Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft
File: mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft (raw, json)
Hash identifier: za3FsHb+9m1cIxB0i5ztPVRpHwry9DTLGEHWzArtaXs=
Subject key identifier: 2A:6D:73:E1:EF:32:16:EA:3C:24:84:7F:A4:A1:6F:EB:95:64:00:B6
Authority key identifier: 9A:72:7A:A6:E6:87:B4:92:D2:12:F4:51:DE:B8:61:EA:01:F1:75:29
Certificate issuer: /CN=9a727aa6e687b492d212f451deb861ea01f17529
Certificate serial: 0198D4E03D101C0B9A63384572509B1CDF38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnJ6puaHtJLSEvRR3rhh6gHxdSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft
Manifest number: 1241
Signing time: Sat 23 Aug 2025 03:02:02 +0000
Manifest this update: Sat 23 Aug 2025 03:02:02 +0000
Manifest next update: Sun 24 Aug 2025 03:02:02 +0000
Files and hashes: 1: mnJ6puaHtJLSEvRR3rhh6gHxdSk.crl (hash: EftTDf/aqWo47nRRAISiM+Lhly1kcM0aEApfKTjDGc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnJ6puaHtJLSEvRR3rhh6gHxdSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:3d:10:1c:0b:9a:63:38:45:72:50:9b:1c:df:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a727aa6e687b492d212f451deb861ea01f17529
Validity
Not Before: Aug 23 03:02:02 2025 GMT
Not After : Aug 24 03:02:02 2025 GMT
Subject: CN=2a6d73e1ef3216ea3c24847fa4a16feb956400b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ba:69:a7:89:55:4a:4a:40:02:40:af:1f:a1:
fe:44:5d:f4:d3:c7:b1:a3:7e:e9:d9:3b:6e:c3:27:
55:63:d9:27:d7:5e:08:ca:b4:84:5f:f4:2c:50:f5:
c3:83:dc:41:4e:9d:c4:e2:69:ac:7e:17:fb:71:bb:
bc:22:f0:55:fc:6e:10:59:64:65:ce:b9:ae:a6:59:
ee:78:aa:92:6f:a7:fc:bc:cb:23:de:a9:62:3c:79:
53:3f:0f:50:28:8b:ba:5f:ce:20:43:cc:ec:88:f3:
f5:8c:1e:cd:dc:b9:4a:a8:3f:0e:ce:78:bb:c3:8b:
6f:5b:54:67:4e:3f:35:33:1f:be:ea:f4:30:86:74:
43:14:55:ea:b5:18:92:bb:a7:57:01:85:40:0f:90:
a3:ad:56:f6:cd:f3:9d:ed:99:92:03:e4:70:87:0f:
12:a3:14:37:97:d4:d9:7e:1d:a3:6d:2d:b6:9e:0d:
e8:14:72:bc:0c:cd:ac:d4:28:e4:f4:ae:63:e3:15:
1b:9e:44:fa:59:22:0a:c6:31:8e:bf:5c:6f:c8:ab:
ef:3e:5d:50:ff:18:9b:2d:70:07:3c:8a:18:e8:99:
ab:f4:43:53:d3:27:bd:78:e8:0b:72:ef:da:39:7e:
51:5c:98:ca:f9:db:9d:ec:52:4e:6a:e3:d4:f9:dc:
5d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:6D:73:E1:EF:32:16:EA:3C:24:84:7F:A4:A1:6F:EB:95:64:00:B6
X509v3 Authority Key Identifier:
keyid:9A:72:7A:A6:E6:87:B4:92:D2:12:F4:51:DE:B8:61:EA:01:F1:75:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnJ6puaHtJLSEvRR3rhh6gHxdSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:e9:aa:5d:29:76:fb:19:89:b2:1c:e8:61:2b:9b:c3:5d:ce:
4f:0d:5f:3e:be:33:2e:e4:45:ec:f5:8d:33:39:e6:1c:9e:01:
11:5c:85:e2:2b:eb:ee:52:52:0f:b3:76:08:78:cf:42:91:27:
d1:e0:a1:b3:36:de:76:05:71:15:34:92:fc:3b:34:46:bf:05:
71:b9:ec:7b:eb:12:97:d8:fc:be:71:65:47:0e:11:b5:b0:0d:
ee:c3:aa:8a:89:b2:2f:76:f3:c1:99:fa:d0:17:dc:cc:4a:45:
9f:73:b1:10:55:f8:82:11:24:12:03:c4:d6:aa:ab:d0:dd:e3:
10:0b:ee:f8:ca:82:f9:b0:0f:cb:4b:4d:da:37:46:32:47:89:
d5:81:fa:c2:12:9f:7c:e5:ca:21:9f:75:0d:d3:c7:90:0c:e6:
50:01:52:5b:e8:8e:19:a1:bb:39:f9:21:99:62:5c:48:e0:98:
ee:0a:e1:b9:ca:17:21:40:91:8a:ae:9c:43:39:ba:90:dc:95:
b3:4b:6c:10:1b:e3:ff:75:2a:80:cb:3c:39:c3:3c:05:45:e9:
59:44:3d:ec:23:81:a6:23:7c:8b:84:18:db:9c:f6:62:f2:80:
25:75:06:ae:0c:05:c5:e9:56:a3:14:06:b3:23:fd:fc:93:02:
f6:39:9a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:34 2025 by rpki-client