Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
File: mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft (raw, json)
Hash identifier: qDHrUY+bO6EA6J+xfSBiQMiP/ZhCw+hSWE5RGyL5P4g=
Subject key identifier: E5:4E:0F:71:9E:31:D0:E6:3F:C7:93:91:64:A1:01:81:BE:6A:BB:60
Authority key identifier: 98:C9:C3:18:9B:EC:13:79:31:1B:D1:35:3F:A9:74:9A:68:DD:99:2D
Certificate issuer: /CN=98c9c3189bec1379311bd1353fa9749a68dd992d
Certificate serial: 0197C04952F576FE40C1A7D229FFDDDA4782
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
Manifest number: 0983
Signing time: Mon 30 Jun 2025 10:02:00 +0000
Manifest this update: Mon 30 Jun 2025 10:02:00 +0000
Manifest next update: Tue 01 Jul 2025 10:02:00 +0000
Files and hashes: 1: 30qNUm4LVV2JzJAozjpjCljWLl8.roa (hash: xrG/y+AM3EYc5/EtWlaqcCc/K9J1cl96ejgIPJZYD9U=)
2: Z6_bYbvmyerAM_VgnIaDcW67oTI.roa (hash: QWDvfYg2hEe0SCxsF7DniMhJuC7NKbaUI8wFEj7S2ns=)
3: mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl (hash: i4u+Db1x4H3mKHR6gHoxVUy5c7UtMyr7juj2HAvStSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 10:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:49:52:f5:76:fe:40:c1:a7:d2:29:ff:dd:da:47:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98c9c3189bec1379311bd1353fa9749a68dd992d
Validity
Not Before: Jun 30 10:02:00 2025 GMT
Not After : Jul 1 10:02:00 2025 GMT
Subject: CN=e54e0f719e31d0e63fc7939164a10181be6abb60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:96:68:d0:f2:75:e7:a7:42:d8:98:18:09:67:
a4:4e:49:94:63:2b:26:ff:28:e9:dc:0a:a3:80:47:
a7:94:05:38:95:de:ab:a0:85:cd:5a:7e:1c:88:9c:
c6:f1:64:63:9d:5b:b9:dd:05:73:f5:74:a0:29:ee:
8d:68:0d:17:9f:85:fc:4f:f7:65:90:b7:84:d2:10:
c9:60:88:01:4c:90:bb:35:52:b8:1b:07:78:c9:7a:
7b:b5:ad:cb:28:98:c1:77:a6:4b:38:e9:27:da:78:
f0:23:a5:83:df:da:90:a7:93:a2:c5:cd:6a:78:51:
43:ad:60:f7:4b:ac:99:82:6e:06:3e:d3:44:54:ff:
f7:45:9e:4a:e9:d7:ed:39:45:21:6c:d1:3f:6d:3e:
9f:d8:65:09:eb:ae:19:14:51:f9:0f:b1:41:09:b6:
21:74:f4:ad:6f:65:73:1b:8c:0a:49:dc:8f:4b:4e:
f2:c3:7e:3b:1c:c8:40:4f:d2:0a:35:0e:00:3e:a2:
c8:33:6a:41:5d:46:dc:2d:36:66:cd:6c:bc:de:c2:
4b:d3:73:2d:10:7c:9a:40:9c:62:c9:6a:c0:2a:b6:
f5:b3:d4:4f:7a:34:f5:c5:c8:10:c3:7d:d5:e8:51:
75:c2:98:70:06:51:ae:49:d7:0a:c2:29:1b:12:c9:
bf:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:4E:0F:71:9E:31:D0:E6:3F:C7:93:91:64:A1:01:81:BE:6A:BB:60
X509v3 Authority Key Identifier:
keyid:98:C9:C3:18:9B:EC:13:79:31:1B:D1:35:3F:A9:74:9A:68:DD:99:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:df:c4:ff:cf:dd:48:c8:63:5f:de:61:f1:23:6f:0b:d7:40:
dd:ac:c2:6d:97:d4:fb:d8:18:64:27:aa:50:0b:76:4a:1d:c2:
77:d6:b3:43:eb:26:03:33:a5:61:11:52:9c:48:d0:e5:e4:8f:
33:09:ad:b8:51:07:63:59:f0:cc:93:70:76:ac:4a:00:71:05:
fb:5b:5e:d4:89:66:81:e1:df:8c:96:c1:1b:df:2d:33:3c:f2:
0d:f1:95:1e:72:b3:77:66:50:3c:13:dc:9e:85:f6:30:2f:b9:
6b:ac:ba:cc:bd:21:b8:6c:90:03:ab:c8:dc:39:d4:02:95:8e:
16:4d:26:b2:be:1b:3c:26:83:54:02:c6:5d:9f:e5:55:90:66:
71:a6:85:de:75:00:ee:7b:5c:f7:7c:46:ba:8c:3e:91:06:d4:
32:c0:10:f4:33:17:23:19:df:89:27:66:f3:54:a7:87:f5:cb:
d9:9a:45:47:15:0a:e7:c7:a0:4d:39:24:9d:73:84:a2:08:3e:
9e:76:7d:d0:72:b8:4f:13:82:50:17:02:a7:ce:10:a0:7f:e8:
07:2e:29:e2:fe:1c:60:7a:e0:e1:c9:57:24:8d:f3:13:1f:cb:
98:91:40:11:0f:08:67:08:7c:f7:76:2b:88:e7:bd:95:1f:20:
73:86:2e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:40:06 2025 by rpki-client