Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
File: MXqSdCYInzuMUACDIhp5ip0uhGY.mft (raw, json)
Hash identifier: tckTfAfUUb8+eNcmwwo9KETUQuLm1z9FjCgLdxGgLMQ=
Subject key identifier: 12:A8:71:FC:D5:CA:66:E9:CD:C5:7A:6F:8E:CF:79:B0:A8:44:AB:1B
Authority key identifier: 31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66
Certificate issuer: /CN=317a927426089f3b8c500083221a798a9d2e8466
Certificate serial: 0198D6CD29648E3F9059EE291B42A5E3AB9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
Manifest number: 1374
Signing time: Sat 23 Aug 2025 12:00:26 +0000
Manifest this update: Sat 23 Aug 2025 12:00:26 +0000
Manifest next update: Sun 24 Aug 2025 12:00:26 +0000
Files and hashes: 1: 9eN9v_hmY4BXhqwgwPbmdRtwaxg.roa (hash: /I1wfagsAtpLvGcRUkgr5rbaITh/yY12WpQcMZ73aQ0=)
2: MXqSdCYInzuMUACDIhp5ip0uhGY.crl (hash: jpxh/ebBfRSM7QIUscZiNrSqM+3QYXS999s4xd/mqfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:29:64:8e:3f:90:59:ee:29:1b:42:a5:e3:ab:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317a927426089f3b8c500083221a798a9d2e8466
Validity
Not Before: Aug 23 12:00:26 2025 GMT
Not After : Aug 24 12:00:26 2025 GMT
Subject: CN=12a871fcd5ca66e9cdc57a6f8ecf79b0a844ab1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:40:7e:56:b8:99:05:b8:87:ff:b9:d0:8c:c7:
6a:bf:3a:94:a6:5b:50:7a:5f:82:ee:aa:12:d9:24:
4d:7a:7c:10:8e:95:bd:27:a6:fd:0a:0d:26:83:39:
49:53:3e:7a:95:95:7a:b1:6d:08:39:b5:50:a7:ad:
d0:a2:d9:98:80:f6:52:a7:42:c9:bb:0b:49:53:21:
9c:a6:78:2a:06:81:4b:a1:5a:19:3f:ea:7c:bf:26:
3f:4e:84:70:f8:61:32:dc:a0:1d:ed:e3:09:5c:69:
3f:30:cc:dc:30:fc:d3:d1:11:4e:88:62:03:6f:76:
14:c7:19:51:7b:59:0a:3a:a0:7d:81:fd:e3:0f:7a:
21:70:18:e7:41:61:70:13:5e:2f:71:fe:f7:9b:16:
23:d7:b9:7d:41:95:27:4a:77:85:24:b2:f8:02:d8:
e2:c8:8a:09:af:a6:28:9f:7d:fc:21:a4:cf:28:f0:
ca:fa:7e:7a:bc:67:fe:88:ca:14:4c:a2:83:32:5f:
6b:e2:94:92:a3:be:f6:fe:2a:6f:c0:91:6d:3a:a9:
5c:7b:04:03:80:69:2e:8e:7b:ed:1e:36:b8:cd:b0:
fa:1e:5b:4a:8b:49:03:7f:1c:8e:9f:b9:5c:7f:22:
64:0e:70:45:75:95:71:aa:17:da:1f:36:f2:68:9e:
a4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A8:71:FC:D5:CA:66:E9:CD:C5:7A:6F:8E:CF:79:B0:A8:44:AB:1B
X509v3 Authority Key Identifier:
keyid:31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:5d:b9:85:e5:7d:72:0a:5e:c2:6d:f4:a2:b4:3b:69:e7:4e:
4d:4e:44:03:45:d1:22:05:1a:a5:0c:0d:24:76:30:b9:e0:56:
a2:3d:9e:74:d2:fa:a6:18:c9:90:57:9f:83:01:ab:e1:ce:47:
ee:df:ef:31:88:ed:9c:ab:a4:84:20:b6:4c:f1:c2:fa:59:11:
5d:fe:82:0b:bf:b1:1d:d3:b0:17:dc:b4:4c:eb:6e:9f:94:6d:
1a:66:53:9f:9c:2e:be:0d:d0:eb:e7:31:1e:12:9e:c6:99:a7:
5b:ce:27:a0:21:c6:60:0b:05:db:d6:35:de:98:7d:f4:c6:17:
6a:e4:a2:4d:f0:66:fb:2f:36:f6:02:77:19:04:61:dc:ab:86:
07:43:a1:aa:5d:b5:75:c4:63:f8:9b:e3:ff:d9:16:32:e3:23:
db:e9:66:07:12:3e:21:ef:d4:25:13:d9:89:9d:f0:0c:bc:c3:
0c:f2:1e:06:af:1b:9d:20:24:8f:fa:10:03:cd:cd:f7:bc:65:
fa:88:12:70:e2:ce:d3:e0:49:7b:4e:89:dd:31:15:e8:e5:85:
83:cd:a5:28:15:52:fe:6a:cc:42:70:ea:a1:c4:23:22:f3:5b:
45:de:c1:0f:8c:1f:95:5a:36:8a:57:8b:ca:91:49:9f:dc:b3:
6b:45:42:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:53:48 2025 by rpki-client