Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.mft
File: mnZNjTrnJbReDUgH9hLsPR8qP08.mft (raw, json)
Hash identifier: /FtAWN4IlI6OoxQ8uggYU9fkRklgYV1KfQkIFTzabuY=
Subject key identifier: 79:13:46:CA:9A:56:FC:A5:41:D1:22:BE:12:61:C2:7D:DD:27:34:5A
Authority key identifier: 9A:76:4D:8D:3A:E7:25:B4:5E:0D:48:07:F6:12:EC:3D:1F:2A:3F:4F
Certificate issuer: /CN=9a764d8d3ae725b45e0d4807f612ec3d1f2a3f4f
Certificate serial: 0197B70E6CA0C0B6380EF80DA8E78582402D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnZNjTrnJbReDUgH9hLsPR8qP08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 15:01:05 +0000
Manifest this update: Sat 28 Jun 2025 15:01:05 +0000
Manifest next update: Sun 29 Jun 2025 15:01:05 +0000
Files and hashes: 1: GX6PPZ2aZNuKqCQABtqOUWCcHRs.roa (hash: iBMcSS3f9LeIBBwiwQeNPCdp76Ute65WO/S9tw7lGK8=)
2: mnZNjTrnJbReDUgH9hLsPR8qP08.crl (hash: rZGsZEUi2G1ta3BWOEmsnFE2exK0BpVqJ99AZMrMOzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnZNjTrnJbReDUgH9hLsPR8qP08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:6c:a0:c0:b6:38:0e:f8:0d:a8:e7:85:82:40:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a764d8d3ae725b45e0d4807f612ec3d1f2a3f4f
Validity
Not Before: Jun 28 15:01:05 2025 GMT
Not After : Jun 29 15:01:05 2025 GMT
Subject: CN=791346ca9a56fca541d122be1261c27ddd27345a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f7:48:4e:4a:99:8c:22:fc:43:ef:79:fe:28:
51:b9:23:05:de:56:41:22:98:a7:b6:f7:32:5b:eb:
aa:6c:01:86:cd:be:71:a8:4e:7f:4f:9c:bb:02:c4:
8a:32:f8:ea:65:6d:93:d8:f3:a3:8b:3e:bc:18:9a:
62:3c:62:56:33:99:59:df:4d:98:d3:98:eb:93:df:
6a:90:2d:4f:19:dd:7d:8b:3c:fe:07:c3:05:79:2e:
31:4e:9f:bb:33:5e:1c:d0:69:d3:bf:8b:91:d6:bf:
ad:9a:cc:07:0e:f5:50:e0:4b:03:f4:68:0f:4e:28:
da:fe:81:cf:b4:dd:cb:0d:c2:f7:8b:7e:c9:a1:1d:
0a:71:a2:82:51:09:23:12:96:4f:ab:b1:4f:7b:c9:
fe:86:46:fc:e8:05:92:a5:f8:35:14:61:02:9b:1f:
d9:34:d2:f2:fb:60:c7:14:43:c4:0e:de:cc:b2:dd:
c3:0e:e6:d1:c7:6e:32:2c:a1:c2:6e:b8:c8:5c:33:
b0:ac:ee:28:0f:be:bb:8b:86:8c:5a:85:4e:7a:02:
a0:1f:5b:fa:e7:57:51:94:5d:de:29:8c:c1:7c:e8:
04:88:67:f4:31:bd:cf:13:54:c8:25:dd:e6:13:ca:
7a:ff:c3:36:b3:db:69:14:8c:54:4d:a8:e8:4f:1a:
71:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:13:46:CA:9A:56:FC:A5:41:D1:22:BE:12:61:C2:7D:DD:27:34:5A
X509v3 Authority Key Identifier:
keyid:9A:76:4D:8D:3A:E7:25:B4:5E:0D:48:07:F6:12:EC:3D:1F:2A:3F:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnZNjTrnJbReDUgH9hLsPR8qP08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:1f:a1:88:fc:1d:69:e2:91:e4:36:45:19:4b:9a:db:f2:77:
e0:42:96:9e:ec:ec:a8:ba:ab:fd:84:5e:78:99:9f:e5:d0:50:
12:a4:49:65:7e:cf:a7:74:3e:46:28:4d:7f:b9:c4:f2:94:76:
ef:97:80:90:5b:c2:c0:8f:4d:23:30:bd:81:b5:98:7c:b7:40:
9c:a7:b2:2c:cf:c8:50:1f:ca:58:ba:1b:7d:44:94:14:48:51:
09:36:f5:65:03:46:44:61:48:c6:2d:f5:cf:46:8b:3c:26:84:
3d:1a:32:a4:f4:17:1b:f1:ca:19:bd:e0:52:14:17:58:7a:5b:
aa:77:95:2a:b1:be:4e:06:e5:72:3e:ab:60:5f:57:b2:50:0d:
6a:2e:6c:7e:be:ab:f2:59:c7:c6:5a:fb:d4:38:f3:a4:e1:62:
c5:d1:4f:e0:57:0d:ad:ba:fa:b6:b3:22:72:ba:36:b7:1c:67:
27:f3:47:35:9c:b0:38:c0:04:c1:2d:78:db:0c:11:2f:aa:ad:
e0:6d:b6:34:fe:8c:b3:38:55:ad:cd:a9:86:1d:7f:7c:00:2f:
c3:fe:e3:05:ff:cf:36:47:60:e2:1e:f2:8d:29:51:14:9f:f6:
8b:e7:e3:c9:59:b0:a9:e5:bb:17:31:55:cb:e1:43:0f:ac:2b:
65:c0:29:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:55:45 2025 by rpki-client