Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/mnRIG4fez2ODfiaXRiyeRHANS90.mft
File: mnRIG4fez2ODfiaXRiyeRHANS90.mft (raw, json)
Hash identifier: BZO9cPM7DY+nTLZV4rUFITvMCwrRgi55UtUpTrLkgnU=
Subject key identifier: 74:85:37:41:0A:D9:9A:61:D2:C7:06:63:A0:2E:AE:93:2A:5D:8D:06
Authority key identifier: 9A:74:48:1B:87:DE:CF:63:83:7E:26:97:46:2C:9E:44:70:0D:4B:DD
Certificate issuer: /CN=9a74481b87decf63837e2697462c9e44700d4bdd
Certificate serial: 019A4EF5779A5E738C0F32AD35052556BECC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnRIG4fez2ODfiaXRiyeRHANS90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/mnRIG4fez2ODfiaXRiyeRHANS90.mft
Manifest number: 06C5
Signing time: Tue 04 Nov 2025 13:01:41 +0000
Manifest this update: Tue 04 Nov 2025 13:01:41 +0000
Manifest next update: Wed 05 Nov 2025 13:01:41 +0000
Files and hashes: 1: CK4siPWBYfHEvMudVxcsDQPxAR4.roa (hash: YhDnpIVqIiFTzSv32iL9GB9Nu0H7+HMcl1R+Eah/CyM=)
2: mnRIG4fez2ODfiaXRiyeRHANS90.crl (hash: qOd5bxi5I7uWtmTui4kq9s0hnI5ORBssdtnAF0tbVuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/mnRIG4fez2ODfiaXRiyeRHANS90.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/mnRIG4fez2ODfiaXRiyeRHANS90.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnRIG4fez2ODfiaXRiyeRHANS90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:77:9a:5e:73:8c:0f:32:ad:35:05:25:56:be:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a74481b87decf63837e2697462c9e44700d4bdd
Validity
Not Before: Nov 4 13:01:41 2025 GMT
Not After : Nov 5 13:01:41 2025 GMT
Subject: CN=748537410ad99a61d2c70663a02eae932a5d8d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:43:8b:ae:53:a3:5c:40:9c:5e:f9:22:ef:75:
47:1e:a9:ce:5f:eb:12:31:ec:86:08:ca:36:44:9f:
29:78:6d:39:17:60:2b:a2:0a:60:23:dd:f0:7e:a3:
41:f6:e2:00:a9:c9:0b:12:e8:c1:aa:a3:0d:49:fb:
6b:75:67:a8:87:d6:49:41:4e:84:06:ef:bc:e4:d5:
a3:ca:88:16:ba:4d:6b:cd:39:58:29:b1:08:48:65:
dd:59:40:f3:5d:2e:b6:4e:1f:4f:34:29:a1:a5:d8:
62:46:f8:e0:ea:12:85:0b:9c:5b:0d:b7:c1:c6:e9:
bc:a7:7a:eb:2a:32:ac:50:ea:98:fe:1c:5d:d4:ac:
f9:33:66:17:41:1c:d9:3c:87:a9:51:65:c6:82:3e:
6e:7e:7a:5a:7d:61:f5:96:02:87:5e:aa:00:fa:61:
e6:3b:aa:dc:1f:45:d9:7e:a3:ba:b4:7d:9c:e2:a6:
3e:8e:c6:7c:b8:90:88:d6:dd:6d:a4:3c:61:ef:40:
f5:2d:20:6c:e4:48:4b:bc:9e:1b:06:66:24:49:f2:
6f:b1:4a:b8:e5:00:e4:3f:0b:87:8d:0b:8e:a4:60:
dc:37:5d:84:47:fe:05:51:7d:77:e2:c9:f8:4b:8e:
a1:10:52:03:1f:ed:e8:28:b1:8b:48:90:7c:77:30:
71:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:85:37:41:0A:D9:9A:61:D2:C7:06:63:A0:2E:AE:93:2A:5D:8D:06
X509v3 Authority Key Identifier:
keyid:9A:74:48:1B:87:DE:CF:63:83:7E:26:97:46:2C:9E:44:70:0D:4B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnRIG4fez2ODfiaXRiyeRHANS90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/mnRIG4fez2ODfiaXRiyeRHANS90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/mnRIG4fez2ODfiaXRiyeRHANS90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:95:6d:11:72:e0:cf:eb:dc:ae:54:02:20:2d:3b:a9:e8:1b:
c9:b1:43:5e:51:b2:e2:8b:a9:8d:4f:04:73:30:47:50:af:db:
19:c2:22:fa:d5:d3:c3:62:bf:f6:cc:73:7d:78:d8:9f:2a:1c:
f4:8c:51:de:fd:73:64:bc:c8:c6:27:a7:11:75:4d:26:db:22:
f8:e9:4c:25:aa:f3:7b:37:1c:e6:2c:cc:06:ab:15:b2:4a:b8:
bf:b7:47:b7:ff:b9:45:5f:61:81:f5:e5:7c:3a:82:7b:87:99:
b8:45:03:0a:cf:69:8d:6c:fa:04:b1:76:a1:51:fa:bb:5d:13:
ab:f0:f1:8b:b9:55:21:98:1b:d6:83:7f:e5:da:43:a0:c5:25:
ea:14:15:75:3e:c7:eb:dc:26:a5:e0:bd:1a:90:26:86:a3:13:
da:cb:b2:53:90:d0:05:4c:6d:61:bb:db:d5:05:b3:27:b3:ca:
f0:14:1a:5e:88:24:88:ca:55:d9:df:26:3d:93:6f:24:9c:1e:
ab:d3:80:83:fd:61:51:51:52:96:c5:de:3c:14:55:36:7a:10:
e0:5d:ac:d9:71:71:10:e2:b1:b3:15:83:69:ed:d6:8e:30:dd:
c4:c1:41:21:89:99:82:62:61:63:1b:1d:ba:41:52:8c:3a:dc:
99:18:e9:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:57:11 2025 by rpki-client