Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.mft
File: Mn2iLLkBOLBQg37c8ew2pauMQqw.mft (raw, json)
Hash identifier: fq1UVRYfi1+WNJ2sYdLK91hiZ+oBLN7dGzhl7kvHw2Q=
Subject key identifier: 3E:03:9E:7C:90:FE:47:1F:79:62:3A:02:24:3A:59:F2:03:9B:79:67
Authority key identifier: 32:7D:A2:2C:B9:01:38:B0:50:83:7E:DC:F1:EC:36:A5:AB:8C:42:AC
Certificate issuer: /CN=327da22cb90138b050837edcf1ec36a5ab8c42ac
Certificate serial: 01987450B40DEE65DA51AE6AC5E93503E8A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mn2iLLkBOLBQg37c8ew2pauMQqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.mft
Manifest number: 1276
Signing time: Mon 04 Aug 2025 09:01:42 +0000
Manifest this update: Mon 04 Aug 2025 09:01:42 +0000
Manifest next update: Tue 05 Aug 2025 09:01:42 +0000
Files and hashes: 1: Mn2iLLkBOLBQg37c8ew2pauMQqw.crl (hash: 78NwzghdCQg0dhaUiHjuTDu7rTPsnz/URe12WVtlEv0=)
2: Ws-3to11mYQT65QlLPSv_a64Aow.roa (hash: bLLs3zCR6QgpvfFD4PT4W3Xh5DmPnAizoHMgUfONgYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mn2iLLkBOLBQg37c8ew2pauMQqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:b4:0d:ee:65:da:51:ae:6a:c5:e9:35:03:e8:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=327da22cb90138b050837edcf1ec36a5ab8c42ac
Validity
Not Before: Aug 4 09:01:42 2025 GMT
Not After : Aug 5 09:01:42 2025 GMT
Subject: CN=3e039e7c90fe471f79623a02243a59f2039b7967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:54:d6:a0:01:8d:48:ae:98:31:3c:72:bb:d8:
f7:75:f8:63:b1:90:af:9c:e9:00:06:1d:da:35:d9:
43:48:c2:d8:68:e7:de:a0:18:b4:05:65:1e:18:fc:
a6:a1:37:06:04:58:e9:4f:95:3e:5a:82:04:1a:d5:
58:57:8e:d3:8d:f2:13:25:0a:9d:c6:86:dd:3a:cf:
89:3f:b3:3e:b1:8d:f3:3d:d2:4b:a8:e6:21:af:c5:
e6:d0:1c:10:38:94:8d:55:d6:e0:ff:f0:c5:55:6e:
10:65:8e:81:3d:e7:ad:e6:a4:73:21:4c:57:11:34:
98:60:f1:c0:f0:b9:93:70:78:a8:fc:69:3d:21:e4:
8f:78:47:65:c8:43:af:a2:b6:6a:e2:92:50:77:36:
38:7e:95:3d:6c:cc:13:32:8d:82:a5:0d:fd:14:e9:
c2:1e:f5:c2:d0:d2:ab:ca:84:55:e9:c7:b0:22:7f:
8b:5c:a6:6b:8e:64:89:7f:80:34:02:6f:57:6f:de:
a4:7c:5d:88:7e:91:bd:5d:36:ec:a7:a4:67:8d:11:
9a:b8:83:bb:5d:cc:03:28:82:54:6e:57:c8:ae:cf:
63:b2:56:39:29:18:6a:68:10:29:f8:b1:c5:6c:6b:
33:af:b1:83:cc:d5:cf:fd:4b:77:cd:98:0d:e4:2e:
43:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:03:9E:7C:90:FE:47:1F:79:62:3A:02:24:3A:59:F2:03:9B:79:67
X509v3 Authority Key Identifier:
keyid:32:7D:A2:2C:B9:01:38:B0:50:83:7E:DC:F1:EC:36:A5:AB:8C:42:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mn2iLLkBOLBQg37c8ew2pauMQqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:4a:be:73:c8:cf:67:df:79:74:8a:57:07:2d:1d:df:bc:fc:
6a:0a:e9:67:f7:c3:58:77:f6:a0:57:df:1e:8b:6d:4e:c7:52:
a5:75:23:3c:37:14:86:72:a1:d7:dc:cc:ba:d9:5f:9f:29:5d:
2f:c9:fa:f9:67:82:b7:62:74:a5:6d:63:ac:13:6e:c3:c5:d9:
ca:19:a3:e6:d9:8c:ea:13:20:b2:20:22:81:bb:ed:5c:10:75:
62:6f:92:25:60:a0:1f:b6:61:54:8d:b7:50:fb:8a:0d:30:38:
de:d4:78:c9:48:27:67:f0:cd:fd:bb:05:87:3f:a3:be:81:fc:
cb:48:92:c6:32:9e:c2:a9:f0:de:24:61:d5:6f:be:a2:a0:bd:
85:e0:48:d6:4a:e1:bc:b8:4c:ed:29:9d:d5:b7:f0:ce:2c:c4:
cf:7e:49:5d:e3:d9:e2:4c:df:b3:24:8e:95:39:21:cc:e0:d1:
e5:49:59:02:a9:34:bb:27:33:8c:ca:5b:f9:25:5e:2e:d2:4f:
b9:0f:b5:e3:67:59:23:35:07:02:04:76:80:00:bd:b3:d5:82:
27:a7:02:08:be:4e:83:b6:ad:b1:fe:17:83:b0:fd:ea:4d:0a:
a3:37:5a:13:0f:de:b5:dd:62:71:b7:64:95:54:0e:64:39:dc:
c5:c2:24:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:43:41 2025 by rpki-client