Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft
File: mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft (raw, json)
Hash identifier: 5JnQ2eAZdKjc4+ZteCwSvfzFb5xwSUF/R9G8xiTShjQ=
Subject key identifier: 00:5A:49:78:3B:8E:A5:9F:FB:E0:3F:00:ED:0D:FB:CC:1A:08:DA:A3
Authority key identifier: 9A:72:7A:A6:E6:87:B4:92:D2:12:F4:51:DE:B8:61:EA:01:F1:75:29
Certificate issuer: /CN=9a727aa6e687b492d212f451deb861ea01f17529
Certificate serial: 0198971385E770BCB102774E98A904887946
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnJ6puaHtJLSEvRR3rhh6gHxdSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft
Manifest number: 1221
Signing time: Mon 11 Aug 2025 03:01:35 +0000
Manifest this update: Mon 11 Aug 2025 03:01:35 +0000
Manifest next update: Tue 12 Aug 2025 03:01:35 +0000
Files and hashes: 1: mnJ6puaHtJLSEvRR3rhh6gHxdSk.crl (hash: kpXl/wuDDLq09LOBOCqBeCfmu/AXeL27P3ksHL7r0Ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnJ6puaHtJLSEvRR3rhh6gHxdSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:13:85:e7:70:bc:b1:02:77:4e:98:a9:04:88:79:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a727aa6e687b492d212f451deb861ea01f17529
Validity
Not Before: Aug 11 03:01:35 2025 GMT
Not After : Aug 12 03:01:35 2025 GMT
Subject: CN=005a49783b8ea59ffbe03f00ed0dfbcc1a08daa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8c:41:04:29:25:a4:0e:a8:24:68:60:fe:8b:
89:67:c1:27:5e:8e:2c:bc:0c:3b:05:a9:fc:0e:81:
ad:54:c2:da:ff:dc:54:3e:93:58:e7:8c:ef:52:e7:
22:e3:b9:ad:d8:48:3a:8d:b0:84:0b:3e:3b:16:3d:
cf:ff:7a:91:50:76:27:b2:70:86:3d:b4:08:f0:65:
69:b4:9c:af:30:77:23:9c:16:f5:ec:9a:2e:4a:bd:
84:1e:21:15:6f:e2:10:9c:fc:05:00:07:b3:e7:b9:
af:c6:53:08:a7:6c:87:7c:e5:0a:87:67:26:30:0b:
3f:12:d0:56:bb:f6:cc:4c:0d:e5:25:63:79:a7:9e:
a7:95:8c:d5:e8:15:da:ed:2e:d5:32:06:9d:f6:25:
f1:97:1a:ec:0b:25:2f:cc:bb:2d:c9:01:4b:70:b1:
e9:f0:1d:60:ae:d0:dc:1a:f4:cf:11:9c:92:c6:a2:
2a:0b:e7:92:22:a1:08:05:03:a9:db:6e:13:c1:d7:
e3:62:a7:45:cb:36:22:77:02:eb:09:ab:5d:7e:60:
e9:e8:db:d3:e3:0e:b1:b0:d4:db:b6:6c:c6:b6:1f:
70:3e:89:b9:71:f2:2f:a0:12:47:b2:7e:12:2d:9b:
e3:40:e7:88:fa:d7:52:fc:24:46:15:c7:35:37:af:
18:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5A:49:78:3B:8E:A5:9F:FB:E0:3F:00:ED:0D:FB:CC:1A:08:DA:A3
X509v3 Authority Key Identifier:
keyid:9A:72:7A:A6:E6:87:B4:92:D2:12:F4:51:DE:B8:61:EA:01:F1:75:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnJ6puaHtJLSEvRR3rhh6gHxdSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:83:15:96:ef:09:96:16:b5:04:02:5e:c5:f7:fd:02:95:23:
