Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
File: mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft (raw, json)
Hash identifier: lp8ukMXcwzgQgQRht/fZAjTxe1V7k9av2O2Ayd7m99c=
Subject key identifier: 3B:18:28:FC:1B:74:97:1A:0A:9C:F9:C5:4A:81:3C:F0:3F:F6:05:74
Authority key identifier: 98:82:96:C5:0D:94:BB:ED:22:5F:28:67:23:1F:A5:09:3D:EB:EA:91
Certificate issuer: /CN=988296c50d94bbed225f2867231fa5093debea91
Certificate serial: 019891B6267D813D56A56D75012BF6907B11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
Manifest number: 126B
Signing time: Sun 10 Aug 2025 02:01:30 +0000
Manifest this update: Sun 10 Aug 2025 02:01:30 +0000
Manifest next update: Mon 11 Aug 2025 02:01:30 +0000
Files and hashes: 1: UjP5WMZKRBsvIlHnzhDHFBUyi78.roa (hash: pQ6/nnpLIpK2rwKH9JMJUyXoOlk8zghaFAetdmitLfY=)
2: mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl (hash: prAsMlfY1vJzNzbaFkcHg2OpV+cBKpV5NuV1QL82u+A=)
3: oFqjjYPuOysZm8IvX2HFnZ2yMN8.roa (hash: xodF+0GY/o0dnV+Pf3SoupYGcpVAvzY6q/h09Jx9Nzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:b6:26:7d:81:3d:56:a5:6d:75:01:2b:f6:90:7b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=988296c50d94bbed225f2867231fa5093debea91
Validity
Not Before: Aug 10 02:01:30 2025 GMT
Not After : Aug 11 02:01:30 2025 GMT
Subject: CN=3b1828fc1b74971a0a9cf9c54a813cf03ff60574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1a:10:32:15:d1:5d:85:6e:26:31:4b:d0:c8:
f8:ff:66:ca:89:53:62:28:90:02:b7:0d:70:c2:63:
0e:84:c5:45:b5:12:83:81:be:90:c1:11:9c:cd:59:
75:88:09:00:00:32:bb:92:7e:b9:e3:48:c0:f9:b9:
e1:cf:1e:47:d5:8c:9c:85:6f:61:4e:59:1f:f3:43:
da:ee:5c:27:7c:ed:54:f0:98:00:92:47:c5:60:72:
e7:4f:02:af:a4:f6:56:09:5f:a5:4a:b2:47:36:e6:
69:98:0d:ae:0a:df:b0:cb:64:5b:f4:9e:9d:7e:cf:
d0:ae:01:8d:3f:f1:78:7f:79:3c:d5:ba:d8:9e:d4:
67:bb:4f:b3:95:93:c6:cc:51:cd:47:8e:a5:01:2f:
24:72:d0:6b:92:6e:79:3e:55:12:13:03:9e:f8:d6:
02:18:4a:e0:87:5d:a1:eb:c9:0b:74:41:5d:b1:c8:
66:8b:cd:b8:1e:da:3c:f4:e1:9c:5f:9e:be:6c:01:
b4:a0:c9:b3:bd:16:cd:5a:38:59:e0:53:01:a0:16:
78:1b:97:0c:ec:9c:97:c0:99:de:d0:1c:b9:f5:0b:
11:ab:0e:a9:6d:c9:cd:bd:0e:7b:f7:b8:d5:c6:20:
8e:80:d1:7d:1b:99:bb:d8:e7:65:ad:81:dc:c2:70:
06:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:18:28:FC:1B:74:97:1A:0A:9C:F9:C5:4A:81:3C:F0:3F:F6:05:74
X509v3 Authority Key Identifier:
keyid:98:82:96:C5:0D:94:BB:ED:22:5F:28:67:23:1F:A5:09:3D:EB:EA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:32:39:43:e6:b5:08:01:22:7f:44:dd:aa:c4:87:5e:19:7f:
d1:3a:f4:2e:70:66:fd:d9:dd:63:5c:d5:67:f9:d1:06:4c:46:
1d:14:66:02:c9:de:3f:3b:84:9c:25:10:c2:d4:f9:85:e9:cc:
21:a0:76:48:30:0e:2c:20:0a:4f:21:2c:e8:ac:16:b7:98:08:
11:17:61:90:9b:fc:91:89:b7:24:c4:0a:54:83:be:80:41:e4:
a0:40:c5:76:15:aa:32:27:bf:a3:30:09:b6:49:54:18:d4:be:
ff:83:e2:87:ca:26:87:87:2b:9f:65:ee:b8:1c:ed:93:40:ae:
c5:fb:89:74:ed:96:8b:15:cc:1f:8f:ab:2f:0c:5d:07:11:49:
78:80:39:06:64:43:e6:51:1c:4e:08:c6:12:09:36:12:98:a4:
5e:d3:cc:b4:6c:63:10:3a:b6:04:a7:d4:a6:ec:0e:33:f0:cb:
6e:9e:bc:64:bf:1e:94:d6:6e:7b:cb:48:56:df:27:52:3a:13:
94:f9:21:16:ed:1f:80:f7:96:8b:ce:a0:82:fd:e0:62:32:e6:
1e:e8:1f:98:9e:25:b8:62:c3:60:2e:e2:9d:16:61:36:fa:97:
e7:56:65:59:01:80:d4:c0:b1:e4:d0:b0:38:f2:5f:ea:9a:b2:
f7:84:3f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:01:00 2025 by rpki-client