Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/mXwn0VtG2xhLwCswPIa0fEScG1Q.mft
File: mXwn0VtG2xhLwCswPIa0fEScG1Q.mft (raw, json)
Hash identifier: 1k1KnyzGzHmvcyR8DF1xricpJ5uSfkoiLVB+cDpwMec=
Subject key identifier: 78:A6:9E:CD:2B:81:6F:D0:53:18:A5:B3:55:D0:BF:A3:80:9E:8C:91
Authority key identifier: 99:7C:27:D1:5B:46:DB:18:4B:C0:2B:30:3C:86:B4:7C:44:9C:1B:54
Certificate issuer: /CN=997c27d15b46db184bc02b303c86b47c449c1b54
Certificate serial: 0198D4E0733E7D518E85CCEDC478965366AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXwn0VtG2xhLwCswPIa0fEScG1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/mXwn0VtG2xhLwCswPIa0fEScG1Q.mft
Manifest number: 0F0E
Signing time: Sat 23 Aug 2025 03:02:15 +0000
Manifest this update: Sat 23 Aug 2025 03:02:15 +0000
Manifest next update: Sun 24 Aug 2025 03:02:15 +0000
Files and hashes: 1: JpZlGPUSnNPcPAQ7HrfbEiiCY90.roa (hash: sj/ySyRWLvZHGTxRHODxTY1XK4NRx1uXT8wwjiiWvG0=)
2: mXwn0VtG2xhLwCswPIa0fEScG1Q.crl (hash: uxAwXJm1dDivE4DJFW1p4edtLWAZz34TvRRgvVbdE/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/mXwn0VtG2xhLwCswPIa0fEScG1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/mXwn0VtG2xhLwCswPIa0fEScG1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/mXwn0VtG2xhLwCswPIa0fEScG1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:73:3e:7d:51:8e:85:cc:ed:c4:78:96:53:66:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=997c27d15b46db184bc02b303c86b47c449c1b54
Validity
Not Before: Aug 23 03:02:15 2025 GMT
Not After : Aug 24 03:02:15 2025 GMT
Subject: CN=78a69ecd2b816fd05318a5b355d0bfa3809e8c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:aa:aa:d7:ba:72:fc:4e:38:1c:35:35:14:2b:
e6:0b:c3:e2:94:de:3b:d7:10:66:66:a0:6d:2f:03:
eb:75:aa:84:40:67:96:1a:e4:ec:b7:12:69:71:a5:
e8:51:63:1b:ba:69:1e:86:81:7d:07:7c:52:d8:18:
0e:b7:2c:77:ff:a0:38:c2:14:6f:13:be:86:5b:67:
21:1d:58:5c:e0:b1:a9:88:1f:58:a9:87:6c:9c:b4:
ee:7b:71:59:45:ae:72:8b:39:96:36:36:32:8b:01:
75:1d:52:f4:c5:9a:b2:89:f3:84:86:1b:fd:bb:56:
d0:a5:12:7d:ed:8b:e8:ea:e1:93:f7:6b:bc:74:51:
3f:a6:70:84:4f:7e:32:f0:7d:b7:a0:73:33:2e:e3:
b3:78:d7:0c:76:6d:7b:a9:04:5a:1a:96:c6:0a:f0:
62:c0:35:b9:e6:9e:a7:87:52:f1:af:d5:9c:be:13:
84:8e:40:76:d5:a6:4f:de:a3:4d:31:39:22:96:cb:
30:f4:37:2c:b4:8e:77:33:4c:78:b8:b8:3d:ca:fa:
85:22:f8:cb:5a:d8:a2:04:0b:f4:8a:c5:91:d6:6a:
40:f0:14:69:38:1a:46:9a:16:16:f6:77:74:72:5e:
b3:6c:28:e3:ad:d2:91:e0:6a:75:93:38:3a:55:cc:
5d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A6:9E:CD:2B:81:6F:D0:53:18:A5:B3:55:D0:BF:A3:80:9E:8C:91
X509v3 Authority Key Identifier:
keyid:99:7C:27:D1:5B:46:DB:18:4B:C0:2B:30:3C:86:B4:7C:44:9C:1B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXwn0VtG2xhLwCswPIa0fEScG1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/mXwn0VtG2xhLwCswPIa0fEScG1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/mXwn0VtG2xhLwCswPIa0fEScG1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:63:48:65:fc:69:69:b0:88:73:25:17:30:a5:1e:a4:5a:34:
c7:ad:56:38:21:8a:22:c2:d9:ae:81:30:e1:b4:c9:69:b9:d7:
c5:c4:01:31:29:2b:bf:23:ed:f9:f0:20:ad:4e:8e:0b:5c:ef:
49:67:7f:08:19:9d:05:71:6f:47:6d:ba:2f:13:93:9a:f1:59:
30:9b:e8:96:a5:e0:c6:e1:09:f6:8d:69:d5:be:c1:b6:14:3b:
48:b8:8c:78:df:e7:36:35:fa:e4:fa:fc:8d:7c:58:ef:b4:0e:
91:83:1a:fd:76:6f:e1:63:85:11:b7:83:40:5b:99:27:d4:fb:
e8:86:a1:03:ee:92:d3:5f:b7:b7:f3:24:f0:35:61:be:12:14:
3f:c1:9c:4e:c7:9d:56:a9:89:dd:a9:54:85:1b:2b:25:13:53:
87:6c:94:2c:57:9d:3c:b7:02:7d:f7:af:07:38:0c:97:94:7d:
ec:fb:85:97:22:b0:40:21:af:34:c6:11:b2:ca:ff:06:d2:bc:
c8:13:e5:84:cc:f0:4e:12:be:3a:07:14:4c:bb:a9:e5:2e:95:
fb:43:3a:30:ed:80:3e:af:4a:2f:40:dc:31:4b:d5:1b:f8:ef:
2a:c2:38:63:45:49:0a:39:db:d1:6b:09:f8:11:2c:9d:de:9c:
b7:0a:a4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:43 2025 by rpki-client