Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.mft
File: mNZvua2ttqkFe_YKqj_1LGZUBBg.mft (raw, json)
Hash identifier: gmd+PJc/4cB1PcWvKxdfBXXgi8fShxjKLZuRGZFqBHM=
Subject key identifier: B8:7B:9F:98:12:1E:1D:83:38:CC:7B:4E:0D:C8:BD:BC:8A:C5:D9:80
Authority key identifier: 98:D6:6F:B9:AD:AD:B6:A9:05:7B:F6:0A:AA:3F:F5:2C:66:54:04:18
Certificate issuer: /CN=98d66fb9adadb6a9057bf60aaa3ff52c66540418
Certificate serial: 0198D69804E398575DAE65E639B952FDC804
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mNZvua2ttqkFe_YKqj_1LGZUBBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.mft
Manifest number: 0BA2
Signing time: Sat 23 Aug 2025 11:02:23 +0000
Manifest this update: Sat 23 Aug 2025 11:02:23 +0000
Manifest next update: Sun 24 Aug 2025 11:02:23 +0000
Files and hashes: 1: 7j9uxnJfVl55LcxAf_fr4i2drjY.roa (hash: 7whaNaNl7Pm7UlaWsp36rTim4yAY8fmMQU6Aiv7KQCs=)
2: mNZvua2ttqkFe_YKqj_1LGZUBBg.crl (hash: a0QBEJMbLSwCYqzx4UVHPYs5NwVAhzOBOSYroKk5+YI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mNZvua2ttqkFe_YKqj_1LGZUBBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:04:e3:98:57:5d:ae:65:e6:39:b9:52:fd:c8:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98d66fb9adadb6a9057bf60aaa3ff52c66540418
Validity
Not Before: Aug 23 11:02:23 2025 GMT
Not After : Aug 24 11:02:23 2025 GMT
Subject: CN=b87b9f98121e1d8338cc7b4e0dc8bdbc8ac5d980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0d:55:4e:18:f5:e1:1b:be:ff:35:92:86:b7:
e4:23:8b:e3:c0:d9:fa:36:2c:7b:e1:be:40:4f:3a:
d3:8f:5e:ed:b2:72:bb:4e:e5:03:09:ce:8f:52:33:
b7:97:ab:71:ee:f1:9a:9f:b2:cf:d6:66:48:ae:29:
f3:25:65:55:f3:72:b1:04:dd:15:cd:e6:36:70:52:
4a:2e:74:86:f6:06:03:78:56:47:0d:1b:99:fe:fb:
f4:bd:a0:68:de:60:ce:48:b0:5f:bb:14:60:a0:0a:
e0:00:e0:cf:39:61:8c:06:de:13:01:44:62:3d:6d:
24:ec:cf:46:f8:4e:40:ff:20:a2:1a:3e:ca:1c:f0:
55:4e:62:b5:16:df:d0:c3:1c:fc:c8:0a:09:5a:3f:
70:36:f2:d4:1d:7a:99:e0:ba:d7:6e:5f:3f:5e:a8:
fa:d2:e7:e2:22:25:db:3f:0f:0e:9e:8e:9e:58:fe:
e7:f4:6d:06:d9:a5:20:fd:06:d0:b6:4f:b5:71:5e:
fe:a6:f9:97:76:87:aa:c2:83:a4:bc:27:10:b8:e0:
cc:66:f3:ac:ad:cb:10:d1:0f:de:1d:02:f6:a4:51:
38:90:7d:3e:8e:1b:e1:93:a1:da:b8:7b:6a:b8:78:
39:98:b8:44:dc:18:4f:ff:aa:ec:e0:9e:33:11:ca:
37:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:7B:9F:98:12:1E:1D:83:38:CC:7B:4E:0D:C8:BD:BC:8A:C5:D9:80
X509v3 Authority Key Identifier:
keyid:98:D6:6F:B9:AD:AD:B6:A9:05:7B:F6:0A:AA:3F:F5:2C:66:54:04:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mNZvua2ttqkFe_YKqj_1LGZUBBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:30:d3:a2:ba:3f:c6:18:a1:39:07:82:e3:ce:47:f9:46:cb:
2b:43:c0:d6:ba:0c:21:11:0a:2c:05:60:2c:f1:84:ef:04:e9:
e3:c5:24:1c:43:77:14:ae:48:3c:54:97:17:b5:57:f0:12:7a:
92:84:28:4c:f2:bf:c8:e4:9c:43:a1:4b:18:e0:c7:cc:30:09:
04:18:44:08:a0:20:e7:b6:03:e4:df:22:39:2c:06:aa:46:56:
66:d5:1f:a2:a4:d9:2d:e3:24:96:97:81:f3:5c:eb:7e:02:1b:
1e:18:09:0e:92:65:31:bd:2b:d3:88:f6:a1:90:59:74:59:8b:
f9:00:2b:97:2a:4f:16:69:74:5c:83:1c:30:ff:52:a8:c4:68:
8f:37:d1:22:c9:31:b2:2c:9c:2e:2b:58:80:84:15:70:1b:b7:
3f:9b:3b:ed:b5:e4:07:84:ce:97:b7:9b:aa:61:87:ca:36:4f:
24:cc:e8:be:67:3c:06:e8:02:fd:b8:c8:5c:a4:d4:b4:3e:a6:
b2:9a:3a:56:5a:1e:a0:5e:6f:45:4f:3d:82:c9:b6:58:41:78:
0c:a5:10:c8:54:25:63:88:d3:34:9e:26:44:1b:39:78:f5:f2:
6d:0d:bd:1e:05:d6:40:12:25:08:72:55:e8:9d:8f:4d:47:fb:
f8:5c:42:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:09:57 2025 by rpki-client