce:
26:1a:26:16:1f:a7:b4:8f:cb:f1:90:a0:e0:b0:9d:c6:7e:8d:
12:20:a3:00:7b:6f:d8:fc:ef:f9:fb:68:34:97:7f:d1:72:60:
45:ac:be:9e:9c:38:74:26:5e:e0:51:9d:62:84:da:3f:d3:dc:
68:3d:0b:a7:44:f7:9e:ef:0e:c2:a2:6f:a2:8e:26:55:7b:2a:
dc:c7:68:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:14 2025 by rpki-client