Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
File: mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft (raw, json)
Hash identifier: M5saC6ur1VHoMbJyxnc3wr+34pcwMlQlX0l70SomLFw=
Subject key identifier: 1F:A0:39:4F:F7:6C:6B:45:03:74:6E:B5:2F:AC:84:1E:FA:F5:CB:D7
Authority key identifier: 98:C9:C3:18:9B:EC:13:79:31:1B:D1:35:3F:A9:74:9A:68:DD:99:2D
Certificate issuer: /CN=98c9c3189bec1379311bd1353fa9749a68dd992d
Certificate serial: 0198D660519D1EDD910CA62F3CDF85A8807F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
Manifest number: 0A13
Signing time: Sat 23 Aug 2025 10:01:33 +0000
Manifest this update: Sat 23 Aug 2025 10:01:33 +0000
Manifest next update: Sun 24 Aug 2025 10:01:33 +0000
Files and hashes: 1: 30qNUm4LVV2JzJAozjpjCljWLl8.roa (hash: xrG/y+AM3EYc5/EtWlaqcCc/K9J1cl96ejgIPJZYD9U=)
2: Z6_bYbvmyerAM_VgnIaDcW67oTI.roa (hash: QWDvfYg2hEe0SCxsF7DniMhJuC7NKbaUI8wFEj7S2ns=)
3: mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl (hash: Oc6oD9mWXbP5c/mK/xf+gc5xtehbIX1i+6x87ltoKAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:51:9d:1e:dd:91:0c:a6:2f:3c:df:85:a8:80:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98c9c3189bec1379311bd1353fa9749a68dd992d
Validity
Not Before: Aug 23 10:01:33 2025 GMT
Not After : Aug 24 10:01:33 2025 GMT
Subject: CN=1fa0394ff76c6b4503746eb52fac841efaf5cbd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:93:0a:fe:95:7d:0a:a5:d2:87:9d:95:21:05:
02:32:7a:95:8f:e9:3a:d4:16:8e:56:d8:7b:ef:e5:
4d:0a:d4:96:75:8e:07:3a:bd:bf:8d:da:32:1e:71:
63:a0:30:95:5a:1f:92:d4:c9:69:03:e7:c7:12:64:
ab:c9:54:cf:6a:b4:c9:94:4c:d7:69:d8:a3:0f:d8:
af:1a:b6:e1:58:dd:52:b2:30:ee:90:e8:ce:f3:e5:
ff:ea:4e:5d:37:fc:6e:70:60:8a:5c:0c:b5:b4:d4:
fc:67:cd:28:86:30:0b:53:24:67:a3:c3:6c:03:f6:
ae:63:05:d6:03:07:c8:ee:8e:e9:e2:e8:e8:9c:f8:
05:88:0f:fc:37:ba:e3:71:24:a3:76:08:a8:27:4d:
20:88:70:a2:95:7d:fd:b0:1c:ab:f0:08:ad:93:b7:
14:41:c7:00:64:a5:79:38:89:9c:34:61:29:e8:b4:
58:e1:3b:c4:18:96:37:b5:2f:8a:9f:d3:67:ee:09:
97:7b:58:b9:5a:ac:e5:8b:18:b1:12:26:2d:4a:8b:
0a:1b:f5:ac:77:d5:4f:82:e1:09:2e:0e:3f:3b:d0:
dd:fa:95:24:58:dd:59:73:58:82:de:dc:51:bf:62:
27:8f:b7:32:d5:a4:2e:e7:91:96:33:06:e8:ed:90:
21:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A0:39:4F:F7:6C:6B:45:03:74:6E:B5:2F:AC:84:1E:FA:F5:CB:D7
X509v3 Authority Key Identifier:
keyid:98:C9:C3:18:9B:EC:13:79:31:1B:D1:35:3F:A9:74:9A:68:DD:99:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:a5:ed:f5:10:a8:70:10:d8:66:34:c0:27:53:eb:4d:b9:3a:
91:74:83:0f:d3:1f:db:f4:1f:b2:e0:46:47:3b:c2:02:ad:83:
b1:b9:aa:e7:7c:18:d0:27:4c:9c:fe:58:21:e9:8c:c7:b4:61:
36:1b:4e:a8:cf:e5:04:4e:47:89:3c:0b:eb:35:dd:01:cb:b0:
4f:c3:50:bb:57:fc:99:bc:51:d8:5f:cd:7f:48:37:65:8c:f0:
4f:e0:7e:2b:46:9a:57:9c:f6:47:4a:80:ad:3d:b9:c2:37:be:
2f:15:e8:52:03:db:b1:31:07:2d:55:be:6b:82:7f:1c:3f:6e:
d4:10:1b:a8:13:ff:5b:4d:18:b4:85:dd:aa:71:79:66:be:60:
36:2d:3d:e0:22:2c:11:f7:66:7c:d9:a4:39:8a:9a:37:3c:14:
66:0a:90:9c:58:12:15:d6:16:f9:e3:76:4a:e5:b2:e4:13:af:
86:e5:d1:17:57:c5:29:64:ee:e0:ee:d4:01:95:cf:ef:ee:30:
f7:24:ec:4c:e2:a2:46:e4:51:ef:3c:d1:f0:3e:2f:e1:55:d0:
e4:70:9f:13:f3:f8:8a:80:32:a4:6f:91:4c:f4:7f:b3:32:dd:
a2:b7:2f:35:bc:e9:01:b9:74:ef:ac:44:fd:b6:32:ba:1c:92:
2d:27:ba:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:53 2025 by rpki-client