Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.mft
File: mnuajNgZ9KkgM01-cuwjQIcNd0k.mft (raw, json)
Hash identifier: QY5PpxEGmHYU9A48LW5ljBQRX76u+PJwWMoRBZEMrwY=
Subject key identifier: 1B:1A:40:98:A9:D1:EB:61:F9:B8:83:7F:E3:B1:00:65:57:C5:72:4B
Authority key identifier: 9A:7B:9A:8C:D8:19:F4:A9:20:33:4D:7E:72:EC:23:40:87:0D:77:49
Certificate issuer: /CN=9a7b9a8cd819f4a920334d7e72ec2340870d7749
Certificate serial: 019A4D3CFB39F210F2B66F3CEED1F9CB5F03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnuajNgZ9KkgM01-cuwjQIcNd0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.mft
Manifest number: 0977
Signing time: Tue 04 Nov 2025 05:00:33 +0000
Manifest this update: Tue 04 Nov 2025 05:00:33 +0000
Manifest next update: Wed 05 Nov 2025 05:00:33 +0000
Files and hashes: 1: IKlMOdkuHyBNZAexC-GSK-hjGW0.roa (hash: uA4Q2gsvRlV+sSD0ED9KoTfpAy2mm9Pd7yFqglVpNvQ=)
2: ksVbRwAzzCZHci4kH2kQ6u8coqY.roa (hash: QaqWPpVajjOVbtuXKzhecjPRXn+V4yoJpRPVeesXbzw=)
3: mnuajNgZ9KkgM01-cuwjQIcNd0k.crl (hash: Fjr7kIGQ+4FMcJFQ2O/8Y3dAbA96kI2snnJglWaZVSQ=)
4: uOUxSiBIbzpDJ7EaKMdYFnC-HEQ.roa (hash: P7xU7zipmmpWbMdR+tIYpEi0SHoYEWAWhVNCw2vAWTE=)
5: xH_26XIR8lPG36a6e_UAuv1nVvs.roa (hash: skoMmZjq1jRGHL/wRavlOMxLKJaRep20S4gGa/juF00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnuajNgZ9KkgM01-cuwjQIcNd0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:fb:39:f2:10:f2:b6:6f:3c:ee:d1:f9:cb:5f:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a7b9a8cd819f4a920334d7e72ec2340870d7749
Validity
Not Before: Nov 4 05:00:33 2025 GMT
Not After : Nov 5 05:00:33 2025 GMT
Subject: CN=1b1a4098a9d1eb61f9b8837fe3b1006557c5724b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6b:e2:94:23:07:b2:dc:0f:bb:0f:3a:db:58:
9b:7a:ef:f7:42:08:a0:25:67:94:f8:49:05:c8:db:
67:c4:82:d3:ff:08:49:da:07:0d:3c:50:77:97:51:
eb:b6:b2:15:23:04:1d:ca:7e:93:bb:84:2c:98:b5:
ec:88:8b:f5:9e:dc:a9:1a:2f:15:72:2f:86:dd:6a:
99:7e:01:eb:2d:9e:bf:f8:21:cf:ae:20:60:f9:65:
08:8a:c9:2d:5c:b0:99:3f:72:dd:67:81:9d:fa:ad:
9c:b9:1e:48:11:15:5b:55:45:0d:e1:3f:41:27:69:
06:28:4d:34:5f:86:65:50:9d:ed:b2:52:64:71:2c:
dc:a5:31:a6:b2:62:9b:2f:11:78:a2:32:29:8b:6f:
92:81:c3:bb:7c:55:7a:60:f9:e0:d1:ae:1b:a2:da:
8c:4f:ad:ad:bf:17:92:0f:3d:90:86:6d:c8:0a:cd:
d6:25:04:c5:93:5a:5b:36:cb:b5:83:1f:12:28:bd:
e3:40:a3:08:73:e5:10:e3:73:03:0f:9d:e4:b9:27:
8a:9f:53:46:22:03:09:0d:69:f8:d5:88:f6:f8:17:
0a:84:cf:2b:df:ad:22:74:85:0d:d2:bb:1d:7f:03:
38:0b:97:e8:53:a9:92:44:7a:b3:43:99:f2:25:74:
86:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:1A:40:98:A9:D1:EB:61:F9:B8:83:7F:E3:B1:00:65:57:C5:72:4B
X509v3 Authority Key Identifier:
keyid:9A:7B:9A:8C:D8:19:F4:A9:20:33:4D:7E:72:EC:23:40:87:0D:77:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnuajNgZ9KkgM01-cuwjQIcNd0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:d4:b5:c0:8a:9f:4c:21:04:b9:f2:24:f7:eb:aa:b5:be:d1:
13:b6:33:28:89:41:45:62:e7:ce:37:a7:d2:79:24:5e:26:cd:
dd:34:9c:a1:38:e3:33:14:5a:41:72:3f:fc:cb:a0:b0:39:23:
78:20:21:8d:a0:ac:19:e0:c1:bd:73:d1:c5:ca:24:9f:8e:01:
a2:85:93:21:df:8d:c9:17:c0:d2:18:c0:c2:80:d5:f7:56:3c:
1c:5f:46:35:cb:bd:e1:95:50:58:d4:26:4e:ea:fa:c3:f0:5b:
cd:72:9c:3b:12:de:92:98:eb:b5:e8:59:c3:b4:81:09:c6:bd:
01:51:8f:81:ee:c8:34:14:4a:1b:ee:fa:ae:3b:4c:3a:ba:33:
cb:52:43:4f:dd:ec:db:43:dd:ad:2f:da:a6:ca:5b:5a:79:ad:
63:59:43:ea:48:75:11:70:4e:b8:a8:2b:5d:51:45:53:95:05:
39:bb:d1:c9:f6:f4:d3:13:c6:1b:87:76:8e:5e:d2:03:14:7d:
b5:f0:de:3a:02:67:a8:87:c2:fc:98:b3:f2:c3:29:c5:86:b9:
ee:80:b3:84:60:df:32:bc:02:e4:7a:8d:4f:3e:b1:72:ad:a2:
69:55:41:0b:62:61:be:d9:64:d3:8e:d5:2b:29:cc:7b:bf:06:
40:8d:a7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:46 2025 by rpki-client