Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft
File: rMUN9rAd_29U64A5skl6p_TvEs0.mft (raw, json)
Hash identifier: 3mrJKpiHIeSGW1WTy0cX/ikOQmMB5IM21p7vsdVZgM8=
Subject key identifier: 4B:F4:CD:8F:83:C7:98:BB:F7:4F:F2:0E:4A:86:FD:C3:C1:9F:B6:EF
Authority key identifier: AC:C5:0D:F6:B0:1D:FF:6F:54:EB:80:39:B2:49:7A:A7:F4:EF:12:CD
Certificate issuer: /CN=acc50df6b01dff6f54eb8039b2497aa7f4ef12cd
Certificate serial: 0198D51634F26A73DCD0C9831B5454B4C430
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMUN9rAd_29U64A5skl6p_TvEs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft
Manifest number: 0494
Signing time: Sat 23 Aug 2025 04:00:58 +0000
Manifest this update: Sat 23 Aug 2025 04:00:58 +0000
Manifest next update: Sun 24 Aug 2025 04:00:58 +0000
Files and hashes: 1: VNZ2uED23ISvSNUvT20r4GsH7oo.roa (hash: rxCWfcG9ljPfy4GNB4ws8osuxRP7WV5ZXyCpBXvN7MU=)
2: rMUN9rAd_29U64A5skl6p_TvEs0.crl (hash: nvrexWfWEprDFD8hxooiG/z5a7/qhdZfrgMdNOSspmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMUN9rAd_29U64A5skl6p_TvEs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:34:f2:6a:73:dc:d0:c9:83:1b:54:54:b4:c4:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc50df6b01dff6f54eb8039b2497aa7f4ef12cd
Validity
Not Before: Aug 23 04:00:58 2025 GMT
Not After : Aug 24 04:00:58 2025 GMT
Subject: CN=4bf4cd8f83c798bbf74ff20e4a86fdc3c19fb6ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6d:ed:a5:10:21:35:9e:72:55:97:d2:18:4b:
51:71:c3:bd:5c:61:a3:35:62:96:3e:64:cd:5a:0a:
50:d6:bb:a9:05:29:53:8e:a2:2d:5c:fe:2b:4d:82:
18:44:b2:f9:be:37:44:0b:66:c7:96:95:f6:d7:85:
ee:52:23:82:31:c5:62:2a:d9:c7:b0:bb:2e:58:8b:
ec:37:b9:66:71:2e:39:d5:8c:16:3f:38:58:52:57:
6d:da:a9:25:24:29:a1:70:9b:df:81:10:3f:b1:3d:
e2:08:cc:14:a9:e5:ad:40:6a:06:34:61:cd:16:d7:
41:eb:a2:8d:5a:de:73:e6:9c:f5:e1:37:18:12:f8:
6d:a2:24:c1:b8:4a:ce:a0:04:15:b8:1f:72:0e:b0:
6c:95:ee:e4:07:56:c7:01:3e:0a:a0:e0:19:c7:0c:
02:66:59:cc:b3:b2:0c:c8:0c:06:57:9a:fb:48:c4:
9e:c5:47:c4:55:e9:53:8b:fe:66:f6:bf:56:63:ff:
00:5f:1e:d9:cc:64:d1:b2:5e:df:16:ae:8b:31:d5:
cf:ad:4d:8f:9a:3f:61:e1:f2:e1:52:16:2e:bd:1d:
80:5d:74:6d:cc:22:ba:54:b8:eb:ab:b0:98:86:af:
1d:18:76:54:9f:56:d2:59:e3:c8:eb:98:cf:1c:43:
c7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F4:CD:8F:83:C7:98:BB:F7:4F:F2:0E:4A:86:FD:C3:C1:9F:B6:EF
X509v3 Authority Key Identifier:
keyid:AC:C5:0D:F6:B0:1D:FF:6F:54:EB:80:39:B2:49:7A:A7:F4:EF:12:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMUN9rAd_29U64A5skl6p_TvEs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:c7:0a:4f:9f:da:a8:bf:e1:27:da:85:4c:bb:70:f8:b8:2f:
ba:43:1e:32:f7:6f:32:ab:cd:ed:95:94:61:2a:b0:85:93:10:
67:ae:4f:9d:c5:b2:79:ab:06:b5:70:91:95:18:67:72:61:12:
80:94:fe:16:e7:01:b5:3e:01:35:c5:9f:af:a0:74:b3:26:38:
ae:c7:0e:b7:57:1a:a0:f7:86:88:2d:ed:7f:db:0d:24:49:34:
2b:1d:df:18:84:dd:b1:64:23:f2:81:de:30:ec:58:63:af:6d:
48:3d:cd:a3:33:19:57:52:4b:d0:e4:97:66:dd:8c:aa:83:b4:
3a:ce:6e:6c:f8:37:86:14:75:0c:a6:27:1a:48:7f:7b:1c:91:
0a:64:da:4f:88:fb:da:a1:1f:de:bc:bd:b8:e1:11:25:d7:6c:
4f:f6:39:d5:c0:2b:1a:95:05:2c:44:d7:e9:25:dd:03:b4:61:
f2:03:d5:42:61:ce:94:96:96:11:34:6f:4f:c0:df:98:7c:19:
05:ed:31:16:ed:40:f6:9e:49:c7:a4:0f:73:5b:5f:61:2b:20:
ee:5e:e8:49:79:3a:9e:5f:09:21:fa:06:ff:4c:5f:59:2d:35:
3c:78:d4:04:1b:c0:2c:35:14:4a:f9:6a:b2:ba:37:7a:42:9c:
91:a6:95:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:34:19 2025 by rpki-client