Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft
File: moBTvNLE2KeioyXit0ZBZqXkjd0.mft (raw, json)
Hash identifier: XGX7kod+raxFoPxqpWQfOelGUA923Z8Lg9oF6RlslMs=
Subject key identifier: 28:5A:97:08:D7:2A:1E:22:1D:02:DB:6B:1C:BB:3C:53:69:53:19:EE
Authority key identifier: 9A:80:53:BC:D2:C4:D8:A7:A2:A3:25:E2:B7:46:41:66:A5:E4:8D:DD
Certificate issuer: /CN=9a8053bcd2c4d8a7a2a325e2b7464166a5e48ddd
Certificate serial: 01976EF5497A270C18A1D7863E5C639D8186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/moBTvNLE2KeioyXit0ZBZqXkjd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft
Manifest number: 101B
Signing time: Sat 14 Jun 2025 15:00:58 +0000
Manifest this update: Sat 14 Jun 2025 15:00:58 +0000
Manifest next update: Sun 15 Jun 2025 15:00:58 +0000
Files and hashes: 1: cxA-RyOMLkq935v_LceKQwYPwHs.roa (hash: HnGDMBYysRSj3AGQ0kR7dSJMblTeuNonvUsGSEcjwQ4=)
2: moBTvNLE2KeioyXit0ZBZqXkjd0.crl (hash: hzE9wt8I0oMqgIdEuRr1Pab4717MbPnSpL26tOWFo7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/moBTvNLE2KeioyXit0ZBZqXkjd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f5:49:7a:27:0c:18:a1:d7:86:3e:5c:63:9d:81:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a8053bcd2c4d8a7a2a325e2b7464166a5e48ddd
Validity
Not Before: Jun 14 15:00:58 2025 GMT
Not After : Jun 15 15:00:58 2025 GMT
Subject: CN=285a9708d72a1e221d02db6b1cbb3c53695319ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:74:5d:fa:0e:d0:66:2a:a9:e3:42:ea:f2:f4:
e6:77:08:22:4b:3b:31:ee:19:3c:ae:93:19:e3:8d:
23:3a:25:42:1b:f1:62:f4:3d:be:15:1d:b3:bd:6d:
50:2f:13:26:b7:4e:69:ec:0d:7e:e0:12:f7:d9:f2:
69:2e:4c:7d:3f:fd:e7:b0:27:cb:5f:93:17:5b:d1:
0b:15:bf:46:a1:50:78:88:59:c5:71:83:69:bc:8e:
78:e0:c3:c6:19:b3:7f:de:b9:b4:40:e3:3e:1f:a1:
32:c0:31:c6:db:e5:79:11:6a:76:49:87:a2:d1:39:
cb:c8:08:64:d0:86:f5:fc:81:1b:5d:50:e6:f2:f4:
bd:71:5e:43:42:76:93:25:65:b7:05:55:2c:d1:b4:
07:f2:72:d6:d8:0e:17:1a:20:3a:64:7e:e5:81:33:
8f:7a:23:1e:3e:19:e8:e8:a5:68:ed:39:2f:e0:44:
fa:91:7d:26:fe:c4:7a:5a:ab:15:1d:a9:a3:ec:98:
fb:97:e3:f5:a7:2a:a2:79:49:23:51:c8:91:0f:3e:
76:df:9a:e7:a7:27:32:ee:80:6a:32:3c:6b:f1:d7:
93:ce:61:5a:54:b8:df:f0:f4:e1:2d:82:50:82:07:
b3:b4:d0:a9:bb:40:65:6c:0a:4c:bc:22:37:a3:8b:
98:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:5A:97:08:D7:2A:1E:22:1D:02:DB:6B:1C:BB:3C:53:69:53:19:EE
X509v3 Authority Key Identifier:
keyid:9A:80:53:BC:D2:C4:D8:A7:A2:A3:25:E2:B7:46:41:66:A5:E4:8D:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/moBTvNLE2KeioyXit0ZBZqXkjd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:eb:55:7c:bc:8c:34:dd:1d:2b:b9:cb:6f:0d:e7:b2:cb:67:
9f:cb:a5:66:65:8d:67:b0:7f:76:59:56:3e:fb:51:21:e4:63:
15:91:e3:3f:91:92:0d:d1:82:e4:9d:32:85:12:5f:d0:1a:3e:
3d:80:28:4b:1d:3a:08:ca:07:4b:ca:67:b9:3f:32:c7:fb:20:
56:3a:45:0b:db:f9:e1:1c:33:84:43:54:93:f9:34:b1:54:8f:
91:8f:bf:6e:2b:ce:bc:d9:7f:e6:76:c9:88:14:76:78:45:a9:
01:e5:c4:33:aa:50:45:29:d6:b6:62:5f:71:b0:af:23:1c:8a:
00:d4:45:66:09:10:68:a4:6e:16:b0:a5:b7:0b:9c:a8:e0:fe:
b3:ab:60:4a:51:37:52:dc:8d:bc:27:e4:9e:0d:e7:c9:74:36:
8c:1d:12:cd:c1:49:4e:7f:6a:09:1c:32:1b:4b:3a:ef:99:f3:
d7:25:42:dc:12:9c:b8:03:68:bf:69:26:24:99:3a:ae:8b:6e:
78:5d:f1:23:d0:39:93:24:e1:ee:f8:a6:8c:3b:e7:01:62:7f:
9b:86:4c:20:a6:ce:8c:f5:8d:d4:15:c0:30:01:8b:ba:7e:75:
c7:07:b1:11:12:be:ec:72:2f:ba:aa:39:27:0f:10:57:08:f7:
dd:97:cc:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:58:19 2025 by rpki-client