Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/mnRIG4fez2ODfiaXRiyeRHANS90.mft
File: mnRIG4fez2ODfiaXRiyeRHANS90.mft (raw, json)
Hash identifier: O7wqoX2qCgs+fxYQkRaBhiAWUnY+eVzDwdHxRHk7SEI=
Subject key identifier: 51:0A:98:36:E3:87:BB:5A:9F:28:B5:ED:06:57:40:67:83:4D:19:6D
Authority key identifier: 9A:74:48:1B:87:DE:CF:63:83:7E:26:97:46:2C:9E:44:70:0D:4B:DD
Certificate issuer: /CN=9a74481b87decf63837e2697462c9e44700d4bdd
Certificate serial: 019873E345D8A6E7AEC30936A84BEBC27822
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnRIG4fez2ODfiaXRiyeRHANS90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/mnRIG4fez2ODfiaXRiyeRHANS90.mft
Manifest number: 05CF
Signing time: Mon 04 Aug 2025 07:02:11 +0000
Manifest this update: Mon 04 Aug 2025 07:02:11 +0000
Manifest next update: Tue 05 Aug 2025 07:02:11 +0000
Files and hashes: 1: CK4siPWBYfHEvMudVxcsDQPxAR4.roa (hash: YhDnpIVqIiFTzSv32iL9GB9Nu0H7+HMcl1R+Eah/CyM=)
2: mnRIG4fez2ODfiaXRiyeRHANS90.crl (hash: mmPcq3Ysi40Brnj/ueZ9guJtTSRpRuHHr6VwJR6Sndc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/mnRIG4fez2ODfiaXRiyeRHANS90.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/mnRIG4fez2ODfiaXRiyeRHANS90.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnRIG4fez2ODfiaXRiyeRHANS90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:45:d8:a6:e7:ae:c3:09:36:a8:4b:eb:c2:78:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a74481b87decf63837e2697462c9e44700d4bdd
Validity
Not Before: Aug 4 07:02:11 2025 GMT
Not After : Aug 5 07:02:11 2025 GMT
Subject: CN=510a9836e387bb5a9f28b5ed06574067834d196d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:02:80:06:cc:e9:64:2a:45:ff:e0:77:b1:d5:
03:fa:77:fe:4f:3a:eb:18:6a:3b:52:15:73:93:c3:
c1:5e:28:d2:81:5d:4a:43:a8:a0:0c:16:66:7a:02:
81:ed:62:c1:ed:e6:6b:28:b5:9a:06:7b:a1:84:96:
10:2a:bd:49:a2:42:e4:89:e9:a0:72:16:5a:91:a9:
f1:e3:fa:ab:cf:02:bb:8f:7c:e5:6c:74:20:19:07:
7a:2c:23:d4:8d:20:85:4c:28:49:59:95:7a:6e:01:
b0:20:24:86:cb:d5:89:ec:b2:c3:17:07:25:f3:88:
6c:e4:5b:80:0e:f3:2e:b0:20:3f:fb:94:ed:fa:42:
56:76:4e:54:37:ed:02:a1:ba:d3:f6:51:63:39:0e:
10:06:a3:7c:f1:2a:44:0f:ca:b3:15:21:53:30:b1:
bf:14:70:65:54:a2:87:de:d4:31:43:36:01:b9:c3:
f5:a0:39:13:75:49:b3:8a:50:d5:57:b3:4f:1c:bc:
96:00:be:2a:79:61:ab:0a:1c:46:f8:77:38:17:15:
49:ee:d0:fd:b4:24:ac:9a:82:01:74:1d:1c:48:e4:
3c:41:eb:4b:54:2f:1d:c3:e2:84:f7:2f:42:d9:2c:
74:fd:41:93:7a:0a:88:58:b8:76:53:9a:c9:39:62:
9d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:0A:98:36:E3:87:BB:5A:9F:28:B5:ED:06:57:40:67:83:4D:19:6D
X509v3 Authority Key Identifier:
keyid:9A:74:48:1B:87:DE:CF:63:83:7E:26:97:46:2C:9E:44:70:0D:4B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnRIG4fez2ODfiaXRiyeRHANS90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/mnRIG4fez2ODfiaXRiyeRHANS90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/mnRIG4fez2ODfiaXRiyeRHANS90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:c5:4b:31:1e:d9:05:e2:b0:fb:48:ca:a5:08:5f:db:b8:e8:
5c:a9:1c:73:5f:1a:6b:89:8d:f0:48:d3:fb:57:09:1d:1e:8e:
9c:d6:3a:7a:5d:c0:21:a5:48:ed:40:a2:8f:dc:14:88:46:00:
01:7c:c0:e1:9b:b4:f2:2d:c5:05:8d:0a:c0:4e:45:13:9a:65:
c1:73:7b:de:38:89:0d:f3:4b:87:46:a6:ab:d6:87:73:51:93:
bf:d4:c3:af:f9:48:41:93:87:b6:03:88:d9:20:71:36:3b:98:
88:bf:34:f0:1f:02:d8:ef:11:fe:97:1d:91:33:a5:c8:bc:b6:
99:b3:96:69:20:16:0d:67:8a:a3:4d:da:f2:12:9c:ad:10:c6:
97:42:60:74:1c:63:40:c6:45:2d:51:0a:81:ee:02:d8:53:7b:
4e:a3:dc:54:b8:58:a9:c9:0f:95:c7:09:b1:6f:5a:66:14:4e:
4c:77:d5:04:88:c3:63:9f:4c:90:7b:42:8c:86:fb:f6:c0:27:
8b:88:1d:39:c0:83:6d:16:e5:a4:e7:26:c3:e0:64:ac:de:1d:
f7:02:dc:a0:e2:09:af:0a:1d:78:5e:98:60:0b:a0:ee:e1:24:
7a:27:8c:d5:12:27:f6:f8:c4:48:d7:19:ff:32:b5:40:be:7b:
03:cc:82:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:25 2025 by rpki-client