Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
File: MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft (raw, json)
Hash identifier: tN651CoYLNwPelWRfe7Fb7l12gECTjCKwGOobEBuLwo=
Subject key identifier: CF:29:D8:17:48:DE:F5:53:D3:AF:8C:80:AB:67:D6:32:C6:20:A8:11
Authority key identifier: 31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8
Certificate issuer: /CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8
Certificate serial: 01987ABFABE896A18187C4D9CBDF26E9ADC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
Manifest number: 134A
Signing time: Tue 05 Aug 2025 15:00:38 +0000
Manifest this update: Tue 05 Aug 2025 15:00:38 +0000
Manifest next update: Wed 06 Aug 2025 15:00:38 +0000
Files and hashes: 1: MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl (hash: 3+wD40LgJbtXxKsxWQuzeXBg3LnDbh87pg2rjqxyeIg=)
2: vFLgCTe-UJbqLfUe3y5RaRMMkfQ.roa (hash: IEG6zoQ0fCsuLu4vs2hhEQUL3h31kYLoRcvO00kJOpM=)
3: zmcBckUxuKaBoSS2-IE8qAAieFk.roa (hash: zuTF25+EetsvafVF215FiE6HAdQFZXfOVRgob3VxMdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 15:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:bf:ab:e8:96:a1:81:87:c4:d9:cb:df:26:e9:ad:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8
Validity
Not Before: Aug 5 15:00:38 2025 GMT
Not After : Aug 6 15:00:38 2025 GMT
Subject: CN=cf29d81748def553d3af8c80ab67d632c620a811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e1:5a:6f:31:50:62:b2:37:31:97:8a:c0:b6:
14:d3:11:8e:3b:fc:30:1d:db:65:8e:f8:c1:c5:c0:
31:71:40:59:1f:c3:3d:d0:1f:76:5c:11:fe:a8:44:
36:1d:04:c9:91:b4:79:66:7b:3d:95:a3:d4:7a:d1:
ad:37:aa:4b:e5:2e:28:01:4e:b2:29:ab:0c:88:ab:
ec:ac:2f:e6:90:d6:fb:ae:27:f4:92:26:f9:1f:13:
bc:d7:9f:15:33:66:cc:02:48:d7:c8:4c:a9:d0:86:
a9:bd:94:ff:0e:31:d9:ba:24:38:4b:1e:09:6c:2d:
5a:28:42:d2:a1:c9:86:13:76:20:65:af:d4:25:4c:
ca:cc:98:3b:2a:5d:a1:44:4b:ca:62:d3:52:02:19:
28:35:68:05:b3:5c:39:96:d8:76:58:1d:7e:ee:6b:
b9:38:77:4c:74:f3:a1:6d:6b:f7:eb:0c:b8:a9:00:
c9:0c:c1:1c:fe:f0:be:85:4e:2c:ad:1b:fd:08:37:
29:1a:23:e6:ec:fe:18:37:78:9a:23:f8:a7:25:ad:
23:92:48:5e:5f:41:69:6f:2b:da:1e:00:b8:f1:9e:
15:fb:bf:46:c3:94:cd:56:f4:7d:55:35:b6:3c:44:
b5:e6:60:13:06:0f:9e:49:ab:97:96:5e:b9:1a:7e:
92:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:29:D8:17:48:DE:F5:53:D3:AF:8C:80:AB:67:D6:32:C6:20:A8:11
X509v3 Authority Key Identifier:
keyid:31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:fc:c8:33:cb:99:0a:de:44:5a:ae:e7:3d:47:00:1c:ed:71:
2a:ca:7c:27:3f:78:80:b0:5c:6a:96:57:d4:24:a0:49:f9:b5:
f2:31:94:d7:51:01:28:f6:09:1f:94:00:d8:d7:a0:d1:b3:59:
71:d7:f6:e4:13:84:65:3a:a9:f3:06:5e:10:1b:64:aa:14:49:
1f:36:35:07:7e:ef:00:76:a9:87:0c:97:0d:50:f4:2f:86:59:
80:ef:15:2b:f1:ec:78:f6:bd:e4:48:80:74:8b:08:08:33:45:
00:ef:09:42:d3:ca:12:2f:77:9a:18:c0:26:e8:a6:3b:6f:12:
2a:bd:59:80:b4:5e:4b:1f:5a:6b:a7:aa:04:19:d6:59:81:9a:
a9:3f:85:2e:cd:12:73:90:01:a5:22:84:e7:b6:c6:89:a9:bf:
03:f7:b1:c9:57:6c:69:58:04:67:33:8b:a3:d3:fe:c7:ce:ba:
e4:05:f6:0f:02:9b:3a:a6:c7:d4:e7:96:ac:bd:2c:6a:19:7e:
dd:01:25:fa:2e:c8:2d:60:ac:f2:1e:20:12:37:69:73:4e:8b:
00:80:fc:28:f2:8d:cc:b2:07:00:86:c6:be:60:e5:5f:20:3d:
d2:b3:a0:05:ee:3e:03:cf:ea:28:e4:fd:ba:92:77:e4:b8:5f:
39:37:7e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:52:17 2025 by rpki-client