Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
File: MXqSdCYInzuMUACDIhp5ip0uhGY.mft (raw, json)
Hash identifier: WbKLFrb4lYmxsusrC5eSjPwA3gEAxOo59FVnRVqzw5A=
Subject key identifier: 21:B3:0A:44:DE:DC:BD:4A:8B:65:ED:D0:D2:DF:20:35:34:B0:DD:0C
Authority key identifier: 31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66
Certificate issuer: /CN=317a927426089f3b8c500083221a798a9d2e8466
Certificate serial: 01987A1BD8E14DAF551BE2E8B1E931889AE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
Manifest number: 1344
Signing time: Tue 05 Aug 2025 12:01:41 +0000
Manifest this update: Tue 05 Aug 2025 12:01:41 +0000
Manifest next update: Wed 06 Aug 2025 12:01:41 +0000
Files and hashes: 1: 9eN9v_hmY4BXhqwgwPbmdRtwaxg.roa (hash: /I1wfagsAtpLvGcRUkgr5rbaITh/yY12WpQcMZ73aQ0=)
2: MXqSdCYInzuMUACDIhp5ip0uhGY.crl (hash: RnMZGxTsEMlPj3SZHAfmPOL2EWui0Q72/bVxTkq6R+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 12:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:1b:d8:e1:4d:af:55:1b:e2:e8:b1:e9:31:88:9a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317a927426089f3b8c500083221a798a9d2e8466
Validity
Not Before: Aug 5 12:01:41 2025 GMT
Not After : Aug 6 12:01:41 2025 GMT
Subject: CN=21b30a44dedcbd4a8b65edd0d2df203534b0dd0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:88:3c:e9:a9:99:cd:e6:15:7a:3d:ee:f5:17:
9c:a2:be:84:81:58:78:ee:ce:eb:9c:99:16:90:c2:
f9:8d:50:00:14:74:b9:7a:52:40:f7:e9:88:8e:12:
ef:a5:2a:b6:b4:02:d4:40:f9:18:31:ae:d2:85:ca:
24:c0:26:e2:26:4f:13:69:b5:54:71:76:1f:45:1e:
be:b4:7e:d7:86:0a:39:c9:1f:a1:d8:11:2d:a0:ab:
05:a0:e0:17:5d:bc:a3:dc:00:31:87:88:b3:d1:69:
b5:33:f2:8a:27:0a:ad:04:3f:5b:7a:6b:ba:6c:52:
5c:d4:aa:db:6b:ed:4b:43:ec:e1:ee:f5:e6:55:56:
d5:53:5a:a9:1c:11:1c:f5:7e:56:df:bc:dd:ef:4d:
a8:e4:b3:bb:7b:fd:6f:ce:2d:b5:02:93:ef:e2:c1:
c2:d9:45:5e:c9:e2:39:27:3c:fc:11:a3:0f:75:8b:
84:d6:e1:d9:47:df:e7:a4:c9:e8:67:29:6a:02:ef:
db:cd:64:15:f6:0f:8d:46:b5:3b:17:1f:6b:ab:f0:
16:fc:53:ba:7b:d0:ae:b7:07:d3:db:6a:fe:ab:01:
f2:27:fb:33:bb:99:87:1a:e1:50:78:da:b1:b6:62:
8a:dc:de:94:b2:51:a2:78:9f:34:2c:92:0e:64:26:
06:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B3:0A:44:DE:DC:BD:4A:8B:65:ED:D0:D2:DF:20:35:34:B0:DD:0C
X509v3 Authority Key Identifier:
keyid:31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:55:03:6d:44:51:32:a1:1c:64:8e:a6:b1:6a:3c:77:3c:8b:
55:8a:08:fc:ee:c0:01:2c:80:71:da:1f:75:72:bb:34:91:4d:
9d:d8:10:0d:21:df:7d:b7:57:9d:b8:ed:0e:42:65:ef:09:b9:
bf:b1:a4:b3:ea:f8:e2:8a:3b:4b:4d:0e:08:4a:41:5c:fd:93:
5d:4e:d4:f3:79:fb:b1:5f:eb:fc:56:41:9b:46:d6:22:3c:e3:
14:13:d9:77:28:a7:16:94:27:78:2c:13:bf:98:3f:37:09:6b:
1b:7b:43:8b:73:87:d6:3a:64:28:5d:4a:e6:54:97:a8:85:e7:
62:ea:4b:d0:0b:4f:18:48:7a:fd:d1:38:db:96:d1:98:45:d5:
ba:4a:71:e9:a8:19:72:b4:ed:fb:0e:18:b3:81:eb:41:b9:17:
d3:a7:ba:c1:68:72:f7:21:4b:d6:44:15:53:7e:19:d8:cd:b6:
f5:73:44:22:ba:c1:e1:67:b2:ad:e7:88:bf:5a:fd:1a:13:c8:
db:ef:77:b9:be:ac:f8:16:33:3c:6c:47:fa:2c:eb:b6:c6:07:
f3:c7:2a:22:d3:bc:40:4a:1c:e2:8c:5e:b7:af:90:3a:07:63:
fe:92:8b:b5:7a:84:20:ee:15:df:5c:e4:d9:2b:fa:71:7c:ce:
8a:44:7c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:23:43 2025 by rpki-client