Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.mft
File: rgMnvx57e_vdLyFMjvYpqink1m8.mft (raw, json)
Hash identifier: 725HXiun98e2Y6LUaTnykRCtSJr5FvzT8dEkRll/4TI=
Subject key identifier: 04:B9:9C:97:20:56:2D:8D:3C:2F:CA:32:A0:B6:29:50:42:DB:43:76
Authority key identifier: AE:03:27:BF:1E:7B:7B:FB:DD:2F:21:4C:8E:F6:29:AA:29:E4:D6:6F
Certificate issuer: /CN=ae0327bf1e7b7bfbdd2f214c8ef629aa29e4d66f
Certificate serial: 01988E467A76766E74CF6F6DD609C5FDB2D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rgMnvx57e_vdLyFMjvYpqink1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.mft
Manifest number: 1627
Signing time: Sat 09 Aug 2025 10:00:40 +0000
Manifest this update: Sat 09 Aug 2025 10:00:40 +0000
Manifest next update: Sun 10 Aug 2025 10:00:40 +0000
Files and hashes: 1: D07K9M73JE_RghORuqvEImVGd0Q.roa (hash: kPt/ZOiMf9T1o4/zGBCvETiXAjwGaiEUsN/6gQ2oC8U=)
2: rgMnvx57e_vdLyFMjvYpqink1m8.crl (hash: 7I0CMUGxzyXRdRoPeH4n6M5HawTIjXWm29sDBHNiBf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rgMnvx57e_vdLyFMjvYpqink1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:46:7a:76:76:6e:74:cf:6f:6d:d6:09:c5:fd:b2:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae0327bf1e7b7bfbdd2f214c8ef629aa29e4d66f
Validity
Not Before: Aug 9 10:00:40 2025 GMT
Not After : Aug 10 10:00:40 2025 GMT
Subject: CN=04b99c9720562d8d3c2fca32a0b6295042db4376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6c:45:53:fe:98:6b:4d:e0:37:e6:a7:ba:8b:
35:1b:33:41:0d:7e:db:f5:91:47:0e:83:ea:c5:29:
1a:3c:da:58:39:aa:87:ed:20:e9:72:9e:db:d9:e0:
e5:86:ca:4f:f5:31:91:05:0f:ae:77:4c:1b:84:f3:
77:6c:01:2d:d0:cb:36:7d:25:a0:25:4f:db:29:25:
2a:80:40:de:9a:64:75:6e:ab:ce:89:a2:13:12:dd:
46:b1:e4:f9:02:fc:4b:a4:22:d0:de:80:73:c9:a6:
5a:ed:59:c2:a6:50:fe:ba:05:7a:f7:d7:f4:fb:6a:
69:a9:07:66:46:ee:4a:8c:67:db:d1:9c:46:30:06:
49:0c:7f:5a:24:37:fe:9d:aa:f4:e8:03:f3:5f:9b:
a2:eb:df:10:28:71:72:a8:18:1b:d0:5f:1a:53:f6:
c4:39:91:04:1a:f3:bd:66:d8:8d:bd:eb:ff:50:44:
0e:0c:26:f5:d5:7b:e3:63:23:1e:b0:e0:2d:7c:8a:
6b:c9:6f:3a:75:ef:a3:74:e5:41:4f:b8:19:5a:cb:
28:d7:56:5a:f0:9d:ab:25:89:db:3d:3f:0c:c8:70:
8d:b1:33:cd:97:85:dc:f8:d6:c0:2c:7c:0f:da:cb:
3a:de:a0:8d:7b:c7:48:29:2f:64:cc:19:5f:00:f1:
0d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B9:9C:97:20:56:2D:8D:3C:2F:CA:32:A0:B6:29:50:42:DB:43:76
X509v3 Authority Key Identifier:
keyid:AE:03:27:BF:1E:7B:7B:FB:DD:2F:21:4C:8E:F6:29:AA:29:E4:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rgMnvx57e_vdLyFMjvYpqink1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:5e:39:60:e5:3d:c4:72:8d:13:b1:8e:0b:af:e2:dc:28:79:
fc:0d:93:10:cc:0a:f0:2f:04:14:72:75:a8:73:be:49:63:78:
cf:7e:db:81:1a:bb:f1:13:bd:a8:12:9d:b2:52:82:d3:20:df:
72:5f:19:d7:a5:ee:7e:b8:ff:7f:fe:61:da:63:10:0e:04:9f:
04:bb:4e:8d:e7:9f:a0:9c:db:ac:3b:dd:d6:67:35:20:e1:6b:
3b:b2:ae:a6:ff:1f:36:aa:5e:fa:47:29:1f:c2:c4:7e:ad:64:
8c:39:bf:2d:bb:f7:62:13:f3:d0:ef:3c:c8:6b:1d:2b:a3:67:
21:c6:69:5b:42:93:af:72:f0:d5:ee:01:53:c5:72:15:b6:fd:
c6:dd:9d:8e:18:a7:53:cc:cf:31:1f:9f:0f:2b:c4:53:89:37:
b4:55:a0:b8:59:69:c5:2d:bd:ca:90:f6:df:ce:b2:04:13:f8:
17:67:27:44:be:3d:f9:e5:90:8e:f9:e5:df:74:75:1f:16:e6:
16:97:7e:a8:0e:94:d6:57:a9:ed:e7:34:25:e6:b9:f1:2e:ac:
39:db:24:4d:f3:cb:e9:d2:bd:b3:64:0d:08:85:9a:c0:6b:57:
83:3f:bf:ea:02:9e:08:f3:7a:b3:14:fd:5d:58:a0:58:ff:a3:
b4:87:90:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:23:30 2025 by rpki-client