Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.mft
File: MfePPgBBCSbb2JyOj1xACxArA3k.mft (raw, json)
Hash identifier: UjjEKiyOj1BWUDTSk0Q6HtBPEV3/DzCkC/daSZWLID4=
Subject key identifier: 83:EF:FB:84:69:FD:EF:5E:8A:78:1C:2D:1C:89:28:C5:6D:41:65:85
Authority key identifier: 31:F7:8F:3E:00:41:09:26:DB:D8:9C:8E:8F:5C:40:0B:10:2B:03:79
Certificate issuer: /CN=31f78f3e00410926dbd89c8e8f5c400b102b0379
Certificate serial: 019922FA9DDEFCEBFE1B10AFE7990DA02E88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MfePPgBBCSbb2JyOj1xACxArA3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.mft
Manifest number: 089C
Signing time: Sun 07 Sep 2025 07:01:13 +0000
Manifest this update: Sun 07 Sep 2025 07:01:13 +0000
Manifest next update: Mon 08 Sep 2025 07:01:13 +0000
Files and hashes: 1: MfePPgBBCSbb2JyOj1xACxArA3k.crl (hash: 9pWjd3PUkHzHSRrXRLXtmlpoTFg2STBQVH4mtqombMM=)
2: eUlaq5gS3GI6r3fmoZPaba7Dfho.roa (hash: PBjrFIbcmCvN1hWwmYdZLCa28CsdtHFqI3Efr5fS4Bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/MfePPgBBCSbb2JyOj1xACxArA3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:9d:de:fc:eb:fe:1b:10:af:e7:99:0d:a0:2e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31f78f3e00410926dbd89c8e8f5c400b102b0379
Validity
Not Before: Sep 7 07:01:13 2025 GMT
Not After : Sep 8 07:01:13 2025 GMT
Subject: CN=83effb8469fdef5e8a781c2d1c8928c56d416585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3e:17:de:45:21:b4:41:07:03:50:fe:51:b9:
40:fd:cb:85:1d:82:cb:a2:b3:bf:ae:ad:01:64:8b:
d3:55:fb:fb:4c:b2:94:a3:2a:6d:f4:4f:ec:3f:a8:
fc:29:d9:d3:1a:28:63:9c:54:23:b7:f8:cc:47:a3:
64:1d:19:2a:61:06:2f:0c:e7:42:5e:10:86:04:fd:
1d:79:d6:1c:06:2e:9f:84:74:c4:46:17:1e:8d:7a:
b2:34:b9:4f:e3:d1:61:9a:79:94:4d:51:ac:2d:45:
b3:58:c6:16:b6:d3:97:40:5c:bf:37:28:60:00:4e:
6c:e2:51:ec:25:fb:79:b7:35:7a:ce:93:67:3b:39:
5f:21:66:04:ad:0f:52:49:a2:df:03:3c:dd:6e:54:
28:ca:e2:d6:9b:b0:7e:4e:07:27:e0:84:40:85:d5:
34:7c:92:f0:73:31:20:1b:52:37:a3:b8:e7:82:11:
2c:9d:36:a3:a3:c6:83:e4:d6:90:11:e7:f0:48:c5:
6b:c3:15:2d:42:be:66:00:25:e9:db:eb:0f:90:e2:
7a:d1:ac:74:99:3f:88:f6:63:e2:56:6d:0e:d8:c5:
fd:8f:27:db:0e:50:eb:e2:12:00:9a:d2:59:19:c1:
b1:86:d8:bb:b9:43:91:70:3c:f9:52:86:21:4c:86:
32:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:EF:FB:84:69:FD:EF:5E:8A:78:1C:2D:1C:89:28:C5:6D:41:65:85
X509v3 Authority Key Identifier:
keyid:31:F7:8F:3E:00:41:09:26:DB:D8:9C:8E:8F:5C:40:0B:10:2B:03:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MfePPgBBCSbb2JyOj1xACxArA3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:d9:b6:67:ec:20:f7:83:05:36:ec:7c:70:3d:c4:92:58:b8:
00:97:d9:29:0c:56:c1:7e:5d:1c:3b:0a:1a:6f:6e:9e:50:33:
bd:1c:2b:90:8a:9d:bd:fb:bc:07:c1:da:8b:74:c4:3e:43:81:
b3:4e:6d:69:97:6a:69:04:47:6c:6e:01:dc:eb:17:66:4d:e5:
d9:66:5e:7a:16:3b:a0:ad:11:34:1b:28:a4:6d:ba:4e:10:31:
9d:c6:6e:56:8b:7e:a4:a3:87:f1:08:75:31:02:26:e2:44:a2:
37:d8:f5:63:54:ed:d4:a7:2f:b2:93:15:29:fa:e6:4e:66:85:
09:db:fe:fc:b4:6e:fc:25:c0:34:ef:38:7a:1b:e6:3c:a0:33:
3e:68:e4:f4:0c:60:d8:f8:9c:fa:0c:8f:32:e3:f5:ca:7a:2b:
d1:d6:93:f1:e0:88:a8:f9:18:79:0e:47:7a:5b:67:ab:2d:5a:
b0:e6:55:10:55:f0:84:72:d4:60:1b:eb:c5:dc:ef:84:bc:c0:
d8:07:50:19:ba:a7:2b:ea:8c:9b:e4:08:57:8a:d5:ab:b4:8b:
f6:95:e0:76:85:8f:60:a8:1a:89:ff:98:27:f6:7a:90:3a:cb:
60:e8:8a:49:45:bc:54:67:cf:ac:15:1c:91:e2:75:59:c9:5f:
56:90:d8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:46:08 2025 by rpki-client