Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
File: mxKd6eumtHUW8KFVc0IFq7uYt8I.mft (raw, json)
Hash identifier: IfGvR6ei1oQJA+t1I4TQNR/tIsa0p+98C69Z1HJRhD0=
Subject key identifier: E2:35:2F:DD:1A:1E:96:1E:CC:74:92:A7:86:68:B1:59:E7:52:8C:98
Authority key identifier: 9B:12:9D:E9:EB:A6:B4:75:16:F0:A1:55:73:42:05:AB:BB:98:B7:C2
Certificate issuer: /CN=9b129de9eba6b47516f0a155734205abbb98b7c2
Certificate serial: 01988A6A61902A2F9831CFAD535005C3F208
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mxKd6eumtHUW8KFVc0IFq7uYt8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
Manifest number: 1623
Signing time: Fri 08 Aug 2025 16:01:24 +0000
Manifest this update: Fri 08 Aug 2025 16:01:24 +0000
Manifest next update: Sat 09 Aug 2025 16:01:24 +0000
Files and hashes: 1: Kd7_5vl2w2YSR6oDwH4ZLSBCJg4.roa (hash: EwnV+wUuaOySMH9KRvnlNbPyo/46xzUnRyjwxeytk6w=)
2: mxKd6eumtHUW8KFVc0IFq7uYt8I.crl (hash: IFsRqRaU+KJW5Yc8bTpm4KfoKoWIWKEvgwR4nOu/Bq4=)
3: wmU9vLlEZyocLQ741PHIufr10v0.roa (hash: PwSdmNeGC1GPxHMJkBQhH54QcJIdpfP5NSJA3xMbqZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/mxKd6eumtHUW8KFVc0IFq7uYt8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 16:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:6a:61:90:2a:2f:98:31:cf:ad:53:50:05:c3:f2:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b129de9eba6b47516f0a155734205abbb98b7c2
Validity
Not Before: Aug 8 16:01:24 2025 GMT
Not After : Aug 9 16:01:24 2025 GMT
Subject: CN=e2352fdd1a1e961ecc7492a78668b159e7528c98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:2d:91:77:da:70:bb:13:04:0d:50:a7:56:1a:
2b:70:da:f4:55:7c:04:d9:40:c5:eb:dc:c7:4a:e5:
b7:f1:da:9c:f5:1d:1e:d0:0d:6c:9c:b5:d6:5a:08:
b2:7c:94:26:7e:7a:82:4e:2d:47:e6:08:ed:84:58:
22:3f:f5:68:32:3d:9c:59:86:e4:fa:0a:1e:4d:84:
62:c8:ae:36:91:f8:33:38:83:e5:c1:85:35:fc:02:
d4:9a:2f:71:57:d6:ef:08:27:05:28:76:dd:f6:f6:
c5:e5:ac:7c:c9:c8:e6:c8:ec:0d:75:0a:dc:08:90:
e2:9f:e4:0b:69:6f:5a:a7:91:e1:38:1a:40:2f:46:
d6:fd:f6:d9:fb:7f:a3:6f:5e:fe:d8:e6:02:71:38:
d7:f9:ba:c9:bb:9e:b6:d4:84:00:50:9c:71:a7:27:
c9:27:5d:eb:e8:d4:f6:26:a3:e8:fa:af:0a:90:02:
cb:76:b4:9b:b9:05:2d:8e:5d:89:77:97:2f:7e:ab:
e6:43:c6:6e:b1:ae:98:9a:81:e0:45:e9:df:96:29:
36:8e:43:12:16:f8:60:29:44:07:63:be:e4:cf:8e:
88:a0:93:bb:f1:8e:5f:5a:fd:86:e5:5e:af:ba:8c:
5c:d8:b9:d2:2c:f4:ab:0f:50:48:55:0e:6a:f7:b2:
7a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:35:2F:DD:1A:1E:96:1E:CC:74:92:A7:86:68:B1:59:E7:52:8C:98
X509v3 Authority Key Identifier:
keyid:9B:12:9D:E9:EB:A6:B4:75:16:F0:A1:55:73:42:05:AB:BB:98:B7:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxKd6eumtHUW8KFVc0IFq7uYt8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:6c:1b:88:54:44:0c:6b:74:78:1b:3b:71:89:06:91:ca:34:
ae:3f:0d:08:ac:08:12:53:5a:39:9c:9f:c8:1d:bf:60:a4:8c:
1e:54:ac:42:d6:a8:34:a4:69:6d:ab:b3:6b:9d:c2:71:43:35:
61:74:7c:f8:1e:91:2a:c6:5e:1e:a5:31:81:c8:ae:92:44:a5:
db:d0:af:dd:68:25:ac:eb:4b:60:7b:3e:c8:2d:7a:e4:cf:3f:
74:9c:c2:e2:98:2b:29:2e:8d:2d:1c:01:4c:85:fe:f2:04:dd:
a8:1e:b6:7c:5e:1b:91:48:b5:7e:1c:b2:29:88:c1:33:9d:51:
75:9c:ef:c8:8e:8c:83:57:6f:c9:c5:40:89:3c:9f:fe:06:43:
26:d4:4e:19:3b:f1:4a:82:41:54:5a:e2:19:64:8c:8f:b1:e7:
59:65:81:0d:86:e1:5b:67:b6:aa:c2:c7:17:98:59:7c:ca:9d:
53:3d:60:65:78:66:91:0f:6e:42:a5:b2:07:9a:e1:ea:2e:96:
89:83:92:c7:66:0d:69:51:bc:8d:42:e1:d3:8f:f4:78:11:de:
c0:26:6e:e1:1f:bd:4d:b1:f8:3c:37:88:cd:f7:d4:82:74:7c:
00:78:09:8e:08:88:67:cf:18:5a:0b:a7:c1:d4:81:00:6e:36:
b5:7a:11:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 00:59:41 2025 by rpki-client