Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft
File: mgNSX2jrayNfHeIrYLG67S_H_4M.mft (raw, json)
Hash identifier: RKjIRuYqAtdeMIgwXQ/aFcuGCjWFcd0NPSFe/n3rJKg=
Subject key identifier: CB:AD:B7:D8:22:48:2A:2F:EB:5D:C4:8A:3C:A2:7E:BC:24:96:BE:46
Authority key identifier: 9A:03:52:5F:68:EB:6B:23:5F:1D:E2:2B:60:B1:BA:ED:2F:C7:FF:83
Certificate issuer: /CN=9a03525f68eb6b235f1de22b60b1baed2fc7ff83
Certificate serial: 0198D4E091C4A9D04C12E3C9572118836459
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgNSX2jrayNfHeIrYLG67S_H_4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 03:02:23 +0000
Manifest this update: Sat 23 Aug 2025 03:02:23 +0000
Manifest next update: Sun 24 Aug 2025 03:02:23 +0000
Files and hashes: 1: mgNSX2jrayNfHeIrYLG67S_H_4M.crl (hash: KBsl+S2q2MzylR+y8XDeEJ8a9lDCzrzuLPWT0AXVICA=)
2: xV2TYyNPjWPupKmb43ad00Tt3n8.roa (hash: +ey9CZvGJrxa71wfksSgu55Jb8r1NMsse9tFxoel7Ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/mgNSX2jrayNfHeIrYLG67S_H_4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:91:c4:a9:d0:4c:12:e3:c9:57:21:18:83:64:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a03525f68eb6b235f1de22b60b1baed2fc7ff83
Validity
Not Before: Aug 23 03:02:23 2025 GMT
Not After : Aug 24 03:02:23 2025 GMT
Subject: CN=cbadb7d822482a2feb5dc48a3ca27ebc2496be46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:31:73:f1:ec:bf:bc:11:d8:b4:91:40:70:f2:
26:3f:a0:c2:43:2b:41:6b:89:32:f6:8a:96:b6:dc:
46:3b:5f:7e:2f:a4:3c:31:bd:17:85:27:7c:f0:90:
f2:75:13:65:f1:ef:ca:e2:7f:e1:8c:68:03:80:83:
53:e3:40:4d:91:1f:d8:de:d0:0a:4e:41:27:23:e4:
24:26:cb:f7:24:c9:12:b5:81:b9:b2:0c:fa:72:41:
1e:b7:f5:8b:94:14:c4:9d:a7:e5:5f:fe:e8:6b:55:
ca:7e:97:f4:67:cb:49:48:6f:c1:d2:d3:b0:d4:a8:
54:13:b6:e7:d8:43:85:cc:b8:3f:7e:23:c6:e0:15:
35:4f:e6:da:98:e8:16:81:f6:58:aa:ed:d9:d5:a2:
0f:82:e1:f1:96:7c:a8:fb:64:39:2b:33:26:f7:4d:
89:7a:a5:85:d5:bf:25:9d:08:26:2f:49:ba:90:26:
e1:fa:4d:3e:37:09:42:2e:16:46:d5:f3:b0:07:de:
b7:f4:99:70:61:9f:e9:84:f8:6f:01:ed:46:0c:cd:
49:9c:11:01:a5:66:76:0a:d0:d8:86:0e:a1:05:15:
79:9e:1e:5c:67:bf:9b:11:9d:41:3d:4f:a1:d2:da:
fc:31:59:ee:4e:06:84:66:04:d8:75:f4:d6:d6:3d:
cc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AD:B7:D8:22:48:2A:2F:EB:5D:C4:8A:3C:A2:7E:BC:24:96:BE:46
X509v3 Authority Key Identifier:
keyid:9A:03:52:5F:68:EB:6B:23:5F:1D:E2:2B:60:B1:BA:ED:2F:C7:FF:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgNSX2jrayNfHeIrYLG67S_H_4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ec:52:08:fc:37:70:4f:ec:90:ab:5f:3a:34:ab:66:cc:9f:
64:8d:48:57:b1:cd:ab:69:7f:bb:83:d9:67:29:15:53:37:42:
13:b4:a4:3b:6b:be:9f:61:ec:f2:a3:ff:71:61:94:f7:75:66:
92:e2:fa:f1:c4:e4:bf:09:fa:42:ec:63:38:40:cb:bf:62:8e:
ee:66:37:57:a7:b6:d9:10:62:30:74:bf:81:05:28:91:86:a6:
2e:7c:75:d2:b8:3f:e7:ed:67:c0:ae:0d:e7:c7:78:05:d1:de:
1a:10:45:03:ce:03:44:f9:d2:72:bd:0f:77:23:0d:10:fd:17:
61:5e:dd:b0:2d:bd:8f:a2:ce:f6:ba:17:c8:bd:32:07:40:f6:
cc:a7:36:ce:0c:b3:14:42:f5:2b:e0:56:ce:4e:01:ae:25:72:
67:08:5e:9c:53:a7:48:ec:10:09:32:77:8d:e1:51:bd:ae:5f:
aa:fd:5f:e0:b6:b7:d1:2a:af:d8:0f:74:74:18:96:0b:3b:00:
74:a4:92:a9:d1:36:51:98:12:ca:71:67:a3:4d:3f:fe:06:75:
3f:ed:a0:f8:9e:90:91:35:10:74:56:75:4b:90:a7:74:ec:3d:
fe:d0:db:a4:3b:40:49:f2:9b:b8:9a:b8:20:a0:bc:65:97:f4:
66:e1:1e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:48 2025 by rpki-client