Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.mft
File: mrL5l1qR5xN52hAOyEvUSgooDZs.mft (raw, json)
Hash identifier: zOLuoMWEN+HfV58R0lnyOPW4vbLtssnm2m1WyL0MbOg=
Subject key identifier: AF:F0:7C:B3:78:34:7D:E6:F8:00:11:A3:CA:E4:0E:9F:FE:09:45:B2
Authority key identifier: 9A:B2:F9:97:5A:91:E7:13:79:DA:10:0E:C8:4B:D4:4A:0A:28:0D:9B
Certificate issuer: /CN=9ab2f9975a91e71379da100ec84bd44a0a280d9b
Certificate serial: 019896376A6DDB262D51098CF81BCEE63C5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrL5l1qR5xN52hAOyEvUSgooDZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.mft
Manifest number: 136D
Signing time: Sun 10 Aug 2025 23:01:10 +0000
Manifest this update: Sun 10 Aug 2025 23:01:10 +0000
Manifest next update: Mon 11 Aug 2025 23:01:10 +0000
Files and hashes: 1: PbBhRej558nP-vCP2i5bq2vF02I.roa (hash: k4y0Lkz3mWSRjZ9l7iXnliVmD502EHJIpmvxtHIQNOU=)
2: mrL5l1qR5xN52hAOyEvUSgooDZs.crl (hash: Jbs4qm+Om1zdKjcHTcxpOID+C1bqtq00mErPAB2EtIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrL5l1qR5xN52hAOyEvUSgooDZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 23:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:37:6a:6d:db:26:2d:51:09:8c:f8:1b:ce:e6:3c:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab2f9975a91e71379da100ec84bd44a0a280d9b
Validity
Not Before: Aug 10 23:01:10 2025 GMT
Not After : Aug 11 23:01:10 2025 GMT
Subject: CN=aff07cb378347de6f80011a3cae40e9ffe0945b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:70:68:0c:8f:77:e0:0d:65:a5:91:3f:69:26:
8b:33:a0:f6:06:f9:e4:8c:0d:af:44:14:fa:2d:5d:
bd:2f:9a:93:80:ee:60:47:03:3e:a1:54:44:cb:f5:
16:ef:0d:f6:9b:f8:d2:4b:bf:f1:2c:5e:8a:de:68:
c6:fc:ae:2a:88:b6:e4:0a:83:dd:a3:02:dc:e4:f0:
7f:6f:0b:e3:57:a8:18:9d:93:ee:5c:c0:0b:a7:31:
93:5d:e6:a8:88:b9:22:40:3e:67:ef:59:b0:a0:51:
2b:c8:28:e3:4a:b5:e3:91:92:e2:f5:dd:fb:9a:e2:
0c:08:ef:91:31:6b:e8:ce:08:36:3e:ce:eb:65:22:
b7:01:e1:d3:50:1f:b9:72:3a:46:00:69:47:c6:e2:
3c:aa:7c:84:c5:09:08:6a:8e:aa:ec:29:98:8f:f6:
fc:3d:74:0b:f3:95:b9:26:55:d6:b1:cd:09:f3:78:
e9:b4:0c:95:3e:6f:83:4e:33:09:df:fc:44:a8:c9:
55:62:18:f5:ed:b1:10:9b:9d:43:4c:2d:e0:c8:e4:
58:af:e0:e0:ff:40:99:7d:07:20:8a:a5:0c:27:2b:
d9:5a:cd:d9:5d:91:01:1f:f2:50:78:34:f4:fc:da:
32:94:07:8b:a4:15:10:3c:c9:be:33:c9:f4:23:6e:
60:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F0:7C:B3:78:34:7D:E6:F8:00:11:A3:CA:E4:0E:9F:FE:09:45:B2
X509v3 Authority Key Identifier:
keyid:9A:B2:F9:97:5A:91:E7:13:79:DA:10:0E:C8:4B:D4:4A:0A:28:0D:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrL5l1qR5xN52hAOyEvUSgooDZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:c3:9a:c5:19:5d:58:f3:82:48:1e:c7:28:5b:1b:ba:8b:d8:
18:fc:1e:3c:41:f8:fc:de:d9:7b:74:f7:3a:d1:8f:e3:d0:1f:
d8:d9:48:8c:ea:b6:a2:70:2f:e8:80:49:32:65:62:b5:b6:21:
dd:72:90:5e:98:e6:51:3f:b3:07:a9:a8:53:54:6b:43:94:ff:
a8:a6:d6:dc:7b:ea:82:b5:ec:60:02:a0:5d:97:e3:ea:e0:d5:
d5:83:3f:45:59:57:d9:e1:47:72:52:d9:b0:f4:c4:e3:00:a1:
ba:04:3f:d0:e6:38:1e:89:2e:17:6e:24:7f:d0:81:fb:b0:c2:
b2:fd:70:bb:a4:38:e7:b7:c0:6f:00:26:04:94:3a:7e:2d:f5:
df:de:a0:b7:79:33:18:8c:6f:75:dd:ca:68:9a:6d:95:94:38:
57:10:ea:8a:71:43:52:77:1d:86:26:e5:70:12:94:10:eb:b5:
14:40:5c:02:b6:5d:69:c4:1d:2c:a4:a8:12:d2:2c:11:5a:02:
82:67:f6:11:33:a4:c4:2f:be:c0:fe:42:b4:9b:d9:50:c9:e3:
dc:4d:b7:1b:1e:0d:52:d2:e6:a7:7a:cf:be:00:d0:68:44:1a:
83:88:3b:bd:47:e3:db:ef:87:f6:4f:8b:2b:26:20:2b:37:f1:
fe:0c:af:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:19:34 2025 by rpki-client