Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.mft
File: mnF-0dxIgETl4qsAdUM1WM_ejIU.mft (raw, json)
Hash identifier: 0Fz66bbWlsARPsOIHw+cW9NMYdyChq+emJnzD75IpLc=
Subject key identifier: EC:89:97:94:1F:7E:BF:1C:D4:0C:04:EC:A1:24:9E:66:2E:FF:FF:73
Authority key identifier: 9A:71:7E:D1:DC:48:80:44:E5:E2:AB:00:75:43:35:58:CF:DE:8C:85
Certificate issuer: /CN=9a717ed1dc488044e5e2ab0075433558cfde8c85
Certificate serial: 0198D4DFCA93AE29ADFA8F93EBE0CDF4E62C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnF-0dxIgETl4qsAdUM1WM_ejIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.mft
Manifest number: 0536
Signing time: Sat 23 Aug 2025 03:01:32 +0000
Manifest this update: Sat 23 Aug 2025 03:01:32 +0000
Manifest next update: Sun 24 Aug 2025 03:01:32 +0000
Files and hashes: 1: 1-I5euRLEKsr7FF-4VskQLdu5Wm0.roa (hash: 4AXnB9gGffBa+5UGJwTlfxl3dTLBtwfWaDwofBbf+WY=)
2: MtoIhFzzjtMtI4g5kxOun27y3IM.roa (hash: DlZC6F8VIFuzmjWhSIX/LygNaAgpAHPicElZhEshqgM=)
3: mnF-0dxIgETl4qsAdUM1WM_ejIU.crl (hash: bF7do1Yb+Uw3o7rEdWdy+OuTv5tz+N6v/gF4fIY/YrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnF-0dxIgETl4qsAdUM1WM_ejIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:ca:93:ae:29:ad:fa:8f:93:eb:e0:cd:f4:e6:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a717ed1dc488044e5e2ab0075433558cfde8c85
Validity
Not Before: Aug 23 03:01:32 2025 GMT
Not After : Aug 24 03:01:32 2025 GMT
Subject: CN=ec8997941f7ebf1cd40c04eca1249e662effff73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:09:00:72:51:28:bd:32:cf:98:11:bf:38:e0:
9f:ae:87:66:5c:ae:00:76:36:68:55:7b:d0:9a:c6:
55:5b:e0:9b:db:b5:d1:dd:c1:1e:97:a4:1f:f6:6e:
45:a0:7d:fe:e2:6c:a6:ba:53:2e:24:4a:b1:bd:9a:
5c:b0:0d:29:f7:03:15:44:68:c3:29:c1:a9:4e:12:
d3:12:de:aa:2d:b9:de:e9:f4:f9:19:8c:01:d6:9b:
f3:50:70:72:77:73:df:db:61:c5:5d:ec:ba:aa:fd:
16:46:e1:b3:37:80:8a:0f:ad:45:1f:49:27:38:fb:
8c:10:0a:12:86:ee:8c:47:ca:48:ba:01:4b:41:e2:
46:0d:65:8a:7f:b6:79:47:9f:74:1e:31:0d:94:b0:
f5:35:48:29:da:39:36:0f:68:54:fe:6b:05:bd:88:
91:e2:4e:7e:46:09:9b:90:65:25:67:bf:97:6a:bb:
71:df:6d:a4:d4:d5:c9:21:4d:5c:a6:4b:7e:47:cb:
db:ef:f8:20:24:32:3a:7c:5d:a3:d0:cf:c2:c7:fc:
11:51:cb:1f:5d:ce:8b:f6:90:8d:80:6d:34:74:f4:
a9:84:f0:78:97:5d:d6:7f:fa:d3:43:bb:61:7b:33:
54:04:35:a8:74:23:b6:a1:70:0b:b4:c9:61:df:93:
7a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:89:97:94:1F:7E:BF:1C:D4:0C:04:EC:A1:24:9E:66:2E:FF:FF:73
X509v3 Authority Key Identifier:
keyid:9A:71:7E:D1:DC:48:80:44:E5:E2:AB:00:75:43:35:58:CF:DE:8C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnF-0dxIgETl4qsAdUM1WM_ejIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:8f:9e:fb:47:4a:91:fe:c3:18:b5:61:3f:32:3e:a6:10:71:
3a:59:e9:fc:18:8b:e4:cf:4d:b9:eb:bb:08:27:40:66:dc:f2:
52:4d:a2:14:75:d1:22:4f:a3:d2:09:fc:e8:b0:72:3f:6b:2c:
67:d2:8f:0d:7d:00:43:4c:9a:54:ad:33:ba:4f:14:f8:c3:fa:
5f:1c:06:53:eb:57:27:da:d0:59:29:e3:cf:d2:88:83:16:a5:
88:01:08:97:9b:d5:d2:36:b3:7d:35:2b:e1:ce:51:ad:1b:0b:
9e:56:6a:4e:06:b7:c6:d4:71:73:d3:d9:94:82:45:82:f0:48:
c7:b5:a5:a5:b5:73:56:38:cc:55:c1:e2:28:98:22:f2:84:2c:
c7:30:3c:80:a5:96:57:cf:8c:8b:23:e9:ad:e9:b6:bc:67:0a:
d9:19:4e:f1:de:51:34:8b:01:5e:b6:15:e6:0c:fd:e9:b5:7f:
2d:6c:f5:4d:8d:d5:39:77:61:f0:50:9d:81:a4:4d:e8:c4:10:
18:aa:8c:a4:c9:72:a4:d9:94:b0:66:eb:47:e3:1d:14:ad:30:
50:81:63:6c:ef:7b:47:48:60:10:09:5d:3a:0d:9e:68:a0:fa:
f1:fe:57:90:3f:a6:32:15:f0:14:d2:d0:2c:bf:d0:c8:55:f2:
7b:e0:c3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:05 2025 by rpki-client