Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
File: mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft (raw, json)
Hash identifier: Qmxzl9B8qu5/BMB3SQvsVYEVLE3+4GL2VrdJ6if0AjE=
Subject key identifier: CB:D0:3C:63:FE:42:CE:1D:90:2C:02:D3:8A:B6:54:35:B0:5C:A4:2B
Authority key identifier: 98:C9:C3:18:9B:EC:13:79:31:1B:D1:35:3F:A9:74:9A:68:DD:99:2D
Certificate issuer: /CN=98c9c3189bec1379311bd1353fa9749a68dd992d
Certificate serial: 0199FDD91FD4817C190F7241C39A4340F3B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
Manifest number: 0AAC
Signing time: Sun 19 Oct 2025 19:01:28 +0000
Manifest this update: Sun 19 Oct 2025 19:01:28 +0000
Manifest next update: Mon 20 Oct 2025 19:01:28 +0000
Files and hashes: 1: 30qNUm4LVV2JzJAozjpjCljWLl8.roa (hash: xrG/y+AM3EYc5/EtWlaqcCc/K9J1cl96ejgIPJZYD9U=)
2: Z6_bYbvmyerAM_VgnIaDcW67oTI.roa (hash: QWDvfYg2hEe0SCxsF7DniMhJuC7NKbaUI8wFEj7S2ns=)
3: mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl (hash: axCy3GFeAZNnmlQpbRvRcfCxvorPoHbF0xjXLq2FjnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:1f:d4:81:7c:19:0f:72:41:c3:9a:43:40:f3:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98c9c3189bec1379311bd1353fa9749a68dd992d
Validity
Not Before: Oct 19 19:01:28 2025 GMT
Not After : Oct 20 19:01:28 2025 GMT
Subject: CN=cbd03c63fe42ce1d902c02d38ab65435b05ca42b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b4:9b:b2:8c:91:41:89:1b:ca:29:23:3d:c3:
d8:eb:9d:3f:1f:45:5f:80:d1:ef:3b:8e:be:d8:5e:
e6:46:08:1d:6f:31:ce:9e:d7:a1:6d:64:a0:17:87:
da:82:91:a8:61:f2:f8:23:b0:12:35:57:ed:c5:00:
92:5f:32:25:fe:78:38:b2:81:d1:1f:a0:af:5c:5b:
f3:5c:2d:19:ce:d4:01:bf:a5:27:31:2e:81:3f:f6:
58:bb:68:96:ae:0f:f2:be:87:d6:2a:aa:a1:67:7f:
ce:75:87:45:d7:fb:5d:0c:94:90:5d:da:4c:62:6b:
2c:11:9a:55:cf:a4:84:2f:9b:8c:6c:bb:02:a5:a8:
c7:5d:e2:29:9e:50:f8:af:f9:46:68:10:df:a3:c4:
b4:fc:cf:9a:a8:46:ca:97:46:73:bc:a6:6b:25:db:
1b:de:56:02:0a:e7:ac:ef:d7:e2:f0:20:27:66:94:
e5:29:5a:67:b7:ba:2f:59:88:60:a3:0f:45:0c:50:
26:81:30:1f:28:32:17:39:28:69:ad:db:ad:f0:35:
0d:f5:bf:30:17:99:93:b8:26:29:1a:35:c6:47:b2:
f1:a8:1f:bc:30:e8:9a:b8:71:12:62:dc:00:8f:ba:
ff:c6:8c:eb:e5:f2:7d:56:9e:0a:dd:b6:5e:8c:6a:
12:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D0:3C:63:FE:42:CE:1D:90:2C:02:D3:8A:B6:54:35:B0:5C:A4:2B
X509v3 Authority Key Identifier:
keyid:98:C9:C3:18:9B:EC:13:79:31:1B:D1:35:3F:A9:74:9A:68:DD:99:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:88:83:0f:a3:e3:33:07:0c:74:3d:c8:22:68:79:cc:62:76:
0c:b6:55:61:47:ae:2d:5a:1f:f0:e4:23:99:c7:45:04:60:fb:
17:5f:9c:32:42:75:c1:94:b2:53:bd:8e:57:f0:cf:63:90:07:
32:7e:3a:77:60:ed:6a:7f:04:dc:3c:b9:16:a3:9b:90:97:66:
46:8e:9e:ab:d1:d3:e4:cd:d4:ce:81:d6:c5:ea:ca:89:8e:b4:
3d:b9:d5:50:55:77:55:94:ca:bd:55:c2:eb:09:e8:f0:0a:02:
08:4f:78:eb:a1:23:97:57:7b:db:6c:7f:28:da:54:a2:78:aa:
92:da:f5:51:3b:b7:46:8a:0c:5c:a3:30:b0:09:02:d9:be:dd:
86:c3:3a:cf:30:2b:33:66:6f:a3:0e:61:e5:ae:70:2b:08:59:
c8:d6:98:70:02:ca:32:2e:0a:7a:78:71:1c:e7:7e:dc:bb:8e:
6b:ff:76:1b:e3:d7:bf:0d:bb:08:84:69:d3:7b:d6:81:65:ec:
e0:76:d4:14:e7:3d:37:2b:56:71:ab:00:23:b9:17:d6:88:4a:
aa:d2:13:a6:f2:45:fa:f1:89:77:63:db:a1:7e:51:9b:17:7d:
0e:fd:1c:40:67:da:5b:32:fa:1f:a1:be:91:d6:3f:59:cb:4a:
36:d7:b2:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:52:31 2025 by rpki-client