
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
File: cMnQbFGt1oKQY_G2exddDAAB5zY.mft (raw, json)
Hash identifier: w3Syr73wgxEFldD6Kud8zKuWe5Bc1nth2RcO9EvM2SI=
Subject key identifier: 99:18:BA:5E:34:E1:8D:12:95:EB:E3:87:EC:AF:58:DE:6D:18:E1:03
Authority key identifier: 70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36
Certificate issuer: /CN=70c9d06c51add6829063f1b67b175d0c0001e736
Certificate serial: 0198D65FD46D819E366064D5EEF16039FEBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:01:01 +0000
Manifest this update: Sat 23 Aug 2025 10:01:01 +0000
Manifest next update: Sun 24 Aug 2025 10:01:01 +0000
Files and hashes: 1: 5giw-glAqkb4ga3tho0-9kOiFpQ.roa (hash: wPSRGEewfNLQ9tlgNj7BpPtVBQPthONm5g14lvlKftQ=)
2: cMnQbFGt1oKQY_G2exddDAAB5zY.crl (hash: MUY0MIzupMqUwJgTzi9/0l0Dy+7+U9hJTSV6loA+RqE=)
3: lO9ygzFEh6vlzFwa5Ivf2tcAutc.roa (hash: 0P+81vJocBAhACHTKyLTeE5L1N5kiVqd+TGA07c8eWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:d4:6d:81:9e:36:60:64:d5:ee:f1:60:39:fe:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70c9d06c51add6829063f1b67b175d0c0001e736
Validity
Not Before: Aug 23 10:01:01 2025 GMT
Not After : Aug 24 10:01:01 2025 GMT
Subject: CN=9918ba5e34e18d1295ebe387ecaf58de6d18e103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1a:9f:ae:86:e8:a6:c7:5d:a0:f3:fb:2a:2a:
19:29:11:96:74:f3:dc:95:f9:a5:ae:21:16:c2:e1:
f2:09:88:6e:b7:6f:61:1e:b0:df:fa:2b:3d:ae:a6:
e9:03:a8:03:85:66:f3:5d:e5:39:cb:85:ae:d2:1b:
07:ad:a5:0c:b4:5b:35:64:59:5b:99:14:a1:56:3f:
00:10:c2:e1:2e:60:f8:90:f2:76:2d:35:7f:3a:11:
6d:f0:62:d0:b5:d8:ac:07:7b:6e:95:7f:0e:c3:46:
72:eb:e4:48:4b:fa:4c:0b:73:b1:15:9c:9a:69:d4:
aa:25:d6:47:36:ef:a6:20:17:04:a4:1d:1b:34:2c:
a8:50:4c:48:eb:cf:ea:3b:b4:70:ca:38:66:c5:6d:
00:fe:0c:34:52:fe:c4:90:25:3e:a8:c2:f7:c4:bb:
97:e2:06:3a:f3:6d:ed:38:01:5d:90:e7:dc:48:d2:
30:e9:88:30:ad:75:e9:97:b9:f7:61:d5:98:1f:ba:
ec:11:82:a2:88:09:a9:86:98:ec:00:ac:d3:34:1d:
77:0a:d5:8d:d8:b1:f3:14:be:a1:bc:62:51:2e:8b:
2a:7d:1b:1b:85:c8:af:a7:12:2f:ba:e2:da:60:b3:
89:90:d0:73:7e:a9:5b:b2:fd:8e:eb:4a:dc:bb:e1:
ed:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:18:BA:5E:34:E1:8D:12:95:EB:E3:87:EC:AF:58:DE:6D:18:E1:03
X509v3 Authority Key Identifier:
keyid:70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:94:7f:97:cd:c3:22:b5:51:e0:67:a9:f4:14:1e:4b:c1:99:
cd:06:81:43:97:dd:00:ea:cb:78:c8:05:e3:aa:38:60:15:2a:
fb:1a:84:02:10:7a:59:63:09:ef:00:6b:5f:d0:6b:ba:78:35:
11:45:ab:c4:71:2d:fd:2e:72:fc:e8:41:ff:a7:2c:b5:9f:c8:
13:2d:26:c9:4f:92:61:07:28:43:5a:2c:23:f0:5c:03:47:cb:
65:15:a4:e8:e7:7a:9f:43:fa:c6:41:92:75:f2:5a:2a:1e:0b:
7d:30:8e:94:9f:cf:a2:f1:49:80:db:69:92:80:71:40:78:67:
ec:ea:db:65:3d:4e:aa:94:0d:91:0f:ec:52:dd:29:d3:52:44:
94:fe:93:05:12:82:2c:63:6e:7e:58:ef:f4:e7:44:02:f2:e9:
47:99:f8:66:72:82:f1:b1:7e:2f:ee:5e:49:af:20:39:51:72:
e7:27:38:d0:86:46:96:60:94:fe:6d:b2:bd:c4:95:aa:22:4c:
bf:5a:03:0a:0d:db:9c:56:38:47:12:d5:a9:98:16:6b:f4:08:
d2:89:ed:29:9b:b2:ff:66:34:9d:5a:73:2b:69:26:21:ac:fe:
1a:65:e1:d1:14:ed:16:e3:80:44:e5:4c:cc:37:d7:0d:00:c1:
b1:df:65:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:08 2025 by rpki-client