Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.mft
File: Mn2iLLkBOLBQg37c8ew2pauMQqw.mft (raw, json)
Hash identifier: BFSI/4VhfImMDjA001nnpI+Mjmq9oODECrrPMH/7j9I=
Subject key identifier: 49:F3:B8:F3:AF:7F:97:3B:2C:D0:BE:F0:DC:A0:83:B3:3E:3A:50:AF
Authority key identifier: 32:7D:A2:2C:B9:01:38:B0:50:83:7E:DC:F1:EC:36:A5:AB:8C:42:AC
Certificate issuer: /CN=327da22cb90138b050837edcf1ec36a5ab8c42ac
Certificate serial: 0198D6CCDB73F7E224DCF716C4CB36A3E14D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mn2iLLkBOLBQg37c8ew2pauMQqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.mft
Manifest number: 12A9
Signing time: Sat 23 Aug 2025 12:00:06 +0000
Manifest this update: Sat 23 Aug 2025 12:00:06 +0000
Manifest next update: Sun 24 Aug 2025 12:00:06 +0000
Files and hashes: 1: Mn2iLLkBOLBQg37c8ew2pauMQqw.crl (hash: dg4vl5XpXgZH7oFX8UsY9WZ9if5KusIGrEGfHmYKFG8=)
2: Ws-3to11mYQT65QlLPSv_a64Aow.roa (hash: bLLs3zCR6QgpvfFD4PT4W3Xh5DmPnAizoHMgUfONgYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mn2iLLkBOLBQg37c8ew2pauMQqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cc:db:73:f7:e2:24:dc:f7:16:c4:cb:36:a3:e1:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=327da22cb90138b050837edcf1ec36a5ab8c42ac
Validity
Not Before: Aug 23 12:00:06 2025 GMT
Not After : Aug 24 12:00:06 2025 GMT
Subject: CN=49f3b8f3af7f973b2cd0bef0dca083b33e3a50af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a4:d1:98:99:f0:2f:29:92:ed:2f:e7:24:26:
3d:99:94:ce:18:da:a4:a8:15:d1:b3:2d:bb:ae:82:
3b:0f:29:48:62:25:d2:34:25:da:58:1f:ce:08:38:
3e:dc:48:7f:ac:53:ae:44:18:d2:e5:17:5f:f0:ba:
8b:1f:a5:c7:ce:24:b6:82:94:e2:44:9d:3d:8b:28:
18:d4:6d:15:9a:21:68:61:9c:58:a6:6d:33:14:d5:
bd:d3:ba:da:95:a8:85:db:c7:2a:34:6f:e8:c8:33:
0f:5c:e5:bc:c3:ee:3b:17:6e:f8:59:d5:66:de:2d:
b5:d3:52:03:3b:74:b2:8c:75:ca:a0:b2:85:1d:72:
28:26:26:cd:64:6a:80:10:67:45:ff:a8:df:cb:d7:
f6:e6:5d:70:d9:9d:a0:80:2a:b9:4d:0e:dc:e2:d7:
75:fb:78:4a:8e:f3:ba:9e:5a:04:82:a1:77:8a:20:
d5:70:51:5a:58:a4:f4:7d:cb:1d:eb:86:c5:fe:e7:
62:c8:55:cf:45:6a:ae:01:4d:f9:36:df:de:4c:76:
4e:dc:1f:29:de:fe:1b:8e:92:3b:54:80:16:dc:11:
5f:86:17:e2:bf:57:fa:78:a8:53:61:98:0b:cf:9e:
76:fb:72:ea:08:86:4f:66:1f:a8:4b:3a:2b:33:44:
26:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F3:B8:F3:AF:7F:97:3B:2C:D0:BE:F0:DC:A0:83:B3:3E:3A:50:AF
X509v3 Authority Key Identifier:
keyid:32:7D:A2:2C:B9:01:38:B0:50:83:7E:DC:F1:EC:36:A5:AB:8C:42:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mn2iLLkBOLBQg37c8ew2pauMQqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:8c:3d:0c:17:1a:79:de:41:d9:89:14:ae:93:71:3d:51:27:
