Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft
File: MobxwgXuMYfirBpKW8BJ80Sf9mc.mft (raw, json)
Hash identifier: Wwaqs/WYMlMsITyLzYDK/nvDQIj5RDr2Kb7BXRd9tOs=
Subject key identifier: BA:7A:77:2C:24:C4:14:7D:D4:2F:4D:50:AC:69:D6:5F:26:19:30:60
Authority key identifier: 32:86:F1:C2:05:EE:31:87:E2:AC:1A:4A:5B:C0:49:F3:44:9F:F6:67
Certificate issuer: /CN=3286f1c205ee3187e2ac1a4a5bc049f3449ff667
Certificate serial: 01984C301CD3678A17966C3E92C714DE4953
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MobxwgXuMYfirBpKW8BJ80Sf9mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft
Manifest number: 12D3
Signing time: Sun 27 Jul 2025 14:01:18 +0000
Manifest this update: Sun 27 Jul 2025 14:01:18 +0000
Manifest next update: Mon 28 Jul 2025 14:01:18 +0000
Files and hashes: 1: MobxwgXuMYfirBpKW8BJ80Sf9mc.crl (hash: hZVv9bnDX9tTuKtYJ9m0MnSqjfv5ehC/qp1FZLO08+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MobxwgXuMYfirBpKW8BJ80Sf9mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:30:1c:d3:67:8a:17:96:6c:3e:92:c7:14:de:49:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3286f1c205ee3187e2ac1a4a5bc049f3449ff667
Validity
Not Before: Jul 27 14:01:18 2025 GMT
Not After : Jul 28 14:01:18 2025 GMT
Subject: CN=ba7a772c24c4147dd42f4d50ac69d65f26193060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ba:10:b9:7c:8c:17:01:97:96:44:c0:5c:7a:
91:d7:b6:4d:df:7b:ff:83:e6:03:33:bb:e9:99:28:
e9:b8:c1:60:35:81:28:69:da:ad:ca:b4:fa:d5:fd:
54:2c:f7:ee:96:3d:63:40:79:c7:37:44:1b:4f:ed:
c6:00:60:46:ff:b1:ef:fe:7c:17:53:a3:74:15:12:
51:7f:3e:e9:85:4a:26:84:47:1d:c6:aa:f5:df:a6:
b5:cd:de:3f:5a:00:57:c6:b3:f6:18:01:64:5c:84:
1c:56:41:95:ea:e3:bc:6e:5e:c0:11:27:ff:3f:90:
a3:01:fc:9c:28:15:af:26:7b:0d:d5:71:0f:89:2b:
9b:00:b1:5e:d4:d6:ba:26:d7:9a:12:8b:c5:04:b9:
44:d0:1a:4b:dc:c4:71:cf:46:b8:05:16:9f:29:d3:
50:4d:6c:53:ec:cc:e8:5a:86:0d:d7:9d:72:b6:6c:
2a:58:24:6e:80:4f:cd:95:91:6b:d8:c2:66:a4:da:
5c:d7:f5:43:aa:d6:78:b5:bc:b3:85:e1:c1:38:e3:
bc:a9:3e:61:44:19:9c:ff:47:ec:cc:da:13:75:f0:
c2:6a:e8:2d:6e:7e:d9:26:fd:1b:e1:1b:20:6f:e6:
4f:70:f2:55:7f:e5:9a:67:2f:80:a0:23:8a:43:09:
ea:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7A:77:2C:24:C4:14:7D:D4:2F:4D:50:AC:69:D6:5F:26:19:30:60
X509v3 Authority Key Identifier:
keyid:32:86:F1:C2:05:EE:31:87:E2:AC:1A:4A:5B:C0:49:F3:44:9F:F6:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MobxwgXuMYfirBpKW8BJ80Sf9mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:95:85:7a:e1:3f:95:1a:18:1b:df:97:83:d1:62:c0:4f:6e:
1b:94:74:6d:78:ab:ae:68:09:81:5c:f6:ae:c9:0c:98:b7:d2:
bf:39:9b:b1:14:4b:f3:70:50:98:22:b3:aa:77:8d:6a:41:02:
83:c9:db:29:9c:1f:e4:94:36:a1:35:22:23:ab:24:22:0f:b5:
dd:e0:8a:c3:b4:2b:a2:3c:5d:d0:6e:3c:9e:01:76:44:44:f4:
a9:10:70:87:74:ff:bb:46:85:f5:90:92:e3:c3:16:12:a1:c7:
da:1b:5a:f8:63:fc:55:8b:46:ec:2f:00:12:b6:5b:6d:50:85:
23:f7:e3:76:99:76:63:87:77:2e:c2:23:82:df:40:9c:9d:1a:
26:06:d0:9f:d0:98:81:13:55:69:c7:e0:1b:7a:65:f2:a1:c3:
a8:33:12:38:aa:06:55:d0:aa:00:61:13:82:ab:30:66:8d:8b:
6b:fe:e8:62:e3:51:e8:ed:1b:c3:ef:60:0c:74:12:84:19:97:
1e:72:62:a3:01:7d:62:7e:e0:f7:a4:8f:38:4d:5c:07:4a:77:
04:8f:c4:d9:d1:af:f6:93:47:2e:51:69:c4:ce:83:86:95:60:
b5:c9:3d:b3:3c:08:a1:00:fa:32:83:ab:04:08:27:68:ac:ec:
e8:c8:59:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:54:28 2025 by rpki-client