Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
File: mXpkd92XDJSyoXtSUCmC1Px1skQ.mft (raw, json)
Hash identifier: 0jxPW+hgZfyawokhybOcZZLsWtTHOOHobBNO89/tr3M=
Subject key identifier: CE:50:B0:09:50:FB:F2:D9:7B:CA:B2:14:DB:EF:1A:61:A7:A0:B1:2D
Authority key identifier: 99:7A:64:77:DD:97:0C:94:B2:A1:7B:52:50:29:82:D4:FC:75:B2:44
Certificate issuer: /CN=997a6477dd970c94b2a17b52502982d4fc75b244
Certificate serial: 01988B45C0EBD67B204F0665088A16631F44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXpkd92XDJSyoXtSUCmC1Px1skQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
Manifest number: 054F
Signing time: Fri 08 Aug 2025 20:01:01 +0000
Manifest this update: Fri 08 Aug 2025 20:01:01 +0000
Manifest next update: Sat 09 Aug 2025 20:01:01 +0000
Files and hashes: 1: N5euriRPkrPM5tpe3YMpJKwtnXs.roa (hash: Aif5H8pBLwxI+pfqg48v8EjEzgULti0iCYfChkXvfLI=)
2: mXpkd92XDJSyoXtSUCmC1Px1skQ.crl (hash: CELk1OgmSh1B5y9O0bWOK0rbHjRO5I6jqoxm24gJoc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mXpkd92XDJSyoXtSUCmC1Px1skQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:45:c0:eb:d6:7b:20:4f:06:65:08:8a:16:63:1f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=997a6477dd970c94b2a17b52502982d4fc75b244
Validity
Not Before: Aug 8 20:01:01 2025 GMT
Not After : Aug 9 20:01:01 2025 GMT
Subject: CN=ce50b00950fbf2d97bcab214dbef1a61a7a0b12d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:88:37:93:3c:bd:06:6b:e2:be:98:d6:3b:6e:
75:a8:f6:89:5b:de:8b:be:20:93:31:2d:74:20:7d:
d5:82:b9:7f:5d:d5:c7:1c:5b:22:e5:76:1a:fb:26:
cd:88:80:da:64:92:66:19:a5:fc:a2:d1:96:06:e0:
a2:ce:43:6f:8b:4b:1d:0f:23:68:a5:d2:ce:aa:8b:
2e:66:be:83:41:35:b0:39:16:5f:85:25:75:c2:02:
ec:be:93:9e:7b:b3:f7:42:fd:50:7b:e3:94:d4:90:
b9:29:d8:61:5a:c9:bc:76:51:7b:13:8c:9f:0f:ae:
c2:01:61:62:02:87:f5:52:93:5e:36:e9:62:49:6f:
20:f2:00:10:99:88:60:3d:c6:02:03:4d:1f:f5:2a:
85:5f:ec:c2:c7:ca:0a:d3:fa:b5:2f:85:84:37:71:
cc:2a:c7:55:42:39:a2:d0:b3:79:02:b3:56:f7:d8:
79:b7:03:f1:96:88:c1:51:68:a4:e2:e1:a4:07:f1:
f2:58:79:d9:a3:82:ff:2d:7d:31:09:47:fc:89:99:
7a:38:9b:bd:d7:52:cd:b7:f6:22:ae:e6:03:09:c2:
75:85:1e:bb:e6:74:58:4a:5d:37:4a:60:03:7f:35:
19:65:ff:f4:3e:fc:60:52:02:49:f3:47:4b:5c:7a:
cb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:50:B0:09:50:FB:F2:D9:7B:CA:B2:14:DB:EF:1A:61:A7:A0:B1:2D
X509v3 Authority Key Identifier:
keyid:99:7A:64:77:DD:97:0C:94:B2:A1:7B:52:50:29:82:D4:FC:75:B2:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXpkd92XDJSyoXtSUCmC1Px1skQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:0c:ec:d9:68:e4:d0:b5:30:f5:14:a4:d7:06:1f:9b:da:0b:
10:83:3a:ec:53:5b:11:30:a9:dd:a4:a5:c3:89:10:4e:e4:b5:
ef:85:25:2f:59:96:f4:6a:a6:0c:38:1e:9b:71:25:59:9b:d8:
14:f3:e6:f2:1b:3b:93:9d:8e:63:94:15:17:62:1c:26:e3:c9:
72:c1:eb:4b:6a:d3:d2:09:6a:23:84:77:99:a6:26:1e:bb:f2:
8e:fe:9b:ab:37:7b:ab:33:7b:99:c7:69:7a:64:29:a9:76:3a:
1f:98:5f:7f:af:af:2b:fd:91:b8:ab:25:56:f5:f9:e5:26:ad:
2e:72:f7:8d:90:9c:f1:3e:bb:e3:74:80:b3:e8:9a:82:be:62:
93:c5:0d:b2:b6:32:f6:0c:0f:2a:d4:17:24:e2:71:25:a5:91:
ab:96:7e:9e:d0:fd:5d:36:6f:f2:cb:00:f9:7a:e4:29:3b:d3:
26:16:34:62:9d:74:25:86:78:92:3d:44:be:48:7d:96:50:94:
fe:42:3b:03:3f:c7:b6:0f:d7:e7:46:83:56:88:b9:78:04:32:
05:f8:95:e9:03:84:fc:6b:0b:d7:aa:03:4b:34:b3:88:f4:64:
ad:5a:24:bd:64:c0:33:68:db:df:4c:f4:0a:48:17:b6:ba:d0:
dd:79:45:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:03:19 2025 by rpki-client