Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
File: mxKd6eumtHUW8KFVc0IFq7uYt8I.mft (raw, json)
Hash identifier: IsrMNoa2NiOfKVYpaTmxapt+rW7ZXBRqtld2txBKy1M=
Subject key identifier: 47:01:A1:18:3A:35:E7:2C:BE:F8:66:9A:3F:1D:70:85:4E:AC:D1:0A
Authority key identifier: 9B:12:9D:E9:EB:A6:B4:75:16:F0:A1:55:73:42:05:AB:BB:98:B7:C2
Certificate issuer: /CN=9b129de9eba6b47516f0a155734205abbb98b7c2
Certificate serial: 0198D5BC354634F1FA140F5C4AF8A4B3D187
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mxKd6eumtHUW8KFVc0IFq7uYt8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 07:02:18 +0000
Manifest this update: Sat 23 Aug 2025 07:02:18 +0000
Manifest next update: Sun 24 Aug 2025 07:02:18 +0000
Files and hashes: 1: Kd7_5vl2w2YSR6oDwH4ZLSBCJg4.roa (hash: EwnV+wUuaOySMH9KRvnlNbPyo/46xzUnRyjwxeytk6w=)
2: mxKd6eumtHUW8KFVc0IFq7uYt8I.crl (hash: tVcBrgPUp2sM/uycauOD40JIRAy26127cIicBgienL4=)
3: wmU9vLlEZyocLQ741PHIufr10v0.roa (hash: PwSdmNeGC1GPxHMJkBQhH54QcJIdpfP5NSJA3xMbqZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/mxKd6eumtHUW8KFVc0IFq7uYt8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:35:46:34:f1:fa:14:0f:5c:4a:f8:a4:b3:d1:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b129de9eba6b47516f0a155734205abbb98b7c2
Validity
Not Before: Aug 23 07:02:18 2025 GMT
Not After : Aug 24 07:02:18 2025 GMT
Subject: CN=4701a1183a35e72cbef8669a3f1d70854eacd10a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ba:5b:d3:d9:4c:0d:36:7e:6b:1d:79:e0:32:
ea:e8:32:03:38:7d:39:59:7b:6f:ac:00:97:cb:af:
18:ec:7d:65:4f:44:32:3c:e4:cb:4c:b1:01:dc:88:
b0:4f:b4:d0:3d:a1:63:25:d7:3e:ca:06:85:77:7d:
f8:cc:f9:4c:c7:11:d2:95:c7:0f:08:52:7b:da:c7:
ba:c5:4c:e1:55:54:8c:ac:ca:95:18:64:e7:56:8a:
3a:6a:43:11:7b:2b:06:af:5c:62:a5:48:ac:11:40:
bb:eb:4b:e8:25:f4:ca:22:bc:29:8f:6b:ff:aa:2f:
b4:24:f3:8e:fa:cb:ff:f1:13:f8:75:2f:7b:3e:dc:
4e:08:4a:f8:ff:87:b1:13:b2:c5:f0:4e:dd:cb:3d:
19:64:a8:d6:c2:53:90:f7:aa:e5:e1:71:0e:c9:d4:
2a:e0:8b:70:b9:4b:10:de:bc:71:e7:a7:af:bb:18:
c2:18:24:14:6e:b4:fa:fc:83:ea:64:64:10:44:ab:
d5:ac:f0:6f:9c:ca:e0:de:dc:75:95:26:43:9c:bb:
e7:cc:22:95:e5:75:c3:9a:e0:12:a3:67:e7:2b:73:
c7:33:f7:78:1b:6c:43:c0:8f:71:a9:5e:f8:24:46:
32:f3:09:5c:c0:1f:9b:f9:19:ca:89:47:05:5e:8c:
5f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:01:A1:18:3A:35:E7:2C:BE:F8:66:9A:3F:1D:70:85:4E:AC:D1:0A
X509v3 Authority Key Identifier:
keyid:9B:12:9D:E9:EB:A6:B4:75:16:F0:A1:55:73:42:05:AB:BB:98:B7:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxKd6eumtHUW8KFVc0IFq7uYt8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:c0:a3:fb:e9:10:d1:0c:9c:c2:9b:b0:7a:68:fd:ca:55:f8:
2d:5e:a8:cc:d1:a7:24:9a:5f:21:2a:ce:74:98:4d:d3:18:ce:
b2:71:f9:13:59:41:8e:e9:3a:26:67:a6:d3:b0:8f:83:26:08:
dd:e6:8e:60:07:0d:5b:f5:91:7d:22:4d:aa:42:b3:f6:b4:d4:
2f:0f:f0:ec:1e:94:f1:6e:e7:8b:c3:bb:ca:2e:50:a8:ef:06:
25:f2:44:5f:bf:92:e8:cc:b1:f8:0a:b0:2a:e7:72:b3:84:06:
e3:0c:89:ea:28:3e:db:c4:16:ac:a6:d7:46:2c:62:32:af:07:
72:95:bd:64:73:35:56:ed:a7:ea:3b:2b:b4:ca:94:82:fc:e1:
66:e9:c4:a4:8a:d5:c0:95:96:74:ab:80:2b:f6:40:23:8b:b7:
e6:0f:9b:35:63:63:7e:de:aa:fd:2b:bb:ee:57:06:71:d6:04:
ad:55:f9:98:c6:0f:d5:85:26:6c:3e:d1:67:f8:a6:b2:c9:f2:
04:ed:41:0d:ad:e5:4a:3f:a9:18:27:06:28:f3:23:3f:04:8b:
6f:38:2b:25:0d:87:0d:1b:0e:fc:7c:f3:d9:3f:8c:3d:25:d7:
ed:4c:cf:b7:2c:ff:30:02:c5:01:56:da:ea:bf:72:99:4c:02:
92:dd:84:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:25 2025 by rpki-client