Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/587b7b-071c-430b-9eb2-6ec62690b19b/1/mXIUjHNiwsk5m7OvdBWSxCUWxUc.mft
File: mXIUjHNiwsk5m7OvdBWSxCUWxUc.mft (raw, json)
Hash identifier: zhEj+RE9raSUkdfdrewvRFsX9mD8sHAYwbUZJ1VQl2g=
Subject key identifier: D2:0A:5B:0C:15:E4:BA:3C:B0:C1:AA:B6:EF:46:DE:7B:35:D5:1B:06
Authority key identifier: 99:72:14:8C:73:62:C2:C9:39:9B:B3:AF:74:15:92:C4:25:16:C5:47
Certificate issuer: /CN=9972148c7362c2c9399bb3af741592c42516c547
Certificate serial: 019890357FDA2F4E6D2EA47922E0D93FCEA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXIUjHNiwsk5m7OvdBWSxCUWxUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/587b7b-071c-430b-9eb2-6ec62690b19b/1/mXIUjHNiwsk5m7OvdBWSxCUWxUc.mft
Manifest number: 1161
Signing time: Sat 09 Aug 2025 19:01:21 +0000
Manifest this update: Sat 09 Aug 2025 19:01:21 +0000
Manifest next update: Sun 10 Aug 2025 19:01:21 +0000
Files and hashes: 1: mXIUjHNiwsk5m7OvdBWSxCUWxUc.crl (hash: oVDBGXEgN4+VcjHLop70Lzr4twYfTuqfHykBi6lUkeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/587b7b-071c-430b-9eb2-6ec62690b19b/1/mXIUjHNiwsk5m7OvdBWSxCUWxUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/587b7b-071c-430b-9eb2-6ec62690b19b/1/mXIUjHNiwsk5m7OvdBWSxCUWxUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mXIUjHNiwsk5m7OvdBWSxCUWxUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:35:7f:da:2f:4e:6d:2e:a4:79:22:e0:d9:3f:ce:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9972148c7362c2c9399bb3af741592c42516c547
Validity
Not Before: Aug 9 19:01:21 2025 GMT
Not After : Aug 10 19:01:21 2025 GMT
Subject: CN=d20a5b0c15e4ba3cb0c1aab6ef46de7b35d51b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:06:e2:a9:10:fa:a7:6a:b3:1c:48:75:bd:b1:
61:f3:1d:a6:40:db:b1:70:96:ff:61:0b:b9:35:ce:
0c:ea:f3:fa:d1:55:2b:2f:c4:9c:65:83:98:52:23:
52:42:ab:2b:e5:3c:93:24:e8:2a:00:a2:e0:65:13:
b7:8d:bb:25:c9:76:39:71:ec:e4:c2:b0:de:25:9f:
b7:57:83:1f:6a:32:4f:ce:a2:df:0d:8b:f5:b4:3c:
44:35:a2:f1:21:52:99:6b:e0:b2:ce:26:a7:b9:ef:
86:6b:7d:6d:3f:0d:6b:9e:25:75:59:c1:ec:27:62:
44:02:12:0e:a7:38:8a:6c:0e:49:13:10:55:86:3f:
92:24:61:6f:7d:67:6d:34:ee:33:01:d4:04:3f:84:
52:4d:be:89:72:6d:b1:4d:de:b8:78:d9:49:83:a9:
27:a8:aa:b3:17:52:05:1a:0b:4c:d9:19:3b:77:7c:
5a:c3:83:02:df:7d:62:f4:89:2d:df:c3:f3:17:64:
1d:17:35:70:52:80:b0:0e:47:d8:ec:19:e1:16:eb:
ff:2f:2a:26:cf:7f:d3:5a:d5:e8:7d:c3:cc:01:5d:
42:64:a6:9a:41:71:17:9b:06:4f:9d:b3:d4:1a:8d:
09:72:2a:87:39:2e:4e:5c:0c:c0:d5:69:59:83:2c:
b0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0A:5B:0C:15:E4:BA:3C:B0:C1:AA:B6:EF:46:DE:7B:35:D5:1B:06
X509v3 Authority Key Identifier:
keyid:99:72:14:8C:73:62:C2:C9:39:9B:B3:AF:74:15:92:C4:25:16:C5:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXIUjHNiwsk5m7OvdBWSxCUWxUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/587b7b-071c-430b-9eb2-6ec62690b19b/1/mXIUjHNiwsk5m7OvdBWSxCUWxUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/587b7b-071c-430b-9eb2-6ec62690b19b/1/mXIUjHNiwsk5m7OvdBWSxCUWxUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:c5:18:a1:06:0a:60:d1:24:b2:c4:7a:14:7e:98:54:88:04:
73:96:68:df:5b:b4:39:26:e5:a3:28:a2:f8:10:c2:1b:c1:86:
c8:77:54:d2:3d:6a:f7:60:bc:2c:12:01:3d:42:40:2d:39:73:
5d:db:be:e4:39:cc:b8:99:7f:40:55:17:fe:88:61:73:e2:14:
a8:82:d3:6e:38:fa:77:1d:c3:c2:e2:59:60:0c:aa:b6:f0:93:
0c:83:41:6f:57:78:28:ba:7b:05:3b:a9:27:4b:75:4f:57:2e:
07:5b:9e:a3:51:51:e6:f6:5f:17:ab:8c:87:88:2d:3a:cb:c7:
0a:57:61:3f:75:3a:c8:32:4e:47:fd:7e:e8:c9:d3:1e:a6:75:
cf:46:3e:bd:86:c6:bd:6d:f7:bf:75:ff:ce:77:36:28:2e:22:
ba:7e:01:aa:01:cd:68:05:10:15:d4:66:a5:66:98:8d:9c:43:
78:42:aa:e4:41:c4:21:97:2f:a1:98:c5:b6:21:70:13:13:b5:
ef:a0:c2:f0:02:7e:cf:ac:6a:e3:8b:55:31:c3:51:96:0a:8f:
cd:66:7a:85:c7:a5:e6:bb:d2:49:a4:e7:bb:92:74:57:78:f0:
51:e1:5f:d8:26:61:0e:f2:cf:f5:60:bb:ff:42:57:67:eb:52:
56:80:2d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:47:51 2025 by rpki-client