
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
File: MXuBR1A-oZ9YHKANKNvuXljLj0g.mft (raw, json)
Hash identifier: HQqMunYR4szgQ42VJ4OzP+gupqSugHvZxxkbiXO8su4=
Subject key identifier: 02:AB:66:1E:BB:5E:A5:7D:E8:62:0A:32:46:E7:DE:D7:64:62:71:4E
Authority key identifier: 31:7B:81:47:50:3E:A1:9F:58:1C:A0:0D:28:DB:EE:5E:58:CB:8F:48
Certificate issuer: /CN=317b8147503ea19f581ca00d28dbee5e58cb8f48
Certificate serial: 019848F731AA58EEAB6B6961330E652C4C8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 23:00:16 +0000
Manifest this update: Sat 26 Jul 2025 23:00:16 +0000
Manifest next update: Sun 27 Jul 2025 23:00:16 +0000
Files and hashes: 1: MXuBR1A-oZ9YHKANKNvuXljLj0g.crl (hash: MOennjFtLPvad+w6fwuppae2+Q6AjmYL8CwF370wngo=)
2: Xvq5E9FjSgetaXURRKNVucLHpJA.roa (hash: Q0VYCtfy8botfioT4TVhD+jb4Ht709fLdZsnE/9HQwY=)
3: ZthEX-bem71wxx1bLgVPG5w9ZTc.roa (hash: T1Z1de8P32daOdZ6/2GmlJdKCTcAVlmu6uwlpR9ZYC8=)
4: cpm1MJFdWjEQeCJ1LBHfzw5iKXY.roa (hash: gbGURzXBFbe9SdreBkh+gl3ChVchhLD0ie8p4XE7DdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 23:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:31:aa:58:ee:ab:6b:69:61:33:0e:65:2c:4c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317b8147503ea19f581ca00d28dbee5e58cb8f48
Validity
Not Before: Jul 26 23:00:16 2025 GMT
Not After : Jul 27 23:00:16 2025 GMT
Subject: CN=02ab661ebb5ea57de8620a3246e7ded76462714e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c4:74:55:10:17:63:af:b6:c3:fb:fa:a2:79:
23:99:08:71:a4:a8:eb:e2:07:db:5a:85:37:99:13:
90:cf:f0:27:23:22:23:ca:f2:c9:7b:22:78:cd:07:
81:8f:56:cf:ea:96:9c:73:72:4a:74:7e:bb:73:1a:
8d:de:c9:79:30:27:d4:fc:c0:7c:b2:e9:f0:45:0b:
95:f1:17:6a:0e:44:71:78:69:64:56:67:64:07:f8:
ba:2d:32:0b:6e:d9:9e:4a:e8:87:39:9b:0e:34:ce:
7d:de:c0:76:94:76:12:bc:dc:9c:36:29:0e:9a:d6:
be:3e:0c:42:f4:c9:54:b2:6c:ad:2b:29:67:a5:6c:
58:d1:97:23:fa:3e:0c:73:4c:52:34:6c:df:0e:4d:
26:4b:3c:c5:c9:84:78:be:0b:52:4e:aa:ad:2b:2c:
c3:91:6d:3e:cb:00:61:84:87:9a:df:e7:a4:3f:a8:
04:c3:44:fc:cb:aa:a1:40:a3:b7:d9:f8:74:44:f5:
fa:0e:6b:5a:ac:5c:93:ab:96:f4:dc:02:eb:67:ba:
b6:81:61:12:73:c3:02:97:d2:91:72:b1:4b:0d:a0:
53:e1:a1:16:e3:56:53:b6:16:51:b0:14:71:ae:23:
ca:11:d0:e1:95:b5:54:00:79:48:7f:51:76:13:d8:
6f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AB:66:1E:BB:5E:A5:7D:E8:62:0A:32:46:E7:DE:D7:64:62:71:4E
X509v3 Authority Key Identifier:
keyid:31:7B:81:47:50:3E:A1:9F:58:1C:A0:0D:28:DB:EE:5E:58:CB:8F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:ec:48:c8:e7:b7:41:7e:cb:32:6c:ed:f3:83:e0:6d:b5:1d:
84:95:11:87:bb:12:f0:5b:5b:95:9a:b9:90:f7:ac:d3:99:2b:
44:d5:77:b9:a7:f1:03:6d:be:c1:07:b1:c9:e6:14:49:bc:95:
c7:5f:8a:48:e5:64:00:bf:38:35:eb:c9:15:1f:7a:88:a6:42:
2e:8d:f5:5a:3b:7c:07:eb:21:01:33:5a:f3:57:93:28:b3:7c:
ba:eb:0d:0e:ed:3e:96:e4:de:e9:6a:dc:49:ec:7c:97:fc:96:
b5:41:0d:bf:af:75:b8:bd:ee:d9:34:f4:98:17:30:02:84:3f:
b8:cc:72:0e:f6:d6:70:45:ad:b6:ae:08:22:4f:88:cf:0a:ae:
1a:ff:46:07:a3:75:f6:30:7e:98:d4:ab:cb:e5:5c:f3:f8:29:
0d:d1:dd:c4:0f:58:8e:78:e5:ee:8c:d1:16:26:34:4c:35:57:
bc:84:66:aa:ca:d1:79:81:6f:11:96:3f:27:ce:05:e0:f3:76:
23:b0:21:56:07:63:17:66:b8:fb:4c:80:db:d6:b9:9c:c5:86:
8d:e0:0a:6c:bc:94:05:8b:a3:0d:66:90:bb:50:5e:a3:49:95:
f5:74:3b:1b:8f:7d:89:f6:db:79:53:b7:d4:2b:05:8c:2a:8a:
bb:37:df:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:41:10 2025 by rpki-client