Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft
File: mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft (raw, json)
Hash identifier: K0Y/ba+jn73fffJnwQlE09UBDfPBv5kdn4b6eQWmC5w=
Subject key identifier: 4B:12:8E:8E:A8:74:17:C7:12:0B:D1:A4:C0:21:CF:71:94:B3:AA:34
Authority key identifier: 99:55:C5:A7:13:7E:B5:D4:7E:A2:4E:17:D2:7F:A9:2D:0B:42:FB:D8
Certificate issuer: /CN=9955c5a7137eb5d47ea24e17d27fa92d0b42fbd8
Certificate serial: 0198D473CBD8C905C686567169FDE67F6A8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mVXFpxN-tdR-ok4X0n-pLQtC-9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft
Manifest number: 152C
Signing time: Sat 23 Aug 2025 01:03:35 +0000
Manifest this update: Sat 23 Aug 2025 01:03:35 +0000
Manifest next update: Sun 24 Aug 2025 01:03:35 +0000
Files and hashes: 1: 2z0NeYZe1xNl9FiaXMK1zDvmewM.roa (hash: cOILWkUhsnduTiBD7sHiLuG2BYfCl/U6Tpdfh+0XXP8=)
2: 5Sxq5_88aKl6Q1AixLmSpdxssj4.roa (hash: 930p4kPdeb7NPu1eD23W3ram0O2yZZYGtkILA0nswPo=)
3: BnHU_9oB_ewnVOgPSPpU2bWe8Zk.roa (hash: go8wZXjflDuAlY6EuMTLQuty8jZX31nqsRbiTUQs4zs=)
4: mVXFpxN-tdR-ok4X0n-pLQtC-9g.crl (hash: LqzcNRTgb0OePaMZwtQdIAWlnwGnuicItC3UKV/aukk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/mVXFpxN-tdR-ok4X0n-pLQtC-9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:cb:d8:c9:05:c6:86:56:71:69:fd:e6:7f:6a:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9955c5a7137eb5d47ea24e17d27fa92d0b42fbd8
Validity
Not Before: Aug 23 01:03:35 2025 GMT
Not After : Aug 24 01:03:35 2025 GMT
Subject: CN=4b128e8ea87417c7120bd1a4c021cf7194b3aa34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:05:0d:6c:e4:c1:be:53:f8:4e:fb:8b:49:bf:
17:12:d8:6b:5f:f2:1b:10:b5:ee:60:5a:3e:ea:9e:
a2:57:84:65:01:39:4d:8c:b2:01:9a:df:14:e5:1d:
05:f1:13:49:dc:05:4c:65:a7:eb:5a:ff:7a:e9:3c:
f3:7e:ed:57:5f:cc:d7:2f:3b:e5:d0:e2:f0:93:af:
15:04:c5:2a:3f:73:ec:51:7f:47:aa:0f:bb:1a:5b:
b7:e9:3b:30:69:0c:8f:26:e0:f3:66:bb:47:54:d5:
25:e6:fe:cf:02:31:70:2b:11:81:30:df:3f:1e:b6:
31:21:c4:38:f3:9d:08:f8:89:db:b4:a2:bb:9a:93:
96:7b:04:58:b8:ca:3b:47:6d:28:de:97:af:93:37:
dc:52:88:a4:27:ac:bf:79:14:d3:d6:33:a0:e4:1f:
89:71:db:f6:fb:3d:dc:ca:5e:18:0b:4b:24:82:a4:
c8:89:57:1c:12:4d:24:c4:74:e7:25:04:73:58:5a:
be:41:6f:1a:a0:c6:15:2d:fc:27:ee:3b:f9:14:e8:
25:84:cf:01:11:6b:f9:fe:f4:b1:92:ec:2d:ee:6a:
8c:3c:93:1a:b9:1d:32:8b:4f:2b:5a:0a:b3:1b:0c:
58:87:71:0b:d3:50:d0:3e:e0:de:ac:25:d2:a4:73:
a5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:12:8E:8E:A8:74:17:C7:12:0B:D1:A4:C0:21:CF:71:94:B3:AA:34
X509v3 Authority Key Identifier:
keyid:99:55:C5:A7:13:7E:B5:D4:7E:A2:4E:17:D2:7F:A9:2D:0B:42:FB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mVXFpxN-tdR-ok4X0n-pLQtC-9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:f3:02:04:89:6b:66:d7:e5:36:fd:6a:d9:b5:3f:c6:0b:38:
60:a1:1f:b1:fb:16:56:f7:d8:7b:42:bd:75:d8:57:d2:f3:d1:
cf:45:00:4c:a4:ac:32:c6:d0:f1:f3:08:0d:91:a6:4f:83:41:
41:e2:e7:30:e0:67:8a:e8:97:a1:72:3a:4c:a6:5b:8e:2d:28:
a9:c3:07:99:5a:56:57:22:c0:72:53:db:38:2e:0f:11:c5:b0:
67:14:be:a6:5c:fe:f6:27:34:4d:df:03:87:11:fd:46:28:8a:
bf:f5:93:8f:0c:82:b3:36:b1:12:31:4f:b6:16:8c:e8:45:f5:
83:14:cd:14:52:aa:27:2d:46:c0:76:90:fe:42:d1:48:9f:3b:
5b:e5:a7:39:08:ea:71:48:c2:68:e3:37:97:a7:c3:1b:8e:f7:
33:c8:04:4a:e1:91:ba:29:2a:fe:d2:ab:08:df:68:85:61:4b:
3e:ec:26:0b:3a:b3:8b:e9:11:96:a1:87:cf:4a:af:ff:4f:c1:
97:a5:56:c0:2a:61:1e:8a:09:0c:88:1a:bf:2c:ed:66:b0:54:
00:90:01:de:a3:56:ea:34:2e:9a:ee:cf:0b:b6:a2:c5:6f:0e:
1e:3f:d2:ec:e1:ae:fe:87:9d:02:8f:8b:ce:88:6c:02:a2:75:
c1:09:7a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:36:20 2025 by rpki-client