Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft
File: MX71WudtQiUE6uWyBnJNNkQzEcc.mft (raw, json)
Hash identifier: mh8UCenqcU+e0pS9shWWf03N6mDtR47HQy3PUnRpDcQ=
Subject key identifier: 0D:B0:F3:FC:0F:60:5F:0B:EE:51:38:A9:E6:29:87:64:21:81:78:48
Authority key identifier: 31:7E:F5:5A:E7:6D:42:25:04:EA:E5:B2:06:72:4D:36:44:33:11:C7
Certificate issuer: /CN=317ef55ae76d422504eae5b206724d36443311c7
Certificate serial: 019848F76A97847160DE1AAFF153D7DE81BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MX71WudtQiUE6uWyBnJNNkQzEcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 23:00:30 +0000
Manifest this update: Sat 26 Jul 2025 23:00:30 +0000
Manifest next update: Sun 27 Jul 2025 23:00:30 +0000
Files and hashes: 1: 6KI42LA3k4Z423gzE8zSlIe9RA4.roa (hash: MywiSVripv33Y3DFEx1AfwLFpUpd5icicODvhSpR2Lc=)
2: MX71WudtQiUE6uWyBnJNNkQzEcc.crl (hash: k1ohO3wJBv2IV7uiYOv4tNM/dVc9mX5kC8e4vZtYQ9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MX71WudtQiUE6uWyBnJNNkQzEcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:6a:97:84:71:60:de:1a:af:f1:53:d7:de:81:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317ef55ae76d422504eae5b206724d36443311c7
Validity
Not Before: Jul 26 23:00:30 2025 GMT
Not After : Jul 27 23:00:30 2025 GMT
Subject: CN=0db0f3fc0f605f0bee5138a9e629876421817848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:08:20:08:4f:21:77:84:63:fa:0c:e7:73:75:
91:89:f2:b4:cb:fc:21:b2:0e:dc:ea:a8:5d:cd:25:
c6:62:30:42:3c:4e:52:31:dd:28:1f:09:63:fa:b2:
47:4e:e1:cf:f0:4c:ea:e0:67:1e:0c:0d:50:0f:29:
05:8d:79:87:f4:49:9c:b6:4a:8f:fa:6c:9d:3f:2e:
7d:54:4c:e8:b6:c6:b3:8c:ae:8c:48:af:ff:16:78:
48:3b:d7:bf:be:35:d8:f5:db:68:ff:6f:b6:27:f7:
7e:e1:39:af:e8:bb:66:fa:a6:1a:1b:25:17:ba:57:
2a:82:14:0b:eb:fe:36:66:47:20:9c:49:85:e3:47:
01:ee:63:ab:eb:93:40:f6:65:70:d9:52:27:f8:47:
45:7f:92:bf:fc:99:34:89:ec:5d:fe:cc:41:fc:0f:
2b:4b:da:7f:71:19:6e:74:87:2f:aa:ca:3c:1e:7b:
f9:e6:2c:bb:81:87:be:87:e4:27:1c:74:b9:79:7d:
a3:7b:cb:95:6d:92:17:7f:0f:b4:ce:02:46:7d:ac:
7f:73:50:69:d3:0c:0c:c3:2c:83:73:25:f6:ae:e1:
d9:62:4e:4f:31:5b:76:7a:f3:33:fe:aa:66:c7:df:
cc:ea:e6:3d:18:b4:89:b9:03:f0:40:83:f7:7a:71:
16:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B0:F3:FC:0F:60:5F:0B:EE:51:38:A9:E6:29:87:64:21:81:78:48
X509v3 Authority Key Identifier:
keyid:31:7E:F5:5A:E7:6D:42:25:04:EA:E5:B2:06:72:4D:36:44:33:11:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MX71WudtQiUE6uWyBnJNNkQzEcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/84f86e-4ea7-4db3-aa30-c2c9e2393a32/1/MX71WudtQiUE6uWyBnJNNkQzEcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:8a:8e:62:bf:2a:b8:59:14:c5:24:08:78:cd:e8:b7:ce:ff:
24:c3:c8:bc:00:fc:f8:b1:37:79:4e:9a:fd:13:80:a9:a9:50:
99:ef:1d:07:a2:e2:8b:a6:f1:4c:77:9d:d1:53:ed:0e:d8:37:
64:b9:52:86:de:60:0e:fb:3f:e1:e9:d5:69:16:1c:86:e6:a9:
3e:50:be:35:01:d1:e2:06:8b:96:c7:cc:25:d9:1f:19:9c:a5:
45:d5:8d:08:87:7e:19:3c:79:32:f2:10:b0:05:d5:1d:cc:87:
76:cb:fb:d9:e5:85:fd:0a:68:77:a7:fd:46:8f:18:c8:08:18:
a0:f8:dd:4a:5d:4a:b9:6f:29:e6:19:4f:b3:58:41:c1:47:b8:
32:b3:f9:40:a8:96:5d:3e:4c:16:d9:50:ab:d6:3d:bd:f0:a0:
7d:1a:df:5b:f6:91:a9:f7:70:1a:1d:68:cc:d7:e3:09:a4:c6:
45:4a:cd:03:ff:25:23:37:0f:fb:9c:4d:24:29:cd:c7:60:49:
ff:35:41:c7:ab:2b:07:8d:58:72:f8:6b:be:36:14:cb:43:99:
10:3f:74:b5:d1:e9:b3:7f:15:be:c7:a3:d1:58:d1:de:29:a7:
61:a8:c7:90:da:6a:30:c5:8d:13:16:2a:e2:d0:c0:05:46:cb:
60:4a:e1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:20:35 2025 by rpki-client