Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/mXwn0VtG2xhLwCswPIa0fEScG1Q.mft
File: mXwn0VtG2xhLwCswPIa0fEScG1Q.mft (raw, json)
Hash identifier: yCjV54o9Bcx7gGsVpxFwPqkWadOCwk74SKqcUUG79hk=
Subject key identifier: DC:27:73:9E:15:FE:E9:34:49:C0:7A:BD:54:6A:10:B3:92:30:E5:C1
Authority key identifier: 99:7C:27:D1:5B:46:DB:18:4B:C0:2B:30:3C:86:B4:7C:44:9C:1B:54
Certificate issuer: /CN=997c27d15b46db184bc02b303c86b47c449c1b54
Certificate serial: 0198952478BA11CAAA4FF96CE7399CBE393C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXwn0VtG2xhLwCswPIa0fEScG1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/mXwn0VtG2xhLwCswPIa0fEScG1Q.mft
Manifest number: 0EED
Signing time: Sun 10 Aug 2025 18:00:51 +0000
Manifest this update: Sun 10 Aug 2025 18:00:51 +0000
Manifest next update: Mon 11 Aug 2025 18:00:51 +0000
Files and hashes: 1: JpZlGPUSnNPcPAQ7HrfbEiiCY90.roa (hash: sj/ySyRWLvZHGTxRHODxTY1XK4NRx1uXT8wwjiiWvG0=)
2: mXwn0VtG2xhLwCswPIa0fEScG1Q.crl (hash: iScFyAztTaYb2qypjbUeJvP/3sa0IUhVNeyR8MykS0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/mXwn0VtG2xhLwCswPIa0fEScG1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/mXwn0VtG2xhLwCswPIa0fEScG1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/mXwn0VtG2xhLwCswPIa0fEScG1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:24:78:ba:11:ca:aa:4f:f9:6c:e7:39:9c:be:39:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=997c27d15b46db184bc02b303c86b47c449c1b54
Validity
Not Before: Aug 10 18:00:51 2025 GMT
Not After : Aug 11 18:00:51 2025 GMT
Subject: CN=dc27739e15fee93449c07abd546a10b39230e5c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6b:7b:9b:e0:2a:8a:ae:f0:d7:71:40:c8:90:
c1:30:50:c4:84:8d:c4:42:1b:e8:3d:b9:50:1f:03:
69:fc:01:31:fc:9a:df:03:08:cf:f3:48:5e:a0:c7:
ee:99:83:21:ad:64:80:6a:77:53:2e:55:69:68:20:
8e:48:b4:a8:dc:ba:d6:01:76:15:7e:d2:b5:cb:73:
16:6a:24:6c:ae:f3:99:d0:bb:8c:f2:9a:e9:4a:88:
b7:b9:f5:8b:42:32:42:46:36:3f:47:40:4e:31:74:
9a:8e:2c:a5:72:bd:11:fb:b9:c9:2d:6f:51:a3:67:
e3:78:95:ec:a9:2e:5b:91:6f:4c:34:07:dc:3a:03:
d5:07:18:85:f2:6a:d1:41:2f:b8:36:39:ba:d7:2e:
79:62:3b:e6:55:dd:14:61:60:e4:36:54:f5:28:0f:
79:ab:06:65:f6:87:16:07:ab:d3:01:b9:8b:5c:33:
4e:62:e3:40:c7:10:bc:73:ed:b0:47:6f:2a:68:39:
a7:8f:ed:c1:fb:43:fd:ea:26:c4:85:c4:f3:43:5d:
31:79:de:65:35:13:49:bf:bc:d5:66:25:3d:5f:4f:
32:ed:36:a1:e3:20:6e:b8:b9:7a:ac:72:cf:e1:1a:
23:16:36:ff:20:ba:7b:cf:d8:e9:d2:9d:02:79:48:
94:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:27:73:9E:15:FE:E9:34:49:C0:7A:BD:54:6A:10:B3:92:30:E5:C1
X509v3 Authority Key Identifier:
keyid:99:7C:27:D1:5B:46:DB:18:4B:C0:2B:30:3C:86:B4:7C:44:9C:1B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXwn0VtG2xhLwCswPIa0fEScG1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/mXwn0VtG2xhLwCswPIa0fEScG1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/mXwn0VtG2xhLwCswPIa0fEScG1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:de:0b:d1:a4:ca:a0:38:6d:79:e9:c1:21:f4:fc:cc:96:89:
bc:41:73:96:6f:53:77:cb:90:ac:06:b0:74:3e:31:ce:d3:b5:
9e:93:60:06:25:eb:c5:74:83:da:06:8a:8d:5f:ce:e2:92:9b:
80:cb:3b:02:74:2d:bf:fc:69:43:d9:04:49:f3:c4:a1:9a:35:
ab:32:64:6b:cd:78:94:e5:3c:df:46:14:76:5e:79:09:e2:a3:
f3:be:cb:b3:67:05:cc:18:3d:24:1f:b0:e5:9f:23:89:e6:30:
60:bd:86:03:85:b9:c9:19:55:b0:f9:8b:72:ee:11:6f:b1:a1:
df:55:f7:9c:47:13:71:55:23:06:2f:bc:62:a9:b5:51:2e:90:
7c:62:43:c7:88:8e:31:64:a1:18:71:13:b4:ec:bd:1c:b7:7c:
d7:ce:23:74:1e:66:b1:21:07:ea:7f:06:a2:97:cc:b4:c8:dd:
22:89:b2:96:62:31:24:41:d9:3c:57:67:f9:20:b1:a1:1c:40:
da:35:ef:51:b7:21:35:92:64:fb:b2:04:20:c1:c5:4f:79:a2:
82:91:33:1e:86:d2:b5:83:a1:d5:06:a9:dd:7b:4a:e1:6a:1a:
0c:53:20:c3:fa:d5:9f:66:4a:4b:09:dc:e1:6a:ef:24:cf:0f:
fa:23:3d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:45:00 2025 by rpki-client