Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.mft
File: mRXw1qlhquvGsLUInaApObMQpRw.mft (raw, json)
Hash identifier: uqz6Wusy16kFnxHgThJhqjFM3oBiPe3gOeidccYzzb8=
Subject key identifier: 42:E1:B6:D2:ED:2A:F0:09:1E:CE:A3:E6:0D:19:CA:31:25:08:B3:43
Authority key identifier: 99:15:F0:D6:A9:61:AA:EB:C6:B0:B5:08:9D:A0:29:39:B3:10:A5:1C
Certificate issuer: /CN=9915f0d6a961aaebc6b0b5089da02939b310a51c
Certificate serial: 019849D322560A5762505144916513F0FEEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRXw1qlhquvGsLUInaApObMQpRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.mft
Manifest number: 1593
Signing time: Sun 27 Jul 2025 03:00:30 +0000
Manifest this update: Sun 27 Jul 2025 03:00:30 +0000
Manifest next update: Mon 28 Jul 2025 03:00:30 +0000
Files and hashes: 1: 3EoDXcpFiHwKQL3NphGsn39OCs8.roa (hash: ComC0hDOhJ69SVTLkm+pHNkS7oN++Uq45Amm8PB7U5o=)
2: mRXw1qlhquvGsLUInaApObMQpRw.crl (hash: 57GHF0ue9Cah2iRpKbPfSHyYq15OB9HVF+B8Z7iubAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mRXw1qlhquvGsLUInaApObMQpRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:22:56:0a:57:62:50:51:44:91:65:13:f0:fe:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9915f0d6a961aaebc6b0b5089da02939b310a51c
Validity
Not Before: Jul 27 03:00:30 2025 GMT
Not After : Jul 28 03:00:30 2025 GMT
Subject: CN=42e1b6d2ed2af0091ecea3e60d19ca312508b343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:45:d9:e9:19:cf:65:88:ae:31:61:06:bf:a4:
19:0f:51:f9:6c:66:d1:47:7e:96:74:0f:63:d5:67:
d6:5a:ad:59:92:27:9b:fe:58:86:00:29:3e:88:19:
4e:34:b9:08:a4:9b:a8:53:ef:c1:00:37:6d:fc:76:
41:d4:e0:1a:c5:28:a4:23:bf:a7:13:1e:2f:06:5f:
3d:bd:ac:29:6c:ce:a4:c6:d6:a4:0f:e2:ae:6e:26:
1a:79:42:88:44:20:ee:28:ba:62:00:96:0e:d0:a4:
57:b2:8c:68:21:0b:3f:ac:9b:15:14:ad:d4:9c:4f:
fd:aa:2f:41:fb:2a:89:48:64:ac:87:f4:dc:fa:17:
12:bf:1d:a0:3e:a8:76:2f:90:b5:71:23:2a:ff:0f:
16:1d:c5:e2:f3:5b:5f:7c:bc:87:0a:f8:54:7b:3c:
b1:55:6b:de:03:39:59:24:6d:d0:f9:4c:b7:3c:d0:
29:d0:4f:7a:7e:e4:47:0c:30:3b:73:65:be:4c:6e:
73:44:8c:dc:92:3e:1d:2c:fa:d9:15:65:48:62:62:
82:42:f6:39:a3:de:22:27:86:10:8d:55:8a:e6:43:
65:c8:65:01:a5:ca:91:b0:6b:a2:dc:57:f9:3c:c7:
5b:87:4a:f2:5e:54:8a:d5:0f:87:53:01:ce:90:8b:
7e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E1:B6:D2:ED:2A:F0:09:1E:CE:A3:E6:0D:19:CA:31:25:08:B3:43
X509v3 Authority Key Identifier:
keyid:99:15:F0:D6:A9:61:AA:EB:C6:B0:B5:08:9D:A0:29:39:B3:10:A5:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRXw1qlhquvGsLUInaApObMQpRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:04:34:be:21:85:56:60:a5:54:3e:d2:1d:a6:55:ed:d8:db:
9e:d0:a7:33:5f:a6:d3:5e:61:45:ff:a1:ec:de:14:c3:eb:73:
31:22:fe:9a:14:b5:0d:cb:b7:74:21:60:b0:32:62:41:94:32:
75:e9:6f:a7:dd:7f:14:4c:a2:2c:fd:bb:c7:61:37:32:81:15:
b6:4c:af:00:16:51:8b:33:66:ad:a1:f1:67:00:d5:85:f1:c9:
2f:5e:80:6c:55:c3:8b:a5:3e:16:a8:bd:4f:98:6e:2d:13:27:
39:88:1b:c7:f4:09:be:5d:d0:4f:e4:e6:4d:e4:02:d8:25:c0:
0d:7b:fb:24:9a:30:3f:72:5f:01:28:21:36:74:fb:87:f1:9f:
1f:77:f0:ac:08:cf:fc:d2:a3:e9:6a:1d:c2:84:85:f4:8a:66:
64:3e:20:00:08:c8:cc:0b:c8:6d:d9:f3:ab:8d:83:70:3b:d4:
d0:9e:f4:c9:24:11:27:de:ec:8c:4d:d6:9c:10:d1:5a:90:f6:
6c:d2:66:83:f8:b1:33:10:86:44:05:57:ba:0e:7d:cd:96:f7:
cd:9f:8c:2b:29:17:e8:e3:3c:12:7c:38:d6:80:86:57:d2:45:
37:04:35:58:c3:68:03:dd:db:e7:01:f1:ba:ed:39:dd:fd:66:
76:57:be:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:13:02 2025 by rpki-client