Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
File: mU78TONvxEPcWBYnTqwddpMCkIE.mft (raw, json)
Hash identifier: HjE64rnGNrDQ9hwE5wEP0FR5T1IhyA5Ahe/SZvEeZGo=
Subject key identifier: EF:07:FA:96:DE:36:F4:75:2C:26:03:D7:D3:EF:E3:99:24:B4:B8:E0
Authority key identifier: 99:4E:FC:4C:E3:6F:C4:43:DC:58:16:27:4E:AC:1D:76:93:02:90:81
Certificate issuer: /CN=994efc4ce36fc443dc5816274eac1d7693029081
Certificate serial: 01992330F0CFB3EC03E6497139D6982B928E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 08:00:33 +0000
Manifest this update: Sun 07 Sep 2025 08:00:33 +0000
Manifest next update: Mon 08 Sep 2025 08:00:33 +0000
Files and hashes: 1: MhCfthOppsmBaiAYHVVk_2GAFYE.roa (hash: Prn81nEGvzCuVunt3w8adc4Qe6uMN6AiQAgwWZDR5Uo=)
2: mU78TONvxEPcWBYnTqwddpMCkIE.crl (hash: 7C/QOSKNEeDA7uCU3GuEAKi+XRJhf50ahlq6V5nhhIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:f0:cf:b3:ec:03:e6:49:71:39:d6:98:2b:92:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994efc4ce36fc443dc5816274eac1d7693029081
Validity
Not Before: Sep 7 08:00:33 2025 GMT
Not After : Sep 8 08:00:33 2025 GMT
Subject: CN=ef07fa96de36f4752c2603d7d3efe39924b4b8e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4c:36:11:98:8d:bb:49:85:80:ff:a8:f4:0e:
40:d3:23:c1:45:cf:b5:e9:09:0d:2f:3d:88:4c:64:
dd:de:ab:fe:a8:1c:bc:1a:18:b2:00:5a:73:76:61:
5b:c9:eb:a5:de:37:42:ce:36:d6:b3:9c:9d:3b:28:
c1:26:20:33:d2:99:23:e8:2f:7b:48:19:a6:b1:c5:
3c:57:7f:41:e5:02:29:57:d4:1c:3b:65:e9:e8:50:
d9:80:be:eb:57:5e:ab:8e:a5:fc:aa:4e:f1:03:0d:
25:2c:c5:5e:34:63:a4:e9:39:2f:77:2d:1f:3e:cf:
d4:7f:1c:09:a0:7d:49:8e:cc:33:bd:99:1b:a1:25:
3f:85:6f:ab:06:e2:d5:3e:79:9d:42:ec:3a:bf:b0:
72:7b:2c:e2:44:0f:ac:55:6d:ee:22:bf:1b:0e:fc:
e6:08:c4:fd:ea:38:d4:64:e3:d0:ed:2e:f2:42:5a:
f2:87:c1:c3:f5:44:a5:c3:a1:a1:73:a1:fa:3f:82:
63:65:90:55:7a:dd:2c:6f:68:f2:f5:d1:a6:ab:08:
a4:7f:79:73:e7:84:f4:93:c1:07:89:41:36:e5:fb:
2c:61:23:81:f0:30:44:d3:e1:a3:5e:4b:40:cb:02:
45:d6:18:e7:dd:62:bd:2e:a4:ad:bb:a4:c2:79:03:
28:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:07:FA:96:DE:36:F4:75:2C:26:03:D7:D3:EF:E3:99:24:B4:B8:E0
X509v3 Authority Key Identifier:
keyid:99:4E:FC:4C:E3:6F:C4:43:DC:58:16:27:4E:AC:1D:76:93:02:90:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:c5:c7:dc:0a:e5:a3:f7:86:8e:02:1d:58:97:a6:96:79:b8:
2e:28:3d:a1:1f:96:78:fe:52:22:70:ec:97:b5:76:1a:22:b5:
a8:0f:01:1b:3c:03:3b:38:70:6a:a4:75:07:b5:4b:28:3b:01:
03:11:47:46:f4:3e:5e:18:75:00:0a:03:77:42:a7:bf:4a:74:
b6:ac:1e:ac:af:6b:99:64:38:6d:44:e2:c0:33:a2:93:3a:be:
20:5d:41:24:bd:2f:8c:26:b3:24:75:f6:68:99:be:1e:e0:6c:
c5:1c:38:47:a8:e7:55:cf:e1:ed:82:ba:ad:ee:2e:5d:1d:5a:
26:12:bb:67:db:00:b2:7b:b3:d2:2c:a8:f1:c2:af:5c:17:48:
ba:5a:0b:1d:36:e0:0e:3c:05:c2:87:30:bb:f7:18:dc:b2:ef:
1d:f2:a4:fc:60:82:9f:68:26:8f:54:bf:b3:a9:3d:34:8a:3d:
93:1e:df:c9:d7:7c:c1:26:00:fb:56:6c:85:8b:d1:e8:da:64:
94:2b:b2:0a:64:7c:84:7d:94:f3:d8:d5:e9:72:72:fe:cd:b2:
5b:37:90:a0:b8:86:08:da:04:82:4e:7f:40:9b:65:2c:90:71:
76:aa:4c:48:ee:e6:b9:f3:43:f7:f9:ac:11:f9:df:19:2b:0d:
a9:29:c4:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:42:31 2025 by rpki-client