Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft
File: MxpRr9TLZoLCMN7WQGWMETxWL9I.mft (raw, json)
Hash identifier: 8Qj5Wjll9JJyqk3dw4ZwfVtf76Tzbk/l3IymXTQ5H5w=
Subject key identifier: B0:5A:41:68:DB:EA:75:41:E0:3C:90:FC:7E:50:6D:D4:38:D1:0E:5A
Authority key identifier: 33:1A:51:AF:D4:CB:66:82:C2:30:DE:D6:40:65:8C:11:3C:56:2F:D2
Certificate issuer: /CN=331a51afd4cb6682c230ded640658c113c562fd2
Certificate serial: 01987DC0A75F74708ABC4C273B5B1D04EDA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MxpRr9TLZoLCMN7WQGWMETxWL9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft
Manifest number: 086A
Signing time: Wed 06 Aug 2025 05:00:34 +0000
Manifest this update: Wed 06 Aug 2025 05:00:34 +0000
Manifest next update: Thu 07 Aug 2025 05:00:34 +0000
Files and hashes: 1: MxpRr9TLZoLCMN7WQGWMETxWL9I.crl (hash: q5ew9hnUWsTVux3Ck5nPDXpmLRa7laqyWIkaDENlHlw=)
2: TS9TQNQnmKCUyfNW3iHSrKN4kHU.roa (hash: FKmub+udVUMJc6SCu1H3/G3fAnw8GwGXkDsFmXaZ8+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/MxpRr9TLZoLCMN7WQGWMETxWL9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:c0:a7:5f:74:70:8a:bc:4c:27:3b:5b:1d:04:ed:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331a51afd4cb6682c230ded640658c113c562fd2
Validity
Not Before: Aug 6 05:00:34 2025 GMT
Not After : Aug 7 05:00:34 2025 GMT
Subject: CN=b05a4168dbea7541e03c90fc7e506dd438d10e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:95:53:55:43:3d:9c:34:9e:9c:a3:8e:d6:48:
a0:44:26:07:17:9a:84:71:d1:86:88:85:e6:46:a3:
bb:80:3b:36:ad:49:0a:11:33:d7:93:17:29:44:06:
36:6e:16:5a:34:ca:12:9c:38:75:3e:c4:06:66:eb:
11:54:c4:00:28:70:18:0f:9c:a6:bc:6a:9e:ea:3b:
6b:8f:ab:d2:88:f7:19:f7:ca:8a:32:d3:4c:bf:04:
b6:cb:13:0e:b1:d0:95:bc:8b:a4:88:62:ef:20:1c:
66:8e:ec:f6:3a:ed:a6:11:a9:c0:64:95:9a:95:af:
19:c8:2e:73:99:41:88:6d:89:fd:65:a1:2e:e2:f1:
84:f4:43:82:49:a9:b6:ec:d7:2e:46:0b:65:5e:15:
66:32:fe:3f:1a:1a:ec:51:4c:7f:d8:42:7d:cd:0a:
de:76:62:8b:cd:48:47:15:c6:4d:f5:6d:5c:fa:15:
f9:9e:ec:dc:e1:be:ec:65:96:9b:c2:23:e0:d6:a4:
1d:b5:7d:e3:2a:68:ab:02:ff:3f:49:71:2d:96:48:
da:de:13:fa:6a:f6:61:d6:a6:a6:5d:27:06:22:2a:
4f:9d:0f:5e:6c:26:3a:21:4b:01:45:46:ea:df:e9:
e1:22:65:39:e0:26:ba:19:53:83:ed:16:d2:6a:e0:
53:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:5A:41:68:DB:EA:75:41:E0:3C:90:FC:7E:50:6D:D4:38:D1:0E:5A
X509v3 Authority Key Identifier:
keyid:33:1A:51:AF:D4:CB:66:82:C2:30:DE:D6:40:65:8C:11:3C:56:2F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxpRr9TLZoLCMN7WQGWMETxWL9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:12:31:4a:65:7d:4a:9d:48:d9:0c:e8:94:ff:31:f4:13:1e:
0a:16:bf:bd:86:f6:4b:f9:06:43:71:2a:d7:c8:7b:2d:eb:03:
75:95:e1:9d:f8:28:63:ba:c4:9c:31:07:36:04:3e:ca:fc:0b:
a4:b2:de:19:d1:eb:1f:0a:52:5b:02:c0:fb:1b:84:11:f8:3c:
40:af:79:00:3a:97:27:84:eb:a8:11:97:5c:70:ac:88:56:90:
9b:86:32:94:a3:95:59:32:29:92:0a:f4:9f:0e:1e:da:2e:a9:
5f:ca:e9:ab:0b:0a:5a:db:ca:a2:69:7c:96:f8:0f:9d:59:65:
26:19:95:4a:cd:61:4e:66:c2:d2:2b:9b:9f:69:d6:a5:7e:af:
14:a4:4b:ad:67:90:e4:b2:1a:70:9d:97:c7:fc:01:95:0b:c0:
a6:30:1e:0a:fb:64:48:39:9f:81:34:cb:71:2c:e4:a9:35:81:
dd:2b:89:0f:1c:a2:40:64:57:4d:d5:81:88:ed:c9:86:c2:ec:
6e:bc:cf:7c:3d:48:f0:f8:a0:e6:bf:1f:b7:e8:88:93:7c:e4:
c0:48:71:f3:4e:cb:2c:3a:05:eb:a2:83:64:6f:e7:0f:ab:d8:
9d:30:f7:33:74:6a:39:9c:f5:c0:d1:a9:aa:a5:4b:84:4b:00:
e1:e2:a2:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:48:10 2025 by rpki-client