Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
File: mxKd6eumtHUW8KFVc0IFq7uYt8I.mft (raw, json)
Hash identifier: n7pp+d+QhX/NgSAdE706iwcu2MgZwZ/Q7xM/uUUUpOE=
Subject key identifier: 8A:16:FB:65:03:DF:25:A0:47:C8:C1:F6:65:23:FC:89:09:AC:C3:74
Authority key identifier: 9B:12:9D:E9:EB:A6:B4:75:16:F0:A1:55:73:42:05:AB:BB:98:B7:C2
Certificate issuer: /CN=9b129de9eba6b47516f0a155734205abbb98b7c2
Certificate serial: 01984AAF20623A4C723555A5BBF55CE4FD38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mxKd6eumtHUW8KFVc0IFq7uYt8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 07:00:47 +0000
Manifest this update: Sun 27 Jul 2025 07:00:47 +0000
Manifest next update: Mon 28 Jul 2025 07:00:47 +0000
Files and hashes: 1: Kd7_5vl2w2YSR6oDwH4ZLSBCJg4.roa (hash: EwnV+wUuaOySMH9KRvnlNbPyo/46xzUnRyjwxeytk6w=)
2: mxKd6eumtHUW8KFVc0IFq7uYt8I.crl (hash: xVCXDQsLE2s7ta28L7j3OOunD6T0lbQFACdQWERsctE=)
3: wmU9vLlEZyocLQ741PHIufr10v0.roa (hash: PwSdmNeGC1GPxHMJkBQhH54QcJIdpfP5NSJA3xMbqZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/mxKd6eumtHUW8KFVc0IFq7uYt8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:20:62:3a:4c:72:35:55:a5:bb:f5:5c:e4:fd:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b129de9eba6b47516f0a155734205abbb98b7c2
Validity
Not Before: Jul 27 07:00:47 2025 GMT
Not After : Jul 28 07:00:47 2025 GMT
Subject: CN=8a16fb6503df25a047c8c1f66523fc8909acc374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:2c:ae:54:f7:8a:52:b1:0b:af:3e:5e:ee:8d:
cf:57:e7:0a:80:99:76:44:89:73:4e:6d:a6:4e:0a:
65:a4:a7:94:a1:83:96:5d:9f:9c:59:85:4b:38:e7:
7b:7d:54:d6:d0:64:c7:fc:73:36:70:dc:7d:30:74:
2c:bb:ca:15:e8:c3:55:1e:4c:59:22:31:15:72:ed:
30:07:d8:f1:05:d0:d2:8b:cb:5b:47:66:53:03:2d:
38:91:e0:5f:ab:55:57:b4:3c:3a:7b:30:6b:ab:d8:
46:68:f8:01:19:32:e1:d3:c3:6a:8f:92:3c:12:19:
b4:0f:1e:f5:11:78:9b:8d:49:7c:77:f5:4b:07:02:
a0:8d:05:f7:53:84:b5:e0:d5:a2:9d:40:5c:2c:46:
2d:36:95:18:c3:0c:56:63:31:36:64:ce:ae:20:a8:
1d:21:14:05:f3:3e:08:de:c8:38:32:1c:84:c2:8a:
9b:4f:44:a4:31:ca:07:69:ba:a2:4a:f0:42:77:97:
c0:5f:82:69:86:2a:8e:3d:38:8a:4c:7c:31:60:2e:
e0:c0:be:01:c7:10:ea:8d:c1:fc:1e:cc:15:13:f4:
71:28:19:6b:18:8a:57:d2:79:e0:83:98:e9:a9:69:
a4:83:65:01:f0:ea:7b:8d:1d:60:2a:75:fa:37:9e:
f5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:16:FB:65:03:DF:25:A0:47:C8:C1:F6:65:23:FC:89:09:AC:C3:74
X509v3 Authority Key Identifier:
keyid:9B:12:9D:E9:EB:A6:B4:75:16:F0:A1:55:73:42:05:AB:BB:98:B7:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxKd6eumtHUW8KFVc0IFq7uYt8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:e8:56:44:b5:33:e3:84:ef:75:d9:b7:13:c4:8f:82:78:99:
88:e2:9c:85:e8:8c:a0:2d:43:ff:9f:0d:0b:74:01:72:84:d4:
bc:14:9e:41:f4:01:d5:f2:7d:07:eb:ce:77:d2:f1:e5:b5:12:
38:6b:f6:57:0b:4d:f5:2b:1c:6b:05:d9:57:1e:58:c4:aa:44:
4a:f9:60:0b:d0:68:29:49:bb:52:13:8f:31:0a:b0:9f:af:a5:
86:10:86:09:f2:8f:00:af:0d:77:47:62:33:92:8f:1f:d1:44:
90:f6:69:59:74:73:bf:5d:8a:67:e6:31:47:10:bc:fa:ed:a6:
df:cc:05:80:ce:fb:81:76:1f:ed:a7:c1:e6:1b:38:fd:4f:4c:
39:24:4c:31:ec:3c:bc:4c:40:cc:2a:f5:62:c7:1c:ac:be:40:
3d:65:81:32:bb:15:7d:68:26:4d:f7:94:c1:5f:9d:ca:cf:df:
d7:60:d2:4f:de:cf:f9:54:7b:c4:6c:c8:0e:bb:9b:2b:9a:52:
f3:9d:47:32:1e:0d:a0:06:17:ca:05:47:c9:93:73:5d:2e:46:
9b:9a:78:6a:b4:29:63:29:a9:01:06:74:d3:55:a9:ee:f9:04:
33:68:1b:64:cf:b9:41:f6:d1:23:8a:e0:36:dc:88:3e:e1:36:
35:9b:a1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:47:13 2025 by rpki-client