7e:d5:f9:c4:0c:ae:a6:c9:86:1d:a1:53:2c:a4:b2:7d:f0:ad:
f3:b3:7e:35:40:f9:c0:11:b1:14:b7:42:2e:fe:ad:e8:17:b5:
d6:6b:df:7e:da:90:63:78:88:32:5a:94:af:51:76:65:35:78:
40:50:16:a2:b1:97:70:30:89:d0:b9:4e:7f:57:e3:8f:c8:f4:
3e:da:11:95:03:29:78:98:9a:91:07:6a:98:c3:37:da:be:ca:
b2:38:7a:9c:46:94:80:6b:0d:b4:78:bb:e4:1a:48:6d:8c:21:
b5:61:47:bd:85:33:66:dc:a3:07:46:66:41:75:2d:79:f1:75:
b2:c8:83:4e:a4:8d:3f:ea:6f:04:d8:9a:cc:8a:3f:db:50:91:
e6:55:f7:b2:ff:56:3f:98:45:48:ca:ba:86:99:58:3c:cb:7d:
e5:d4:09:47:06:93:39:a5:4f:72:61:a3:6f:d9:3d:66:d7:74:
3d:70:99:9c:ad:a5:6c:6d:19:0c:34:e2:e2:42:d0:94:3d:d4:
f6:19:bd:61:2a:49:d7:72:ff:b8:b5:cd:93:ae:06:27:9a:ca:
3d:e7:b3:ce:2e:1e:d7:f5:9d:0b:c8:0e:ed:ec:cb:15:69:d7:
ff:cf:56:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzNtz9+Ik3PcWxMs2o+FNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyN2RhMjJjYjkwMTM4YjA1MDgzN2VkY2YxZWMzNmE1YWI4
YzQyYWMwHhcNMjUwODIzMTIwMDA2WhcNMjUwODI0MTIwMDA2WjAzMTEwLwYDVQQD
Eyg0OWYzYjhmM2FmN2Y5NzNiMmNkMGJlZjBkY2EwODNiMzNlM2E1MGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaTRmJnwLymS7S/nJCY9mZTOGNqk
qBXRsy27roI7DylIYiXSNCXaWB/OCDg+3Eh/rFOuRBjS5Rdf8LqLH6XHziS2gpTi
RJ09iygY1G0VmiFoYZxYpm0zFNW907ralaiF28cqNG/oyDMPXOW8w+47F274WdVm
3i2101IDO3SyjHXKoLKFHXIoJibNZGqAEGdF/6jfy9f25l1w2Z2ggCq5TQ7c4td1
+3hKjvO6nloEgqF3iiDVcFFaWKT0fcsd64bF/udiyFXPRWquAU35Nt/eTHZO3B8p
3v4bjpI7VIAW3BFfhhfiv1f6eKhTYZgLz552+3LqCIZPZh+oSzorM0Qm9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEnzuPOvf5c7LNC+8Nygg7M+OlCvMB8GA1UdIwQY
MBaAFDJ9oiy5ATiwUIN+3PHsNqWrjEKsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTW4yaUxMa0JPTEJRZzM3YzhldzJwYXVNUXF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC83MDA4ZmMtYWNjNC00ZWY1LThmYjkt
OTA3OTVmYjM5MjhjLzEvTW4yaUxMa0JPTEJRZzM3YzhldzJwYXVNUXF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC83MDA4ZmMtYWNjNC00ZWY1LThmYjktOTA3OTVmYjM5Mjhj
LzEvTW4yaUxMa0JPTEJRZzM3YzhldzJwYXVNUXF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk4w9DBca
ed5B2YkUrpNxPVEnftX5xAyupsmGHaFTLKSyffCt87N+NUD5wBGxFLdCLv6t6Be1
1mvfftqQY3iIMlqUr1F2ZTV4QFAWorGXcDCJ0LlOf1fjj8j0PtoRlQMpeJiakQdq
mMM32r7Ksjh6nEaUgGsNtHi75BpIbYwhtWFHvYUzZtyjB0ZmQXUtefF1ssiDTqSN
P+pvBNiazIo/21CR5lX3sv9WP5hFSMq6hplYPMt95dQJRwaTOaVPcmGjb9k9Ztd0
PXCZnK2lbG0ZDDTi4kLQlD3U9hm9YSpJ13L/uLXNk64GJ5rKPeezzi4e1/WdC8gO
7ezLFWnX/89WFg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:41:36 2025 by rpki-client