Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft
File: moBTvNLE2KeioyXit0ZBZqXkjd0.mft (raw, json)
Hash identifier: e1J1ahcygYXjEqJ7ASU81jxeA+JGGvJKQWZi5O1mGVc=
Subject key identifier: 00:54:59:05:F8:9D:3B:9E:C8:83:AF:E3:8F:7A:40:C1:E9:CD:CC:FC
Authority key identifier: 9A:80:53:BC:D2:C4:D8:A7:A2:A3:25:E2:B7:46:41:66:A5:E4:8D:DD
Certificate issuer: /CN=9a8053bcd2c4d8a7a2a325e2b7464166a5e48ddd
Certificate serial: 019873E243BBBAC9393889F5107C25BCE227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/moBTvNLE2KeioyXit0ZBZqXkjd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft
Manifest number: 10A2
Signing time: Mon 04 Aug 2025 07:01:04 +0000
Manifest this update: Mon 04 Aug 2025 07:01:04 +0000
Manifest next update: Tue 05 Aug 2025 07:01:04 +0000
Files and hashes: 1: cxA-RyOMLkq935v_LceKQwYPwHs.roa (hash: HnGDMBYysRSj3AGQ0kR7dSJMblTeuNonvUsGSEcjwQ4=)
2: moBTvNLE2KeioyXit0ZBZqXkjd0.crl (hash: zjN3prMqpMJbIc5h1fr0uWyMY0TD2P6s2q2abl9XKGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/moBTvNLE2KeioyXit0ZBZqXkjd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:43:bb:ba:c9:39:38:89:f5:10:7c:25:bc:e2:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a8053bcd2c4d8a7a2a325e2b7464166a5e48ddd
Validity
Not Before: Aug 4 07:01:04 2025 GMT
Not After : Aug 5 07:01:04 2025 GMT
Subject: CN=00545905f89d3b9ec883afe38f7a40c1e9cdccfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:75:ca:fd:75:d5:57:60:75:c9:86:e8:e2:ef:
c1:04:3b:95:3f:05:e6:e4:6a:47:8e:ef:76:4a:7b:
43:d3:e4:af:0b:0b:27:62:5e:bc:b3:20:55:f6:f7:
67:87:7b:1a:3d:74:a6:c6:7f:cd:03:30:7d:dd:24:
fd:32:2a:1f:d0:63:c8:16:c1:df:94:cd:45:20:bd:
22:e3:e4:9d:4d:78:e7:68:0e:81:b5:e4:ad:25:43:
77:1e:80:3c:10:22:a8:e9:30:46:ad:8e:96:5a:fd:
a4:0a:c6:d7:db:fd:a3:7b:27:68:e3:38:74:12:2a:
b0:41:90:d1:7b:de:95:6b:27:c2:73:de:92:8c:b3:
a9:b5:2d:ac:c6:89:32:9e:61:7c:a5:2a:69:7d:cf:
ed:a8:fa:d1:05:67:f3:08:d0:51:a5:b0:7c:61:fe:
17:fd:f4:ac:63:2e:97:aa:d3:42:90:e7:b2:42:8b:
64:b9:e3:63:1c:06:41:5f:5a:81:03:1a:8a:0d:65:
bb:1b:75:70:fe:41:6f:10:8f:4c:0f:11:75:2b:7e:
b7:b7:fb:c5:70:b4:71:2d:b0:3d:13:bd:2d:df:d2:
87:c8:6e:e5:e4:3b:36:32:1b:a0:ef:0a:16:d4:b4:
26:e4:48:4f:c4:da:02:36:3c:4f:ed:bc:cf:a5:7e:
5e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:54:59:05:F8:9D:3B:9E:C8:83:AF:E3:8F:7A:40:C1:E9:CD:CC:FC
X509v3 Authority Key Identifier:
keyid:9A:80:53:BC:D2:C4:D8:A7:A2:A3:25:E2:B7:46:41:66:A5:E4:8D:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/moBTvNLE2KeioyXit0ZBZqXkjd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:22:b4:46:7f:53:b8:35:fb:ee:3e:00:2e:e5:c7:d0:56:50:
e6:56:dd:b6:23:d0:38:8c:ff:2c:db:03:c9:58:d6:6a:ad:96:
30:b5:ef:47:d6:4e:b6:17:df:db:bf:ca:a7:f4:e5:4c:dc:31:
e4:29:ce:6d:82:67:86:4c:2b:5a:e2:58:67:72:f5:e9:11:b0:
e9:3a:48:24:52:df:3e:ba:93:d2:89:06:7e:2a:aa:d9:f7:e6:
ee:60:c8:58:7a:74:c9:61:ef:56:c0:15:d8:ab:48:73:2c:2d:
a3:ad:d3:28:28:79:3f:f0:76:07:56:2c:e8:86:65:e7:a4:bd:
1b:64:d2:a1:f1:ea:46:9b:ad:85:96:1e:3e:8a:dd:0b:f6:9f:
fe:46:51:82:60:93:37:02:e9:77:c0:07:41:39:6c:48:65:3f:
76:d4:1f:1d:e4:68:3d:12:71:93:94:1f:8f:de:18:0d:3b:51:
60:93:0d:00:f1:a1:03:8f:a3:f7:88:0a:cc:42:20:ef:5d:58:
54:7b:b8:72:34:f1:ce:3f:89:e5:44:0e:4c:64:48:50:23:50:
f4:9a:58:85:7f:04:e1:76:37:14:c5:8c:3a:5e:ba:55:e7:79:
bc:5e:50:e4:6a:9a:a3:a6:1d:2b:dd:56:4d:21:c9:49:3c:d1:
f4:a3:5e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:24 2025 by rpki-client