Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
File: mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft (raw, json)
Hash identifier: oLy7aWtG/DCT7wrXl6hMa59Vr5hdIf2QT3/cAO5LiVY=
Subject key identifier: D5:38:C9:7A:C9:B3:FA:3E:C5:F9:7D:0C:17:AF:33:13:5A:E5:A7:C2
Authority key identifier: 98:C9:C3:18:9B:EC:13:79:31:1B:D1:35:3F:A9:74:9A:68:DD:99:2D
Certificate issuer: /CN=98c9c3189bec1379311bd1353fa9749a68dd992d
Certificate serial: 019890DAD6A48A1EC75ACCA20E4C0C2BB741
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
Manifest number: 09EF
Signing time: Sat 09 Aug 2025 22:01:57 +0000
Manifest this update: Sat 09 Aug 2025 22:01:57 +0000
Manifest next update: Sun 10 Aug 2025 22:01:57 +0000
Files and hashes: 1: 30qNUm4LVV2JzJAozjpjCljWLl8.roa (hash: xrG/y+AM3EYc5/EtWlaqcCc/K9J1cl96ejgIPJZYD9U=)
2: Z6_bYbvmyerAM_VgnIaDcW67oTI.roa (hash: QWDvfYg2hEe0SCxsF7DniMhJuC7NKbaUI8wFEj7S2ns=)
3: mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl (hash: 5ky+a/9ZIuFNHRAuP7AgV+dzBckBdZrM2ZUe7Yv1sy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:da:d6:a4:8a:1e:c7:5a:cc:a2:0e:4c:0c:2b:b7:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98c9c3189bec1379311bd1353fa9749a68dd992d
Validity
Not Before: Aug 9 22:01:57 2025 GMT
Not After : Aug 10 22:01:57 2025 GMT
Subject: CN=d538c97ac9b3fa3ec5f97d0c17af33135ae5a7c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e4:23:00:3e:c2:5c:2d:7a:cc:28:b4:27:60:
cf:1e:f0:ee:10:2b:2f:62:fe:34:bc:02:33:76:f4:
48:b6:d8:9f:bd:8b:0b:10:38:1f:c4:48:e6:4b:2a:
aa:78:0b:7d:b9:49:7b:44:f0:09:83:80:37:c3:4b:
dd:53:bb:e3:d9:a7:2a:a0:f5:8e:8c:93:5b:ef:24:
cc:95:fb:9d:a4:14:21:d2:a4:00:c4:cd:68:81:68:
46:d8:df:72:3e:38:31:28:c1:55:7d:fa:48:4f:e6:
66:3e:e7:41:c1:37:a1:37:53:82:e3:2c:84:70:0b:
dd:51:1b:65:fd:e8:ef:91:1f:44:7e:7a:c5:97:6f:
7c:40:76:55:0c:b3:34:97:8a:3b:c8:17:a9:9c:91:
f6:40:4d:5f:de:e5:de:b8:67:e4:12:01:43:75:1d:
b2:e7:ed:91:5b:a1:09:52:1a:11:5e:78:15:f1:4d:
2d:89:68:74:b0:0c:51:6b:02:ce:68:cd:0a:08:a7:
21:ef:37:27:10:7a:21:5e:90:68:e7:64:62:fe:81:
3c:99:78:85:ba:cc:a2:93:fd:e4:b1:b3:89:68:ee:
f2:b2:3d:2a:d0:f3:72:ac:bc:fb:9c:74:ca:d5:1f:
32:77:1a:a9:74:97:27:34:3b:75:84:85:f7:09:de:
27:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:38:C9:7A:C9:B3:FA:3E:C5:F9:7D:0C:17:AF:33:13:5A:E5:A7:C2
X509v3 Authority Key Identifier:
keyid:98:C9:C3:18:9B:EC:13:79:31:1B:D1:35:3F:A9:74:9A:68:DD:99:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:03:64:dd:f9:59:11:fd:e5:c8:e8:42:b1:bc:52:f3:3c:3e:
be:03:b4:80:9e:30:35:38:b5:09:30:77:e6:65:1d:32:9f:4e:
a6:07:8a:ed:c1:e5:b3:e1:49:db:10:6a:20:40:bb:df:22:fe:
54:05:62:8e:86:b8:c5:39:f4:ab:cb:d9:9d:0d:8b:c7:23:fe:
2e:1f:08:58:6f:26:1f:a4:d1:b1:70:07:10:43:fa:75:71:e9:
67:2b:17:41:af:3f:8a:05:14:67:74:97:54:c2:a5:8c:71:c9:
17:55:4b:a6:15:d4:9b:da:40:8e:5b:6e:3f:55:7b:d2:c3:17:
53:aa:72:95:e0:01:90:a4:a8:4c:1d:71:8c:f9:1b:c2:c9:3a:
b0:10:ae:a1:85:1e:19:2e:c2:ca:07:73:7a:6e:ba:f8:cc:47:
07:ed:0f:9e:95:20:e2:b4:58:43:0f:25:9d:53:c6:7e:02:47:
b7:15:52:e8:73:02:83:c8:2c:3b:b3:cb:a1:5e:e4:cd:d6:d2:
3d:bb:00:a5:51:55:95:7c:c0:65:4b:30:46:af:c1:5e:89:e3:
b7:fd:74:16:2b:7c:37:d5:2f:8c:06:45:1e:d3:7a:5f:5a:5b:
c6:a0:b0:7f:bc:90:99:83:1a:f1:64:12:2e:99:2b:6b:ce:4e:
b2:ae:5c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:14:05 2025 by rpki-client