Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.mft
File: MnBggp7MaE-ln4VaoKSEAbwX8tE.mft (raw, json)
Hash identifier: QjUVYr2JhdUAE6QGod+BAHnbbLe9opCZzGyqIpDAbgw=
Subject key identifier: 20:AE:11:EB:7C:E2:FC:17:3E:49:98:57:06:07:AC:8E:B3:61:F6:96
Authority key identifier: 32:70:60:82:9E:CC:68:4F:A5:9F:85:5A:A0:A4:84:01:BC:17:F2:D1
Certificate issuer: /CN=327060829ecc684fa59f855aa0a48401bc17f2d1
Certificate serial: 0198D6615515DE5DCB19171C38284B55591C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MnBggp7MaE-ln4VaoKSEAbwX8tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.mft
Manifest number: 05B4
Signing time: Sat 23 Aug 2025 10:02:39 +0000
Manifest this update: Sat 23 Aug 2025 10:02:39 +0000
Manifest next update: Sun 24 Aug 2025 10:02:39 +0000
Files and hashes: 1: MnBggp7MaE-ln4VaoKSEAbwX8tE.crl (hash: fdoy1k5JH6Km1Im43iDHTKomcS1nd44/uLdQXKuZajQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MnBggp7MaE-ln4VaoKSEAbwX8tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:55:15:de:5d:cb:19:17:1c:38:28:4b:55:59:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=327060829ecc684fa59f855aa0a48401bc17f2d1
Validity
Not Before: Aug 23 10:02:39 2025 GMT
Not After : Aug 24 10:02:39 2025 GMT
Subject: CN=20ae11eb7ce2fc173e4998570607ac8eb361f696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b4:76:68:bb:fb:94:3c:65:cd:d3:df:33:83:
b5:99:3c:0e:f8:6d:84:b2:73:62:0a:ea:a7:47:aa:
88:99:80:a6:11:d1:ff:08:f2:eb:cf:2a:15:3c:68:
12:f7:6a:06:6a:32:c9:b1:83:c8:d7:fa:ae:89:89:
b9:f7:8e:63:ed:cb:bf:b0:7b:05:22:32:5a:c0:09:
5e:be:ab:da:0e:74:31:80:1a:a1:97:06:d0:8b:78:
63:27:3d:51:37:5b:9f:be:92:11:9e:d3:8f:40:fb:
ec:01:25:3e:f7:bd:a7:91:68:03:d2:91:27:6a:3e:
89:ff:43:fb:86:52:03:4b:47:9b:e2:c0:99:65:37:
23:fc:7d:e3:60:70:8d:cf:d5:43:48:f8:7e:d8:76:
52:6c:f8:3a:87:b9:09:ac:06:17:a0:da:38:99:21:
e5:cc:be:72:66:65:85:97:d0:07:aa:65:b0:4e:1b:
e1:29:c6:4f:88:14:68:0b:c8:7c:7b:44:cb:97:5a:
93:d0:41:c2:89:d6:63:f5:a4:0f:84:20:35:c7:f8:
18:6b:ed:6c:fc:16:b0:08:8f:88:bd:99:61:ca:c3:
ef:04:e2:f6:f8:1b:d4:91:95:85:24:d1:d8:0e:1e:
b3:ea:77:06:22:90:dd:8f:7a:f4:8c:ae:e4:23:5f:
cc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:AE:11:EB:7C:E2:FC:17:3E:49:98:57:06:07:AC:8E:B3:61:F6:96
X509v3 Authority Key Identifier:
keyid:32:70:60:82:9E:CC:68:4F:A5:9F:85:5A:A0:A4:84:01:BC:17:F2:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnBggp7MaE-ln4VaoKSEAbwX8tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ab:70:b5:13:cc:3b:54:cd:b3:03:6f:0f:be:00:07:9b:66:
58:af:2c:ae:27:ea:55:e5:86:62:1e:e9:55:43:43:40:e9:0a:
35:b4:a4:11:3d:4f:68:16:6e:b3:47:3d:79:f6:5e:65:e6:1b:
af:48:59:ba:ac:5c:9c:94:0f:c3:d2:80:5e:57:59:dd:8a:3a:
68:4a:44:0f:71:08:32:18:18:d5:5c:9e:ef:ca:d6:29:19:63:
bf:8b:b1:7d:35:d4:06:22:bd:86:c3:f9:6f:66:82:b7:ef:35:
75:0c:28:c9:92:0b:da:6c:db:ea:c8:07:ab:67:03:49:0e:ba:
a9:4d:4e:74:1f:f4:18:13:0f:e1:10:ba:c3:96:10:86:2d:43:
4a:b4:a9:38:d1:ae:25:84:35:ef:bb:0c:09:7f:83:f8:82:09:
a7:dc:b7:18:19:3b:6e:a4:4f:bc:d9:74:2d:bf:76:de:0f:fc:
45:17:e4:8a:b8:0f:b1:4b:46:40:ca:62:97:7d:86:e9:80:4b:
d4:93:1b:73:58:74:e0:c8:48:17:ef:1f:17:1f:3a:65:e0:e2:
47:b0:80:50:70:a0:52:2d:d2:6b:0e:87:79:c1:e8:8d:58:17:
27:0d:eb:ee:f0:34:3e:9f:89:88:c5:df:01:68:ea:58:bb:53:
96:8b:30:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:45:07 2025 by rpki-client