Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.mft
File: MOEXssTnX9dTA9FNsD6eL0tyK4g.mft (raw, json)
Hash identifier: kbHHGpYTjRsWZ/hA3CXtvjjtz6eBzTGf/FjRuzJDm6Y=
Subject key identifier: 1F:38:0E:B8:EA:2F:04:A5:83:36:A1:97:E9:6C:9D:37:51:CF:85:82
Authority key identifier: 30:E1:17:B2:C4:E7:5F:D7:53:03:D1:4D:B0:3E:9E:2F:4B:72:2B:88
Certificate issuer: /CN=30e117b2c4e75fd75303d14db03e9e2f4b722b88
Certificate serial: 0199221E8F0CC10F50E08BFA8280C13CFC75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MOEXssTnX9dTA9FNsD6eL0tyK4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.mft
Manifest number: 01E5
Signing time: Sun 07 Sep 2025 03:00:51 +0000
Manifest this update: Sun 07 Sep 2025 03:00:51 +0000
Manifest next update: Mon 08 Sep 2025 03:00:51 +0000
Files and hashes: 1: MOEXssTnX9dTA9FNsD6eL0tyK4g.crl (hash: h1psvymALGGt7iUjVDmGfYPPXAcodFgq8KRNfoVOHkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/MOEXssTnX9dTA9FNsD6eL0tyK4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:8f:0c:c1:0f:50:e0:8b:fa:82:80:c1:3c:fc:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30e117b2c4e75fd75303d14db03e9e2f4b722b88
Validity
Not Before: Sep 7 03:00:51 2025 GMT
Not After : Sep 8 03:00:51 2025 GMT
Subject: CN=1f380eb8ea2f04a58336a197e96c9d3751cf8582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6b:78:23:46:83:6f:9e:09:72:1c:5f:1c:5e:
80:20:91:51:f9:68:3d:c6:15:9f:2b:05:37:21:a1:
42:79:32:48:d6:6d:26:75:4b:6d:68:8d:36:f3:f9:
40:95:83:13:fe:6f:10:ee:f0:af:ab:33:15:b2:bb:
78:7c:77:de:e8:c2:89:09:e2:a5:74:82:eb:14:51:
c6:62:77:29:7f:fe:2e:41:51:c0:8f:19:94:9b:bd:
e3:95:fd:9f:00:20:8e:de:9f:33:12:b2:e5:40:b3:
b5:30:fc:8e:4a:1a:06:89:48:bb:a2:d0:d1:0a:7e:
f5:66:fb:8a:dc:28:83:83:14:48:c9:4e:fd:f6:f2:
c7:f5:60:b0:c0:19:88:5f:92:d4:d0:24:9d:60:96:
7b:1b:a5:ca:ac:20:69:86:9a:f3:5d:8c:5f:b6:26:
d5:73:89:75:b2:f4:19:0f:b2:f9:15:f5:42:fb:67:
7f:38:d5:55:cc:da:04:ba:f8:e6:03:ad:37:dd:c0:
d2:50:d2:d0:82:b2:eb:2c:57:b4:b1:b7:ca:c3:38:
b8:93:19:56:27:14:43:77:fc:1d:69:f0:fc:7b:00:
9b:b8:bf:e4:89:f4:af:dc:53:db:46:38:c0:26:b1:
85:23:93:56:fe:3e:8f:29:79:32:2e:35:a9:32:3b:
60:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:38:0E:B8:EA:2F:04:A5:83:36:A1:97:E9:6C:9D:37:51:CF:85:82
X509v3 Authority Key Identifier:
keyid:30:E1:17:B2:C4:E7:5F:D7:53:03:D1:4D:B0:3E:9E:2F:4B:72:2B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MOEXssTnX9dTA9FNsD6eL0tyK4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:1a:d7:8f:ad:b9:4b:1f:3e:39:97:d8:99:0a:d5:5e:40:96:
e9:d1:f4:d9:9c:09:41:d4:ad:a6:58:d2:93:9b:00:f3:c4:1d:
0f:93:2e:a8:1c:af:96:8e:26:61:9a:de:f6:e2:13:d8:6a:3b:
a1:a0:23:2e:d9:96:8c:bb:ce:6c:c9:57:c9:aa:cc:b3:28:6b:
ae:15:ee:64:4c:13:87:06:6b:10:b7:9b:7d:63:f3:54:06:04:
ad:31:0b:ae:c2:16:bf:40:92:0b:86:58:8f:6a:41:e4:d1:d6:
c4:05:36:ac:62:20:a4:a9:10:e0:3d:e2:6c:b9:f5:3b:70:09:
29:ae:96:a0:64:37:58:37:e6:70:7e:b9:ce:fb:ee:f4:63:06:
47:ec:27:8c:eb:0d:6a:77:ac:16:2c:40:43:70:ef:a4:c2:66:
10:47:81:99:15:8f:e3:25:75:56:74:53:5a:87:c7:12:32:c6:
79:b4:50:fc:34:3a:4f:c7:dc:95:67:be:46:6a:67:a4:17:d7:
07:76:8f:62:8a:00:96:91:48:0c:0e:66:16:82:17:8d:f2:50:
8e:43:20:4c:87:a7:fa:b8:50:e6:fd:df:6d:80:00:e2:d4:8f:
b0:1b:b9:51:2a:14:fd:6d:77:34:30:af:24:1a:67:a0:a0:b4:
f6:c5:5b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:14 2025 by rpki-client