72:81:99:8c:2f:0f:6f:46:55:ca:07:24:53:05:b9:22:8a:05:
b7:17:f3:3f:4f:c8:a9:35:9d:c1:8e:76:80:22:0c:16:ba:8c:
12:cd:6a:82:44:ed:c9:c1:ef:54:21:e4:3f:3c:d7:f8:cb:37:
1b:31:dd:c6:8e:00:6b:78:6d:f0:2a:03:a2:f0:53:b7:ed:23:
55:c9:31:b6:81:2c:36:4d:28:19:0c:c4:bd:41:3b:f9:39:23:
e4:f8:ad:96:8f:7e:5c:83:67:57:a7:82:fc:f9:16:27:d7:1e:
34:5e:51:bd:c9:e7:bf:35:6c:6b:c2:dc:76:66:53:01:db:51:
20:57:b8:3f:59:1f:b4:bb:85:fb:69:ee:bb:21:7e:80:54:14:
52:3f:41:65:47:48:ed:86:94:85:f2:ea:c1:36:5b:b0:83:10:
f0:2a:7c:fb:59:97:d5:9f:bf:f3:40:73:36:a4:47:c2:91:b4:
e8:d9:c2:24:dd:21:cd:8c:c8:81:06:30:3b:cf:24:e9:0c:7e:
c4:92:da:9a:95:88:d7:99:88:f3:d9:13:9b:ab:e2:3b:d1:7f:
2c:72:d1:65:70:df:ca:f5:9a:77:87:4a:8a:06:87:e3:15:14:
33:d0:f0:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiXE4XncLyxAndOmKkEiHlGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNzI3YWE2ZTY4N2I0OTJkMjEyZjQ1MWRlYjg2MWVhMDFm
MTc1MjkwHhcNMjUwODExMDMwMTM1WhcNMjUwODEyMDMwMTM1WjAzMTEwLwYDVQQD
EygwMDVhNDk3ODNiOGVhNTlmZmJlMDNmMDBlZDBkZmJjYzFhMDhkYWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oxBBCklpA6oJGhg/ouJZ8EnXo4s
vAw7Ban8DoGtVMLa/9xUPpNY54zvUuci47mt2Eg6jbCECz47Fj3P/3qRUHYnsnCG
PbQI8GVptJyvMHcjnBb17JouSr2EHiEVb+IQnPwFAAez57mvxlMIp2yHfOUKh2cm
MAs/EtBWu/bMTA3lJWN5p56nlYzV6BXa7S7VMgad9iXxlxrsCyUvzLstyQFLcLHp
8B1grtDcGvTPEZySxqIqC+eSIqEIBQOp224TwdfjYqdFyzYidwLrCatdfmDp6NvT
4w6xsNTbtmzGth9wPom5cfIvoBJHsn4SLZvjQOeI+tdS/CRGFcc1N68YzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFABaSXg7jqWf++A/AO0N+8waCNqjMB8GA1UdIwQY
MBaAFJpyeqbmh7SS0hL0Ud64YeoB8XUpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW5KNnB1YUh0SkxTRXZSUjNyaGg2Z0h4ZFNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9mMzY2YmYtOGY1NS00ZTdmLWFlMjct
NzA4MjE4YTY2YjhmLzEvbW5KNnB1YUh0SkxTRXZSUjNyaGg2Z0h4ZFNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9mMzY2YmYtOGY1NS00ZTdmLWFlMjctNzA4MjE4YTY2Yjhm
LzEvbW5KNnB1YUh0SkxTRXZSUjNyaGg2Z0h4ZFNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfYMVlu8J
lha1BAJexff9ApUjcoGZjC8Pb0ZVygckUwW5IooFtxfzP0/IqTWdwY52gCIMFrqM
Es1qgkTtycHvVCHkPzzX+Ms3GzHdxo4Aa3ht8CoDovBTt+0jVckxtoEsNk0oGQzE
vUE7+Tkj5Pitlo9+XINnV6eC/PkWJ9ceNF5RvcnnvzVsa8LcdmZTAdtRIFe4P1kf
tLuF+2nuuyF+gFQUUj9BZUdI7YaUhfLqwTZbsIMQ8Cp8+1mX1Z+/80BzNqRHwpG0
6NnCJN0hzYzIgQYwO88k6Qx+xJLampWI15mI89kTm6viO9F/LHLRZXDfyvWad4dK
igaH4xUUM9DwTg==
-----END CERTIFICATE-----
Generated at Mon Aug 11 07:23:36 2025 by rpki-client