Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
File: mnj9TUGkk4S99ufcPrvFAL9m2dU.mft (raw, json)
Hash identifier: lM2CZZNskAAyFjW5WhKbuGrE1Y5QRLOVAGANU+dzVyo=
Subject key identifier: 07:A6:01:21:0F:16:80:DD:5B:A6:E0:7C:64:49:D3:FA:BB:FA:B0:F6
Authority key identifier: 9A:78:FD:4D:41:A4:93:84:BD:F6:E7:DC:3E:BB:C5:00:BF:66:D9:D5
Certificate issuer: /CN=9a78fd4d41a49384bdf6e7dc3ebbc500bf66d9d5
Certificate serial: 0198D54E141B714AB883F8FCC3B1D620ACB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 05:02:00 +0000
Manifest this update: Sat 23 Aug 2025 05:02:00 +0000
Manifest next update: Sun 24 Aug 2025 05:02:00 +0000
Files and hashes: 1: UxU055m6SYgLYJdY0EIHyH-buK4.roa (hash: L8Prey4FtmmkUZS9Fb3qw934vxOuIVmwZLaUrRs5uYI=)
2: g-ueJOZ8CrwpGCeGD3tl16S98d0.roa (hash: bDoSFJsdsspb9o+5HCKGnMJFTdCyV6X4FzTImtyv2cE=)
3: mnj9TUGkk4S99ufcPrvFAL9m2dU.crl (hash: qfjRfzBRd6IrypJHkvIjXtkX7RFGR7GHjaUYS0P6hWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:14:1b:71:4a:b8:83:f8:fc:c3:b1:d6:20:ac:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a78fd4d41a49384bdf6e7dc3ebbc500bf66d9d5
Validity
Not Before: Aug 23 05:02:00 2025 GMT
Not After : Aug 24 05:02:00 2025 GMT
Subject: CN=07a601210f1680dd5ba6e07c6449d3fabbfab0f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1c:62:69:90:53:58:54:54:80:3a:8d:d2:58:
c3:1d:90:ca:3e:ee:b6:88:d4:4c:8d:3a:c6:67:24:
af:c7:d2:77:b3:d5:7b:b9:fb:2c:91:75:18:c1:ef:
f6:13:84:81:4c:87:0c:4a:84:b7:2b:9f:e9:12:4f:
b8:00:08:d2:da:a3:0c:d6:18:03:1c:5f:45:ae:a0:
ae:02:c9:6b:36:58:6b:b3:71:d4:93:b2:a3:e0:21:
ea:23:27:75:e5:f7:f2:3b:46:e8:c4:3b:a0:6d:04:
a8:b9:9f:1d:e2:dd:de:31:c2:10:77:68:10:53:3d:
50:62:00:96:5b:62:14:67:35:4d:7c:92:b9:64:51:
5c:a1:ec:a3:50:c3:11:2f:f1:f7:9b:54:3a:49:5e:
9c:3f:2f:cf:c6:3e:9d:3b:da:d4:33:e2:ad:67:86:
49:51:5d:46:9e:10:40:08:18:1a:05:7a:b6:85:1f:
37:df:c6:7c:bc:96:93:86:ba:14:b2:3a:56:0e:a4:
6a:08:e6:29:93:33:af:80:59:7e:91:92:98:d1:e6:
c1:84:c3:a2:43:08:6d:dc:05:ec:ba:25:99:48:c6:
b1:de:75:ab:32:1b:99:7d:ee:f1:da:b5:72:8d:d8:
3c:ec:ec:8d:c2:c5:d7:65:d5:0b:23:85:fd:b8:1a:
87:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A6:01:21:0F:16:80:DD:5B:A6:E0:7C:64:49:D3:FA:BB:FA:B0:F6
X509v3 Authority Key Identifier:
keyid:9A:78:FD:4D:41:A4:93:84:BD:F6:E7:DC:3E:BB:C5:00:BF:66:D9:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:36:ab:9d:94:d3:9b:ed:a7:8a:d4:c8:eb:8a:64:a4:bf:4c:
0a:1e:7b:de:38:ae:d7:c1:2f:22:71:19:57:c8:60:a9:dc:cf:
af:90:df:c4:91:dd:0a:53:3e:fc:13:64:16:99:79:9e:29:e8:
5f:f8:94:3e:3c:c4:d4:b7:eb:63:5c:6d:dd:b0:d3:5d:07:85:
51:6f:a9:4b:03:64:9b:b5:25:4a:59:b0:ec:9e:d0:49:62:ae:
6e:7d:f1:c0:72:de:5c:c3:04:b9:17:ea:8f:a0:1f:b2:56:79:
1a:4f:41:fc:a7:e0:2c:64:f3:f4:ac:45:db:eb:19:3d:fe:99:
b2:25:18:92:39:e4:35:3a:9b:7f:94:7a:d4:05:be:e6:ae:1b:
84:c7:aa:fc:e8:68:20:2e:3d:fc:d9:9e:8c:48:82:10:2a:6d:
d6:d7:65:b9:ec:18:96:e1:e8:bc:b7:31:c7:14:8c:cb:d7:ee:
33:d1:31:c8:d5:00:b5:91:aa:4b:2a:8b:62:65:8f:af:a9:c8:
30:94:52:c9:69:10:a8:8e:45:dc:af:29:5a:ad:86:81:87:97:
d5:16:e5:ae:3c:ae:a2:0d:07:4e:6b:0e:9a:20:aa:06:6e:b3:
67:d2:db:3a:ee:9e:7c:08:8a:5f:a5:af:8a:9f:a3:17:1d:6c:
09:38:81:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:48 2025 by rpki-client