Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
File: MXuBR1A-oZ9YHKANKNvuXljLj0g.mft (raw, json)
Hash identifier: 3I9HKvV2X0n3CcP+076HKU47Nl2C/vL0Zur8SQPZJG8=
Subject key identifier: 9E:6F:59:58:51:0E:1D:DB:58:8A:9B:13:E0:F7:8F:9A:15:9F:06:2D
Authority key identifier: 31:7B:81:47:50:3E:A1:9F:58:1C:A0:0D:28:DB:EE:5E:58:CB:8F:48
Certificate issuer: /CN=317b8147503ea19f581ca00d28dbee5e58cb8f48
Certificate serial: 019932A3E82811ACF9F44E58733B11220022
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
Manifest number: 167A
Signing time: Wed 10 Sep 2025 08:00:26 +0000
Manifest this update: Wed 10 Sep 2025 08:00:26 +0000
Manifest next update: Thu 11 Sep 2025 08:00:26 +0000
Files and hashes: 1: MXuBR1A-oZ9YHKANKNvuXljLj0g.crl (hash: 9+NhLknw7Ic7yQVHT6O6qRkirigGaY5+wR29dqmMCgI=)
2: Xvq5E9FjSgetaXURRKNVucLHpJA.roa (hash: Q0VYCtfy8botfioT4TVhD+jb4Ht709fLdZsnE/9HQwY=)
3: ZthEX-bem71wxx1bLgVPG5w9ZTc.roa (hash: T1Z1de8P32daOdZ6/2GmlJdKCTcAVlmu6uwlpR9ZYC8=)
4: cpm1MJFdWjEQeCJ1LBHfzw5iKXY.roa (hash: gbGURzXBFbe9SdreBkh+gl3ChVchhLD0ie8p4XE7DdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:a3:e8:28:11:ac:f9:f4:4e:58:73:3b:11:22:00:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317b8147503ea19f581ca00d28dbee5e58cb8f48
Validity
Not Before: Sep 10 08:00:26 2025 GMT
Not After : Sep 11 08:00:26 2025 GMT
Subject: CN=9e6f5958510e1ddb588a9b13e0f78f9a159f062d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6a:7f:54:ac:8a:50:54:67:3e:d8:3c:9e:c6:
55:59:a8:18:0c:4c:22:36:0a:d9:c6:5b:6c:0b:b5:
e0:2a:31:cf:6c:26:29:ae:28:ab:7d:67:f9:cb:97:
a0:4d:d4:b9:cb:6c:65:ef:f6:2b:f0:fa:d3:1b:8c:
9d:1a:db:b9:e6:2c:45:7e:d5:7a:ca:e8:00:a0:89:
e6:cf:b4:2b:2a:bb:8b:f4:d0:7f:7a:d1:de:f5:1b:
18:71:04:87:f8:3e:a8:8b:b4:bf:e2:23:cd:8c:16:
24:28:79:38:f7:68:ef:66:43:88:61:81:9d:ac:f8:
8d:b6:df:f4:00:8e:73:98:a2:a9:24:c5:e5:d3:ec:
cf:92:04:23:42:d6:49:0c:d4:80:0a:9d:e4:e0:f1:
61:52:10:70:d8:04:45:9d:10:65:46:85:f7:48:12:
10:2c:dd:c5:b8:ce:60:9b:c9:e2:0e:c9:36:b3:24:
cd:00:4b:e3:a1:7d:74:54:56:03:af:76:76:7d:f1:
4c:f9:c2:2d:2e:38:9b:44:80:f8:06:63:19:3c:2c:
ff:58:de:bc:0d:6e:10:05:4d:d7:1e:83:df:53:60:
7d:a3:dd:2e:bc:26:0b:d5:d5:9f:00:00:5a:1b:66:
f0:b8:c9:07:b7:92:49:98:aa:09:a3:5a:50:2f:50:
87:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:6F:59:58:51:0E:1D:DB:58:8A:9B:13:E0:F7:8F:9A:15:9F:06:2D
X509v3 Authority Key Identifier:
keyid:31:7B:81:47:50:3E:A1:9F:58:1C:A0:0D:28:DB:EE:5E:58:CB:8F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:97:a8:ac:d0:a0:14:88:07:5e:52:83:f3:c2:35:1c:25:9c:
0d:4a:e5:62:3c:10:a1:99:3b:39:8e:d0:f9:7a:3d:31:a2:84:
03:7c:76:49:10:df:b1:96:12:14:18:2a:19:83:08:2a:6b:7f:
44:61:a0:1b:18:bd:8d:b1:23:d0:4a:c4:a8:b6:de:d3:d3:f5:
68:6a:9f:63:69:7b:44:42:e3:4d:0d:c0:9d:b8:c0:b8:dc:6d:
14:63:16:2a:88:48:5e:18:3a:49:42:2c:17:98:bd:24:32:80:
a4:97:45:65:62:d4:da:41:2f:f5:fb:06:7d:29:ef:8f:d8:8e:
3e:8b:e4:fa:78:a9:dc:7d:16:40:0b:cd:6d:b9:3f:c4:f0:5f:
ec:5f:5b:75:f9:bf:21:b9:58:a7:95:3e:9d:49:fc:87:d7:39:
f8:52:2f:bd:99:a9:2e:6e:11:5c:c3:96:0b:6d:1b:55:2f:28:
c1:c0:9e:22:ee:bb:b6:c7:ce:de:c7:f2:f2:79:86:2b:96:18:
dd:da:7e:73:e1:e4:d1:09:75:ad:d1:38:07:50:65:ef:31:39:
e8:c8:36:8d:4e:3e:8a:fb:69:5a:89:ac:f2:dd:03:0b:38:f9:
ad:cb:9d:bf:47:cb:96:62:8e:2d:68:0e:b7:4a:89:e9:61:12:
58:f6:de:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 12:25:43 2025 by rpki-client