Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.mft
File: mnZNjTrnJbReDUgH9hLsPR8qP08.mft (raw, json)
Hash identifier: 3EeqPHFjsWaYHorMpgEBL5gFYronz/HmbWRhDQcCL8Q=
Subject key identifier: C5:38:A4:E9:DE:8A:02:3D:F8:66:73:D2:72:66:F0:2A:2C:C7:96:0F
Authority key identifier: 9A:76:4D:8D:3A:E7:25:B4:5E:0D:48:07:F6:12:EC:3D:1F:2A:3F:4F
Certificate issuer: /CN=9a764d8d3ae725b45e0d4807f612ec3d1f2a3f4f
Certificate serial: 0198744FF42FCFD5E99DFD3AD2706ADE7587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnZNjTrnJbReDUgH9hLsPR8qP08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 09:00:53 +0000
Manifest this update: Mon 04 Aug 2025 09:00:53 +0000
Manifest next update: Tue 05 Aug 2025 09:00:53 +0000
Files and hashes: 1: GX6PPZ2aZNuKqCQABtqOUWCcHRs.roa (hash: iBMcSS3f9LeIBBwiwQeNPCdp76Ute65WO/S9tw7lGK8=)
2: mnZNjTrnJbReDUgH9hLsPR8qP08.crl (hash: YOQ9s+pDuyemADOcv6nxU4AolHr5GKgglIfcVBbgqCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnZNjTrnJbReDUgH9hLsPR8qP08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:f4:2f:cf:d5:e9:9d:fd:3a:d2:70:6a:de:75:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a764d8d3ae725b45e0d4807f612ec3d1f2a3f4f
Validity
Not Before: Aug 4 09:00:53 2025 GMT
Not After : Aug 5 09:00:53 2025 GMT
Subject: CN=c538a4e9de8a023df86673d27266f02a2cc7960f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:36:1a:b4:f5:b0:a2:0e:61:61:d1:ce:3c:bd:
a9:84:9e:e0:c9:fb:d1:cf:54:7d:48:d1:27:98:64:
ef:d6:98:e7:58:70:3b:31:51:38:ab:27:4b:82:a2:
6d:86:ed:67:9e:f2:78:c6:2e:02:f4:33:b9:45:95:
48:55:c3:58:91:8d:02:42:19:f1:58:fb:23:3f:08:
1c:c5:35:ce:9a:d9:e7:d9:87:4a:3f:a4:b6:48:74:
8c:92:68:66:aa:c1:d9:a3:c0:c2:d8:e6:3f:3b:21:
d9:35:89:e1:d6:b1:cb:0b:98:2f:8b:56:ee:09:eb:
fb:c2:a0:de:f9:8a:d1:fe:5c:d2:bc:d7:df:64:cf:
84:e1:a6:72:fe:b3:34:35:1e:80:c2:43:02:62:a1:
6b:b1:91:3c:5a:e6:dd:10:5a:7d:f5:59:54:79:31:
cb:51:ef:b7:70:1c:39:a5:34:1f:06:55:bd:a9:11:
66:11:76:17:80:7c:4a:0e:00:83:39:bc:16:81:d8:
34:78:ae:a3:45:0b:c3:ac:0a:e7:59:72:02:f3:62:
fe:a4:19:95:45:9d:e1:f8:b6:db:cd:7b:4f:7f:3e:
9f:51:a8:a3:a9:bb:55:cb:6e:4d:a7:0f:4c:77:45:
29:ba:ac:31:a1:39:3e:83:92:2f:1f:36:1d:73:73:
b3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:38:A4:E9:DE:8A:02:3D:F8:66:73:D2:72:66:F0:2A:2C:C7:96:0F
X509v3 Authority Key Identifier:
keyid:9A:76:4D:8D:3A:E7:25:B4:5E:0D:48:07:F6:12:EC:3D:1F:2A:3F:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnZNjTrnJbReDUgH9hLsPR8qP08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:74:f4:7f:bf:6d:d7:2f:d3:c8:e5:da:0d:70:99:d7:1e:e9:
16:8e:02:16:24:dd:03:f5:4f:06:a5:e7:dc:86:1b:33:11:c1:
85:28:a2:eb:26:57:db:14:09:c9:06:e4:3a:48:6a:cf:d1:ba:
d2:65:ab:7e:31:61:24:d0:d9:b8:87:3c:0a:ce:41:94:6b:f8:
0c:ee:c2:c2:eb:93:e1:23:2c:ba:52:2b:b2:c7:ef:7e:ad:e8:
65:c2:92:f1:73:c0:b7:6f:60:1f:45:c3:58:d7:dc:67:6a:91:
bb:42:e8:fc:c6:5e:16:11:d7:1d:3a:ef:b3:98:f3:88:6e:96:
f4:53:73:ee:54:95:e4:48:91:62:c4:d8:8b:c5:e2:da:3f:9c:
9d:32:1c:3a:1b:6d:fb:4c:2f:e3:85:1f:e9:7a:dd:ee:7d:c0:
ea:a7:28:27:ed:8c:fc:56:3b:34:32:5b:63:fd:8a:6d:3c:b3:
a7:6a:09:71:73:3b:22:63:b3:fb:db:ac:0b:3a:4b:5e:94:27:
05:11:e5:3e:0e:98:1d:2c:50:5f:d2:c3:a2:b0:1c:ce:2a:b2:
b5:ed:fc:8f:6f:6f:85:72:38:31:ac:aa:4c:2d:84:06:d8:0e:
be:0e:97:76:a9:34:8a:41:0c:d5:f3:f0:19:a4:ee:64:f7:2b:
cc:e7:3e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:52 2025 by rpki-client