Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
File: MxvOLugG6TYhES29YYU293X0T7o.mft (raw, json)
Hash identifier: 9Y74oWlgJuHjbx0sMAQxdFyWKfg+YBQYuEr3r0Zu5vA=
Subject key identifier: 17:23:A6:2E:CC:37:B5:42:5E:FE:49:5B:5E:03:16:E9:5F:FB:52:4B
Authority key identifier: 33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA
Certificate issuer: /CN=331bce2ee806e93621112dbd618536f775f44fba
Certificate serial: 01993380DB3A341AC4417817A73E9AE95682
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
Manifest number: 1689
Signing time: Wed 10 Sep 2025 12:01:46 +0000
Manifest this update: Wed 10 Sep 2025 12:01:46 +0000
Manifest next update: Thu 11 Sep 2025 12:01:46 +0000
Files and hashes: 1: EOVeqLVY7YQgxvYQ8YWMSeXKFNY.roa (hash: hvGEJ8ytuPo6C+ke0ltl0/nWw9ZMLCADEd+IRmTnDPs=)
2: MxvOLugG6TYhES29YYU293X0T7o.crl (hash: R7QaV/z0E65Y3jryVhlijSqUZahvDwYTDVU6MDBPBSM=)
3: POmxIMVdcWr7e3aGn_msshLLPds.roa (hash: 0b1DwkyDSHkWaJx+Ye3fwTqtcQFSCniv+9fPzmWyARk=)
4: mgPiyECi3IMewfduoQECoQO6hW8.roa (hash: FFtqOGC8SNkaXVCBxgLc9ho6RyB8i6aMWoVYlwMrees=)
5: wmMS6UeFP0focfOvKKj1_7v3SL4.roa (hash: FsH4R1TxiZCRWjEdGlDRxvZk7LyjdBKow9gzQ/BnNzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:80:db:3a:34:1a:c4:41:78:17:a7:3e:9a:e9:56:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331bce2ee806e93621112dbd618536f775f44fba
Validity
Not Before: Sep 10 12:01:46 2025 GMT
Not After : Sep 11 12:01:46 2025 GMT
Subject: CN=1723a62ecc37b5425efe495b5e0316e95ffb524b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4f:17:e7:c8:01:ec:73:8a:24:45:37:2b:53:
18:2d:a9:d9:3d:08:8d:c5:1a:bf:f8:4f:bc:d7:c4:
e2:af:ad:66:df:ce:9d:ea:00:a4:0a:2d:f4:1f:89:
92:7a:a5:d0:ea:52:e2:97:64:07:58:7a:13:35:c4:
4f:83:80:43:cf:cf:25:bf:30:15:ad:83:d9:12:9d:
a0:7b:8c:a2:02:37:25:c0:75:7f:e7:1e:5f:9d:d9:
a7:b9:b2:19:0e:aa:a7:92:51:33:f0:4e:dc:95:bd:
a5:b4:29:d3:66:7a:d0:f0:10:c4:70:e8:2a:f6:ce:
cd:40:9b:2b:2c:87:f7:41:de:2c:d3:25:cc:0b:68:
7a:dd:41:d7:59:d4:1a:65:f4:48:7e:c9:23:e1:91:
34:79:3f:eb:13:d5:79:08:02:99:d3:de:43:b1:b9:
2c:52:68:f8:07:e3:02:4f:c8:4d:9b:70:8e:c2:90:
e2:46:47:ae:7c:07:24:65:df:d3:67:37:46:2a:85:
d7:0c:01:68:45:cc:0e:59:23:b1:c5:74:01:fe:0d:
59:27:48:79:1d:89:3c:ac:d1:60:03:09:63:dc:79:
c3:3d:24:5c:86:cb:c1:b3:3e:77:32:60:36:b9:19:
93:a2:7f:96:30:ec:47:10:f9:cd:41:4c:bb:26:94:
68:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:23:A6:2E:CC:37:B5:42:5E:FE:49:5B:5E:03:16:E9:5F:FB:52:4B
X509v3 Authority Key Identifier:
keyid:33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:68:bb:c3:9d:ff:6a:12:87:58:ce:2b:a7:f4:81:56:46:68:
ed:01:36:a4:3d:10:45:45:be:c4:f6:40:87:14:80:8d:0e:e5:
9c:53:56:73:af:c6:74:82:a9:a5:03:93:79:76:53:c9:ca:0f:
86:c1:60:8e:c0:3c:c3:ec:b0:a3:17:0c:6b:88:d2:9a:1f:a7:
d2:3f:1a:39:41:48:ef:cc:0d:01:88:41:0d:07:2c:48:15:1d:
3d:fe:d0:fe:e7:c3:92:fc:44:74:16:8c:4f:0a:92:6f:8d:fe:
18:22:b9:5d:71:d3:1f:1b:dc:25:e4:24:10:75:44:b7:70:34:
ae:29:b4:dc:6b:3b:9c:41:3d:f3:ab:90:ad:30:4c:51:d1:0d:
91:fe:bf:b3:93:c4:90:c7:ca:5d:64:c7:f8:90:d3:7a:22:41:
99:eb:04:e7:ea:92:2b:8f:38:d9:be:ea:ee:91:86:59:d8:d0:
9b:d5:87:d4:3b:d3:5c:13:3d:fd:8e:0b:0b:06:ea:c4:1f:b4:
97:ca:66:ec:05:0b:15:61:08:0a:73:b0:f1:b2:81:f4:e8:a2:
78:68:02:89:a6:81:96:9e:12:9e:64:08:87:85:a9:cc:bf:87:
a7:dc:7f:f3:52:71:a3:86:cd:9b:fd:5e:c9:5f:a2:aa:93:1a:
73:a9:16:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 18:25:26 2025 by rpki-client