Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft
File: MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft (raw, json)
Hash identifier: 4DYhhRmKuHQL9ChJ+j0/ARc+Iu67ew6ZWvSyEbuYfqI=
Subject key identifier: 5F:04:70:CA:54:A8:DB:D1:3F:FA:7F:EF:24:6E:2E:5A:D0:E8:33:76
Authority key identifier: 32:7C:E6:4A:CE:02:CC:D3:30:CE:EF:98:D0:5D:F0:FB:20:31:7A:91
Certificate issuer: /CN=327ce64ace02ccd330ceef98d05df0fb20317a91
Certificate serial: 0198D404E9843BFF7FCD0B34260942B5B4D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MnzmSs4CzNMwzu-Y0F3w-yAxepE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft
Manifest number: 1649
Signing time: Fri 22 Aug 2025 23:02:28 +0000
Manifest this update: Fri 22 Aug 2025 23:02:28 +0000
Manifest next update: Sat 23 Aug 2025 23:02:28 +0000
Files and hashes: 1: MnzmSs4CzNMwzu-Y0F3w-yAxepE.crl (hash: Nk/JdfNma+HP1GTAdgQ7gCCOfWtWs7TQMKLqPTcOYog=)
2: wPSm9MaczVOfJa8MmydVyNm05v8.roa (hash: EUTCJOzuqY4YxOtOde7m5gFxrTBwquCzBL62eKVTyyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MnzmSs4CzNMwzu-Y0F3w-yAxepE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:e9:84:3b:ff:7f:cd:0b:34:26:09:42:b5:b4:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=327ce64ace02ccd330ceef98d05df0fb20317a91
Validity
Not Before: Aug 22 23:02:28 2025 GMT
Not After : Aug 23 23:02:28 2025 GMT
Subject: CN=5f0470ca54a8dbd13ffa7fef246e2e5ad0e83376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:89:0d:f4:25:d7:34:de:e1:3f:d2:c0:60:b0:
7b:4b:e0:67:5e:1d:73:0f:03:7e:4b:78:6c:38:b9:
bd:7f:16:c7:1c:ff:b7:09:25:34:1a:1b:37:6c:86:
49:41:20:a6:6c:1a:de:fa:03:33:9b:77:ae:4a:bb:
e6:bd:a5:92:b9:0a:b4:d0:11:29:a9:41:47:d7:fe:
47:7b:41:f5:d5:13:d2:94:b6:04:9c:ad:d0:02:1e:
1d:87:16:8c:30:31:b5:27:79:da:1d:84:59:c0:29:
30:99:13:75:5e:7b:89:ce:d7:d2:9d:10:dd:28:1e:
60:cf:a2:c6:0f:39:ef:02:74:b2:4f:ab:67:3b:d3:
8e:79:6f:0d:44:9d:d8:a8:36:22:1f:a7:1f:94:f1:
af:4e:20:b7:4c:a2:d0:c3:73:2d:ea:7e:c0:e6:03:
aa:37:52:0d:8e:44:5a:b0:80:db:e5:06:78:cb:8e:
f3:c5:c2:35:0e:1d:36:97:a6:a2:8b:09:5d:97:d7:
5e:6b:7e:c9:3d:77:73:42:41:7a:3c:b1:8a:57:7b:
55:d0:e5:b7:df:62:35:2e:49:0b:4b:c6:7c:8a:4f:
9e:87:cd:32:47:4b:82:bb:c9:52:6d:68:8c:24:4d:
05:cf:47:e8:1a:f3:3b:66:a6:12:e9:a8:3c:ce:96:
e9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:04:70:CA:54:A8:DB:D1:3F:FA:7F:EF:24:6E:2E:5A:D0:E8:33:76
X509v3 Authority Key Identifier:
keyid:32:7C:E6:4A:CE:02:CC:D3:30:CE:EF:98:D0:5D:F0:FB:20:31:7A:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnzmSs4CzNMwzu-Y0F3w-yAxepE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:be:05:00:25:96:bb:b6:32:3c:04:6d:f5:56:33:0c:b3:59:
31:ef:2b:44:61:82:25:34:f6:d5:65:8b:e0:c6:1c:06:bc:54:
89:bd:8f:dc:c6:09:55:e8:37:83:51:6a:7c:9c:48:3c:71:25:
3d:6e:4b:38:4b:76:4d:97:0b:60:08:57:53:af:8d:f1:60:c6:
b4:e9:5d:90:0b:9e:3a:a1:16:3e:b6:f8:37:1e:06:d9:c9:ef:
f5:78:57:2f:57:46:36:ec:1d:95:c2:71:c4:54:39:b4:b4:54:
f5:b0:db:ca:1d:ce:8d:53:c0:7f:90:23:23:c7:c5:34:97:f8:
80:52:cd:82:04:4b:31:84:f4:38:1b:00:00:7c:48:5f:6d:af:
43:bd:81:15:b0:7a:6a:f3:a8:b1:23:c3:0b:05:37:59:ef:18:
0a:bb:3d:ec:d7:78:b6:47:f6:90:88:16:32:21:6d:49:6e:b3:
22:eb:ff:c6:cc:5a:18:8b:41:cc:80:03:ff:b2:5c:ed:cf:3b:
0d:0d:0f:77:ff:37:b9:55:e4:c3:57:94:a1:11:be:bc:e9:84:
5c:81:96:4e:a9:31:9d:e8:76:87:5f:f1:40:b0:14:c8:34:f8:
6b:bc:38:6b:ff:ff:84:86:0b:39:c8:88:eb:49:54:b1:6e:cc:
4d:33:5d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:57 2025 by rpki-client