Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
File: MXqSdCYInzuMUACDIhp5ip0uhGY.mft (raw, json)
Hash identifier: e3+PCiDgD21TmB/JZwXFIXLs+iA1+KATfVI75D+6p70=
Subject key identifier: 01:E7:2B:96:2B:20:FB:37:C2:1B:CA:92:71:32:ED:39:D9:A6:FA:E9
Authority key identifier: 31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66
Certificate issuer: /CN=317a927426089f3b8c500083221a798a9d2e8466
Certificate serial: 0198537AC8195B8DF27E2C0E7A63A7EA01B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
Manifest number: 1330
Signing time: Tue 29 Jul 2025 00:00:12 +0000
Manifest this update: Tue 29 Jul 2025 00:00:12 +0000
Manifest next update: Wed 30 Jul 2025 00:00:12 +0000
Files and hashes: 1: 9eN9v_hmY4BXhqwgwPbmdRtwaxg.roa (hash: /I1wfagsAtpLvGcRUkgr5rbaITh/yY12WpQcMZ73aQ0=)
2: MXqSdCYInzuMUACDIhp5ip0uhGY.crl (hash: Yo4UaDC0m42kwskh+BA5ybg+TcXV7R1oJktVhmEItWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7a:c8:19:5b:8d:f2:7e:2c:0e:7a:63:a7:ea:01:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317a927426089f3b8c500083221a798a9d2e8466
Validity
Not Before: Jul 29 00:00:12 2025 GMT
Not After : Jul 30 00:00:12 2025 GMT
Subject: CN=01e72b962b20fb37c21bca927132ed39d9a6fae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2c:e8:49:14:16:b3:3b:40:31:92:2c:d8:98:
8d:b2:78:92:39:c0:0b:32:af:ff:56:b6:89:1b:f6:
39:23:8a:96:39:80:51:b4:77:3f:10:a4:a5:3a:64:
72:34:d9:05:c6:58:aa:43:cf:5f:ad:c8:87:c7:c0:
53:5c:d4:85:08:b1:4f:69:bb:6a:43:c1:42:73:1e:
61:bb:53:d8:f0:f0:e2:9b:aa:c6:cb:82:85:ce:ed:
52:95:fa:b5:d4:67:e1:96:49:3a:b3:31:d0:0f:99:
12:80:be:4a:77:cc:22:4e:16:12:88:68:72:84:c9:
1c:55:ca:5b:7f:c7:60:6c:ae:f9:a5:18:cd:51:c7:
13:cc:89:08:2a:88:d5:b6:41:4e:af:0b:06:6c:43:
12:ff:eb:00:6b:ca:5f:d0:a2:62:98:2f:42:7b:29:
66:b0:e8:9c:bb:fd:e5:09:46:77:fc:d3:30:90:f4:
76:6f:da:1d:16:f3:2c:65:06:16:2b:fd:8e:e0:f8:
b7:63:19:33:19:a8:02:90:20:3d:00:a5:4b:94:e8:
0d:b0:5a:10:7e:8f:a2:c3:8d:ae:3e:7c:0f:77:dd:
2f:48:c6:dc:0a:8a:11:b6:9a:93:1b:67:f8:b8:90:
2b:d6:26:6b:cf:26:f3:4e:44:2e:ce:96:7e:ab:41:
9d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E7:2B:96:2B:20:FB:37:C2:1B:CA:92:71:32:ED:39:D9:A6:FA:E9
X509v3 Authority Key Identifier:
keyid:31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:f6:96:64:85:e0:90:30:66:a4:c9:69:b9:40:09:15:4b:ad:
0c:64:af:75:7c:d0:91:a2:47:9d:f2:0e:ba:ed:6f:4a:d6:55:
7e:58:c8:0d:ee:fb:dc:74:9d:10:59:ec:e9:50:68:c9:88:63:
cd:b2:50:23:8e:1b:38:e8:10:ac:57:68:67:9c:33:97:d3:f9:
36:35:64:dd:2c:6b:93:26:09:83:f1:3a:f8:28:ad:cd:e2:1f:
99:88:34:a8:68:36:08:dc:98:74:69:57:5e:95:26:03:77:4b:
bd:01:3c:7d:ff:91:68:1c:c5:f1:f5:18:8d:63:81:df:dd:86:
d5:34:53:42:e3:37:58:87:aa:52:0d:0e:5f:8f:b0:f6:6d:3c:
ab:94:c0:f4:dc:38:82:7c:b7:31:21:98:f8:50:8b:00:9b:ff:
2d:9e:dc:08:1f:94:1d:2b:a6:fb:68:46:db:af:e7:dd:d7:27:
ce:fc:f8:dc:f4:12:f0:ba:ce:55:3f:c6:8d:1a:cc:ca:25:43:
0c:81:31:30:97:44:7e:54:98:63:72:ad:21:4e:ff:b9:3d:d6:
f0:d8:69:c7:ff:f4:8d:35:5f:3c:24:29:fb:4e:1f:07:3d:1f:
22:ea:a6:9e:26:85:3b:9c:30:be:e0:a6:f9:77:3f:69:f9:de:
d1:cf:31:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 01:54:39 2025 by rpki-client