Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.mft
File: mnuajNgZ9KkgM01-cuwjQIcNd0k.mft (raw, json)
Hash identifier: DMbl9DeAQxZ2GW+5cL2lIA98pVkwewn07KBic6AB0pI=
Subject key identifier: 70:8B:9D:46:C4:FE:AC:5C:3D:94:18:76:7D:95:8F:89:E3:81:4D:AF
Authority key identifier: 9A:7B:9A:8C:D8:19:F4:A9:20:33:4D:7E:72:EC:23:40:87:0D:77:49
Certificate issuer: /CN=9a7b9a8cd819f4a920334d7e72ec2340870d7749
Certificate serial: 0199FC21C18B7DCB996A254D737C055AB90A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnuajNgZ9KkgM01-cuwjQIcNd0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.mft
Manifest number: 094D
Signing time: Sun 19 Oct 2025 11:01:34 +0000
Manifest this update: Sun 19 Oct 2025 11:01:34 +0000
Manifest next update: Mon 20 Oct 2025 11:01:34 +0000
Files and hashes: 1: IKlMOdkuHyBNZAexC-GSK-hjGW0.roa (hash: uA4Q2gsvRlV+sSD0ED9KoTfpAy2mm9Pd7yFqglVpNvQ=)
2: ksVbRwAzzCZHci4kH2kQ6u8coqY.roa (hash: QaqWPpVajjOVbtuXKzhecjPRXn+V4yoJpRPVeesXbzw=)
3: mnuajNgZ9KkgM01-cuwjQIcNd0k.crl (hash: A/XcBw5hF7IB1viSGRSIxtJ6TUuc1YIGKg3PPC9QHAI=)
4: uOUxSiBIbzpDJ7EaKMdYFnC-HEQ.roa (hash: P7xU7zipmmpWbMdR+tIYpEi0SHoYEWAWhVNCw2vAWTE=)
5: xH_26XIR8lPG36a6e_UAuv1nVvs.roa (hash: skoMmZjq1jRGHL/wRavlOMxLKJaRep20S4gGa/juF00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnuajNgZ9KkgM01-cuwjQIcNd0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:c1:8b:7d:cb:99:6a:25:4d:73:7c:05:5a:b9:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a7b9a8cd819f4a920334d7e72ec2340870d7749
Validity
Not Before: Oct 19 11:01:34 2025 GMT
Not After : Oct 20 11:01:34 2025 GMT
Subject: CN=708b9d46c4feac5c3d9418767d958f89e3814daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a8:a1:73:68:a6:c8:9f:fe:e6:76:f4:57:01:
99:1e:b8:ec:22:c1:4e:45:58:d9:4d:34:a4:19:3a:
e7:e6:7f:5e:bf:ae:55:db:df:7b:7f:13:84:20:19:
97:69:a7:2c:64:ed:ce:7c:f8:65:36:94:be:ad:45:
9c:03:7c:5b:8a:40:d0:6d:df:12:65:c6:f9:7e:8b:
08:c2:ef:e1:71:cd:24:14:33:b3:ce:aa:ec:c3:f0:
f0:39:6b:91:7c:bd:1d:69:7e:ec:b4:84:92:8c:ab:
51:37:c4:f4:b3:7b:7a:0e:3f:e2:65:ca:a6:4a:9e:
25:67:e1:59:c5:3a:ef:2b:41:2c:79:c1:29:b8:7a:
c1:b4:43:b3:21:c3:2a:68:fa:a5:86:5f:e4:5b:04:
ec:4b:c9:1f:8a:5d:82:17:86:38:12:4d:88:7c:6c:
16:08:5f:06:6b:11:58:7d:7b:6a:43:a1:69:af:cd:
6d:03:4a:08:f4:52:d4:d1:88:83:7a:fb:99:0d:fd:
4a:9c:17:40:ee:5a:a0:73:96:07:21:c1:f1:9c:1e:
a3:09:20:87:e9:ca:3f:29:b4:ba:02:45:3e:1d:70:
4e:1a:5b:31:19:a1:91:0f:a6:5b:45:5a:70:d7:d4:
6e:b7:d0:9e:9d:31:3b:04:d8:95:d6:3f:be:e7:34:
aa:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:8B:9D:46:C4:FE:AC:5C:3D:94:18:76:7D:95:8F:89:E3:81:4D:AF
X509v3 Authority Key Identifier:
keyid:9A:7B:9A:8C:D8:19:F4:A9:20:33:4D:7E:72:EC:23:40:87:0D:77:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnuajNgZ9KkgM01-cuwjQIcNd0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:e6:97:b6:23:a0:60:1a:05:c0:15:b9:7e:68:37:3c:38:23:
8c:3d:6c:8c:d4:0a:74:8d:c8:20:3f:4a:a5:28:ac:f0:f3:32:
d5:4e:ed:02:d6:cd:3c:82:3e:4b:f8:9d:ea:b7:de:12:6f:b8:
5d:3f:f0:d3:dd:2f:ac:1d:64:32:1b:93:05:10:7e:a4:e6:1c:
4c:04:b6:81:72:b8:66:e2:50:4c:d6:05:fa:89:4f:0e:c9:a9:
e5:c0:ed:9e:68:52:4a:51:6e:c7:68:3e:8c:87:a8:2d:28:d7:
fc:ab:82:75:b6:79:fb:e4:4f:1a:3a:7a:fd:1b:bf:ed:e9:78:
0e:50:ba:8d:f9:2e:ca:cf:98:bc:3e:0d:b9:74:5e:2c:ef:dd:
4e:0d:16:84:fb:20:94:45:d3:da:27:03:31:58:d1:3f:6e:b6:
22:c3:b1:63:95:69:41:bf:15:32:eb:62:0a:24:1f:b2:2c:f9:
aa:31:c4:73:b6:86:ef:25:0f:b1:e5:3e:a7:4c:aa:85:db:fc:
7e:0c:91:57:11:17:e3:0f:63:5c:9d:f2:68:f6:8f:b6:15:81:
cf:8b:f7:0e:95:f4:90:5b:d3:52:01:f6:f2:72:19:8d:59:40:
10:79:b9:28:e3:86:d0:5c:52:6e:6e:56:15:b0:5a:bb:2d:94:
9b:1c:ac:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:22 2025 by rpki-client