Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.mft
File: MnBggp7MaE-ln4VaoKSEAbwX8tE.mft (raw, json)
Hash identifier: zgLqLVeTcSCcBE0LkLBm/ALh2M/p0tIhklOYbHGK0Qs=
Subject key identifier: 34:8B:0D:5B:56:6E:95:37:E2:E7:F8:EB:BD:BD:9B:5E:F3:60:F2:9A
Authority key identifier: 32:70:60:82:9E:CC:68:4F:A5:9F:85:5A:A0:A4:84:01:BC:17:F2:D1
Certificate issuer: /CN=327060829ecc684fa59f855aa0a48401bc17f2d1
Certificate serial: 019892CA1F109C4D5C25515D4B8306962635
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MnBggp7MaE-ln4VaoKSEAbwX8tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.mft
Manifest number: 0591
Signing time: Sun 10 Aug 2025 07:02:56 +0000
Manifest this update: Sun 10 Aug 2025 07:02:56 +0000
Manifest next update: Mon 11 Aug 2025 07:02:56 +0000
Files and hashes: 1: MnBggp7MaE-ln4VaoKSEAbwX8tE.crl (hash: JNXrYbMWd4DPPMrMyDuIQ1GwoiDTow9oNX020nT5v2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MnBggp7MaE-ln4VaoKSEAbwX8tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:ca:1f:10:9c:4d:5c:25:51:5d:4b:83:06:96:26:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=327060829ecc684fa59f855aa0a48401bc17f2d1
Validity
Not Before: Aug 10 07:02:56 2025 GMT
Not After : Aug 11 07:02:56 2025 GMT
Subject: CN=348b0d5b566e9537e2e7f8ebbdbd9b5ef360f29a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c1:83:58:ce:6e:d9:63:80:51:85:48:a7:ec:
57:93:7d:ae:8e:a1:8f:f3:03:9e:a4:7f:88:f1:97:
0f:04:67:c4:11:ad:49:a0:4d:8d:ea:db:8b:c1:b8:
47:7b:70:90:61:4b:26:9d:ce:54:c5:fa:c8:ed:ed:
2b:fc:2e:43:31:e0:f1:fd:82:f5:0d:5a:05:08:90:
0d:86:4a:11:54:60:66:bc:7c:7d:23:e2:a5:bc:0a:
0f:4c:b2:9e:1d:54:3c:b6:5b:10:f6:81:30:6f:dd:
16:3c:69:29:96:e1:e0:f5:13:05:ef:03:f4:13:49:
03:fc:ff:19:a3:cd:18:cc:02:e6:3d:e7:ab:8d:88:
bd:20:5f:de:c2:d9:00:33:c5:fd:73:a0:6f:47:6c:
27:0c:8a:62:64:ef:55:d8:05:b2:5c:96:fc:0a:59:
75:ae:1c:3c:ba:ed:f8:7a:af:85:c9:a3:f1:bb:b6:
02:aa:e2:93:2d:63:7f:c6:01:bb:d3:da:35:e0:be:
88:dc:5a:a7:c4:c7:77:dc:dc:15:69:a4:a7:c7:47:
70:ad:ca:73:82:dd:db:db:fe:e5:c2:fd:c5:1b:77:
18:26:5c:50:a8:c9:b7:86:2a:7b:8f:69:42:f7:86:
1c:54:51:0a:16:7f:bb:44:71:1a:f4:03:99:c0:a5:
50:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:8B:0D:5B:56:6E:95:37:E2:E7:F8:EB:BD:BD:9B:5E:F3:60:F2:9A
X509v3 Authority Key Identifier:
keyid:32:70:60:82:9E:CC:68:4F:A5:9F:85:5A:A0:A4:84:01:BC:17:F2:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnBggp7MaE-ln4VaoKSEAbwX8tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:0a:43:c0:17:09:a9:a3:fe:9b:7b:80:85:b1:04:b8:63:70:
dd:fd:8f:3e:a7:18:e2:78:1c:97:82:da:34:9f:b2:d8:36:3b:
86:71:ad:e4:0c:36:6b:6c:51:8c:cc:0f:4a:26:aa:71:01:5b:
97:b9:25:e4:82:e8:26:9d:c9:53:f6:fe:20:34:f1:00:73:8b:
61:c5:f8:e3:1e:0d:3b:61:eb:e3:f1:f0:f0:07:38:40:dc:ee:
6e:4b:26:3a:d2:5f:5b:89:fe:40:5c:c9:3f:a2:b9:8d:9d:d9:
50:21:0c:f7:cf:21:55:ec:0c:25:02:cb:ae:ea:78:4e:4f:f3:
6f:a2:f1:ad:11:5a:e7:e9:1d:44:73:92:b7:c1:e0:86:dc:4a:
7c:23:9d:14:a5:cf:da:b0:34:68:78:fb:f9:fd:8a:e5:37:d7:
48:7d:eb:34:22:30:9a:aa:34:d7:3d:a9:7b:ed:73:4f:ba:61:
5f:da:8d:53:1d:6e:48:00:0f:cb:00:94:b5:c6:1b:88:f0:51:
09:d8:b6:86:af:58:42:3a:15:86:fc:77:12:3e:a9:0e:a0:c1:
fc:c2:11:95:a7:0d:7a:b7:dd:9c:76:c2:05:b4:84:79:71:4f:
74:46:50:c4:47:af:f3:9b:23:20:d1:d3:be:46:f3:81:61:8c:
5c:5b:7a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:46:54 2025 by rpki-client