Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
File: cMnQbFGt1oKQY_G2exddDAAB5zY.mft (raw, json)
Hash identifier: 7DaHoZPclCEEOfcLie/XpyB7UGbf/KZAhXCR9brnDHg=
Subject key identifier: 1E:16:C8:97:2D:B0:AC:DD:95:42:ED:8D:BB:C2:93:91:57:33:4D:25
Authority key identifier: 70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36
Certificate issuer: /CN=70c9d06c51add6829063f1b67b175d0c0001e736
Certificate serial: 0197B6A0B7D674B756E68A87330AAC4543EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 13:01:15 +0000
Manifest this update: Sat 28 Jun 2025 13:01:15 +0000
Manifest next update: Sun 29 Jun 2025 13:01:15 +0000
Files and hashes: 1: 5giw-glAqkb4ga3tho0-9kOiFpQ.roa (hash: wPSRGEewfNLQ9tlgNj7BpPtVBQPthONm5g14lvlKftQ=)
2: cMnQbFGt1oKQY_G2exddDAAB5zY.crl (hash: 84baX8V9JzIIycmSnkxwnHbnDV/VGDgR+wdJ0He9TOc=)
3: lO9ygzFEh6vlzFwa5Ivf2tcAutc.roa (hash: 0P+81vJocBAhACHTKyLTeE5L1N5kiVqd+TGA07c8eWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:b7:d6:74:b7:56:e6:8a:87:33:0a:ac:45:43:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70c9d06c51add6829063f1b67b175d0c0001e736
Validity
Not Before: Jun 28 13:01:15 2025 GMT
Not After : Jun 29 13:01:15 2025 GMT
Subject: CN=1e16c8972db0acdd9542ed8dbbc2939157334d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:75:26:f3:e8:ed:6a:2e:44:2f:7e:6b:cf:a4:
80:7e:fc:93:d6:5b:7c:31:37:e1:16:1e:a5:d4:48:
2b:c2:27:29:7f:62:54:3f:fd:9c:7b:ae:86:c4:25:
63:ef:a7:ec:91:c4:31:aa:fb:ac:8b:e2:48:91:36:
cc:90:0f:c1:1d:28:2d:82:4e:d7:11:2f:c7:06:68:
b5:29:62:9b:79:17:a1:92:2d:ce:08:67:31:29:a3:
b9:24:21:1b:93:47:df:21:1b:62:70:30:ae:59:73:
6c:0e:8e:8a:16:56:cf:24:eb:2e:3e:90:19:42:b8:
08:a6:02:11:ad:d1:29:50:f5:dc:dc:f0:79:f3:12:
6f:e5:62:3f:f9:0d:53:cf:50:ae:75:27:bf:8c:90:
b4:45:ba:52:4e:d1:c0:a2:b3:f5:2b:26:22:bf:d0:
2a:0e:d9:3b:c1:fb:ce:58:f0:f3:7f:dd:f4:7c:6c:
1f:a3:01:c3:f9:44:98:f0:f7:27:d8:7d:18:de:49:
65:d4:7d:8e:55:aa:8f:00:83:cf:ce:44:7c:9a:35:
45:82:a6:56:07:c6:fc:a4:23:9d:e3:df:95:aa:5f:
39:ed:85:e3:b3:aa:3a:04:42:72:a2:e8:7f:9c:86:
9c:97:06:e4:69:87:c6:c0:5e:7f:db:28:9a:39:4a:
c6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:16:C8:97:2D:B0:AC:DD:95:42:ED:8D:BB:C2:93:91:57:33:4D:25
X509v3 Authority Key Identifier:
keyid:70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:89:79:84:9a:15:00:07:74:23:43:fd:2a:29:c5:74:ab:1a:
c1:e9:67:56:fe:c7:96:51:6d:60:1c:21:15:34:91:19:af:fe:
b0:8e:08:1c:d8:81:ca:eb:0a:c6:39:b9:3d:70:98:25:79:b8:
7a:73:9c:49:4e:cf:35:9e:f5:c2:bf:41:c1:b3:39:c6:08:35:
99:c5:90:cd:04:f2:d4:a6:06:3a:75:c4:8e:f8:98:54:7e:ad:
87:0b:34:ba:d9:3f:44:14:41:09:6b:63:a4:ad:53:be:8e:c7:
89:47:fc:df:86:63:02:c8:ec:fb:a3:21:7e:4c:f7:8c:e7:f9:
28:80:dc:57:3e:6c:bc:1b:87:90:d2:05:25:35:91:83:de:63:
e9:a0:61:be:5b:c2:b5:ad:27:b7:b1:36:b6:91:f4:40:01:94:
b1:97:47:59:4b:e7:f4:b5:ba:a4:69:c5:1b:d0:5a:48:c2:f9:
30:e8:a4:f1:9d:61:63:33:8a:0d:83:4e:31:72:7c:52:41:b0:
4f:08:6e:6d:1e:78:0a:38:78:91:18:41:54:0e:c1:a6:a6:40:
38:90:0b:aa:e9:cb:73:3b:5f:30:03:57:ff:3c:cd:3a:ef:c9:
31:86:c4:2c:22:21:cf:05:ac:2e:4e:d6:40:31:14:ac:4b:84:
d6:cf:56:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:45:27 2025 by rpki-client