Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft
File: mQxLs441zXAyDreRUgxsrTSksnE.mft (raw, json)
Hash identifier: yBWhq/IOyov24mW4Zjw75I8CU7Y5q2aNLHU6BSCTThY=
Subject key identifier: 7E:89:FC:57:9F:43:DA:31:41:7F:5E:BA:7F:99:BB:CA:84:04:89:A6
Authority key identifier: 99:0C:4B:B3:8E:35:CD:70:32:0E:B7:91:52:0C:6C:AD:34:A4:B2:71
Certificate issuer: /CN=990c4bb38e35cd70320eb791520c6cad34a4b271
Certificate serial: 0198D54E858E22BB9357EE53A5C0A745E738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft
Manifest number: 12DD
Signing time: Sat 23 Aug 2025 05:02:29 +0000
Manifest this update: Sat 23 Aug 2025 05:02:29 +0000
Manifest next update: Sun 24 Aug 2025 05:02:29 +0000
Files and hashes: 1: JtxbWq9ormth5LcKwN5vG4Q3apo.roa (hash: lQXeYw4zv4cIzlRUFSI2nS9Q4llqbkuImnCVCQNKPmM=)
2: mQxLs441zXAyDreRUgxsrTSksnE.crl (hash: 3o/n0rqWR3mpdnjhteTs+FSqdkUaUeM4DHG/5+nwIGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:85:8e:22:bb:93:57:ee:53:a5:c0:a7:45:e7:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=990c4bb38e35cd70320eb791520c6cad34a4b271
Validity
Not Before: Aug 23 05:02:29 2025 GMT
Not After : Aug 24 05:02:29 2025 GMT
Subject: CN=7e89fc579f43da31417f5eba7f99bbca840489a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a0:74:69:cc:83:3c:88:74:d1:3c:39:7c:8e:
49:62:5e:f1:5b:3b:7b:9b:c5:51:7c:76:a6:7d:56:
c9:27:a3:9a:49:c2:15:5b:b3:62:8a:c9:79:95:48:
cd:74:70:b2:8c:87:e0:97:16:8b:85:a4:4b:42:ca:
ae:c7:c5:af:cc:04:01:9d:9f:43:6b:d7:c3:60:e7:
13:90:5c:27:58:6d:4e:46:18:d3:3b:31:9f:50:fa:
f5:a5:7c:3e:0c:f6:f6:04:79:d8:11:bd:51:5c:4f:
1a:ce:74:ea:fb:c0:39:7c:06:81:57:f7:a2:66:6d:
17:7e:8b:0a:70:0f:d4:30:5f:40:38:92:2f:35:72:
b4:46:1a:79:a2:e0:df:53:33:17:1d:0d:5f:8e:a9:
d9:9f:63:2c:45:5c:1c:15:1a:fd:26:79:51:f9:c7:
78:5e:bf:9b:66:98:0f:4b:ca:f8:65:4f:7e:84:d4:
1e:97:f7:57:6b:42:24:9f:fe:bb:3d:ef:79:d3:30:
6c:24:15:ea:43:9e:70:ae:1d:06:29:0f:95:36:dd:
07:8e:1f:a7:7e:cb:55:da:4e:09:ed:0c:43:1e:1f:
75:97:92:e4:23:8f:76:92:6a:a8:a1:8b:f5:0c:64:
70:ff:b1:7a:ce:13:e8:df:ed:28:9f:66:4f:ad:01:
c3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:89:FC:57:9F:43:DA:31:41:7F:5E:BA:7F:99:BB:CA:84:04:89:A6
X509v3 Authority Key Identifier:
keyid:99:0C:4B:B3:8E:35:CD:70:32:0E:B7:91:52:0C:6C:AD:34:A4:B2:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:94:f7:15:6a:84:ee:f8:2b:a4:a9:6d:7c:7c:8d:d5:21:18:
02:54:df:c6:63:c1:8e:01:d3:5c:3e:c6:f4:45:c3:91:8d:cb:
98:86:41:a5:5c:cb:d1:f0:04:49:57:2c:81:80:f3:35:ab:45:
d9:8c:51:52:97:b1:4b:99:12:71:78:6b:e9:66:7f:f8:41:86:
24:a3:07:60:65:4b:4a:36:67:42:3b:27:83:5d:62:14:e6:41:
dc:9d:3d:75:47:96:72:e5:83:fd:67:74:6c:91:f8:0e:49:d1:
6f:37:36:d6:ee:15:f8:8e:09:8e:5b:92:fe:bd:ed:75:b4:df:
cc:02:03:b2:ed:dc:d5:87:2b:02:d2:24:8a:cb:60:30:16:01:
ae:a1:75:c7:03:7a:d8:d1:61:5c:de:e1:e8:b4:0b:a8:e9:5d:
81:9b:80:5d:77:b1:1e:ca:1b:fa:a2:2c:e2:23:b5:eb:65:5c:
03:90:b5:af:8a:d8:82:27:7e:a5:1c:07:55:1d:e2:3a:2b:8a:
33:7e:27:86:d2:51:c6:9d:db:83:11:ae:ca:f1:08:9b:3f:e2:
f8:f9:97:7f:e1:f3:a2:1b:4e:e1:fa:8d:94:03:4c:24:ed:fd:
9c:cb:d0:e0:95:4b:8a:0d:4d:00:16:37:e4:0f:5b:94:d4:e1:
6f:f0:2b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:17 2025 by rpki-client