Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft
File: mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft (raw, json)
Hash identifier: gwZflDYsX6OMTQGWloc79NS/TO2fiHF4tP/RSz0PZVY=
Subject key identifier: C5:2A:58:20:CF:E7:15:17:00:F0:0C:FC:89:ED:E6:62:6C:12:76:09
Authority key identifier: 99:55:C5:A7:13:7E:B5:D4:7E:A2:4E:17:D2:7F:A9:2D:0B:42:FB:D8
Certificate issuer: /CN=9955c5a7137eb5d47ea24e17d27fa92d0b42fbd8
Certificate serial: 019873E23088CB44E4E81CECC1156DE2234B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mVXFpxN-tdR-ok4X0n-pLQtC-9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft
Manifest number: 14FA
Signing time: Mon 04 Aug 2025 07:01:00 +0000
Manifest this update: Mon 04 Aug 2025 07:01:00 +0000
Manifest next update: Tue 05 Aug 2025 07:01:00 +0000
Files and hashes: 1: 2z0NeYZe1xNl9FiaXMK1zDvmewM.roa (hash: cOILWkUhsnduTiBD7sHiLuG2BYfCl/U6Tpdfh+0XXP8=)
2: 5Sxq5_88aKl6Q1AixLmSpdxssj4.roa (hash: 930p4kPdeb7NPu1eD23W3ram0O2yZZYGtkILA0nswPo=)
3: BnHU_9oB_ewnVOgPSPpU2bWe8Zk.roa (hash: go8wZXjflDuAlY6EuMTLQuty8jZX31nqsRbiTUQs4zs=)
4: mVXFpxN-tdR-ok4X0n-pLQtC-9g.crl (hash: HRTALus2WWRR3TwTny0a9ywoQwt0NG9fzJPrmzz9oNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/mVXFpxN-tdR-ok4X0n-pLQtC-9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:30:88:cb:44:e4:e8:1c:ec:c1:15:6d:e2:23:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9955c5a7137eb5d47ea24e17d27fa92d0b42fbd8
Validity
Not Before: Aug 4 07:01:00 2025 GMT
Not After : Aug 5 07:01:00 2025 GMT
Subject: CN=c52a5820cfe7151700f00cfc89ede6626c127609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:aa:7e:48:a7:bd:67:cf:0c:a7:ed:0b:f7:71:
ce:8b:48:b0:69:38:1d:96:c0:81:40:1d:4c:05:82:
b9:f6:c9:73:63:48:7a:83:82:27:cf:3d:80:b4:e3:
b1:b8:78:68:13:fc:ad:87:e2:a2:55:17:b6:bf:e4:
8e:ce:12:2e:a8:ea:20:83:e7:35:dd:52:b0:af:98:
c1:67:fb:c1:be:da:b6:61:d4:15:32:48:23:e3:fc:
41:ee:aa:4e:c6:f3:56:19:cb:f8:29:85:21:fa:c2:
3f:15:ec:24:a5:07:17:7f:42:ed:89:90:5a:63:bd:
b9:f0:e3:82:d9:61:3d:29:b9:29:7b:84:c0:35:87:
c5:fb:ad:c9:b7:5c:d7:1a:25:a2:49:68:3f:ef:54:
cd:83:f5:80:5c:e5:04:6a:09:fe:86:25:e9:35:08:
64:f2:e3:2c:4d:c4:17:67:f3:55:f9:17:b7:f8:05:
a5:f1:e1:ee:4b:56:01:c5:16:61:1e:35:87:5b:22:
fb:63:d7:2e:a3:eb:69:46:16:dd:a9:60:8d:24:4f:
41:bf:ad:cd:44:58:3b:f4:d5:61:b7:8f:2a:5b:57:
f5:56:b1:6e:68:8f:de:e6:5b:6f:ee:57:9e:18:7d:
6b:7c:64:a4:48:ba:18:0c:e6:76:55:c2:83:b0:99:
9d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:2A:58:20:CF:E7:15:17:00:F0:0C:FC:89:ED:E6:62:6C:12:76:09
X509v3 Authority Key Identifier:
keyid:99:55:C5:A7:13:7E:B5:D4:7E:A2:4E:17:D2:7F:A9:2D:0B:42:FB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mVXFpxN-tdR-ok4X0n-pLQtC-9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:c4:c3:44:66:a0:7f:f7:53:6e:d8:30:8d:9d:25:73:64:a8:
2c:0a:19:78:50:78:74:aa:65:b5:44:f5:61:2f:85:25:2f:a1:
67:87:b4:8c:70:5e:c4:0d:52:26:2f:a5:d6:32:d8:23:33:07:
c2:05:91:15:9b:f9:80:72:3b:e9:31:89:71:fc:cf:21:88:46:
83:fa:f7:dd:a1:11:32:e9:36:b7:0a:96:a0:95:7f:99:c0:a1:
eb:84:f7:ed:21:32:d5:e2:5c:f6:c1:56:62:e9:1a:41:be:ea:
48:ad:d0:07:29:5a:aa:29:69:6b:bd:da:c9:6f:39:c2:df:1b:
68:fc:bb:2b:36:20:a4:10:21:9f:c7:73:b5:43:d3:c5:5f:03:
82:9d:f2:cb:f8:34:4b:bb:7f:53:66:a6:c3:9e:37:fc:f0:7f:
a8:cd:d3:e4:4f:64:22:96:c2:8e:d1:f4:d1:25:36:32:6e:f9:
38:96:ac:91:26:21:b5:95:31:c8:d3:30:73:a7:4f:56:d9:e7:
00:0a:7e:d0:47:d8:e8:23:b2:b4:ae:25:3e:1f:8d:60:95:ff:
97:f2:63:60:dd:69:18:6b:e5:2e:ea:23:be:f1:69:68:02:ac:
b9:6a:38:db:ac:38:03:2e:74:b9:9d:74:dc:23:b8:f1:5b:1b:
94:71:fa:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:02:41 2025 by rpki-client