Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
File: mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft (raw, json)
Hash identifier: b/DbzJKoVQvh3XKj4Irtb4CGm2WooxhIAZWJ5R2NGp0=
Subject key identifier: 08:31:95:47:65:66:74:AD:0C:88:C4:49:B3:8B:A7:3A:86:50:03:D4
Authority key identifier: 98:C9:C3:18:9B:EC:13:79:31:1B:D1:35:3F:A9:74:9A:68:DD:99:2D
Certificate issuer: /CN=98c9c3189bec1379311bd1353fa9749a68dd992d
Certificate serial: 019A54C100D00E6A061E549C79567C9AB059
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
Manifest number: 0AD9
Signing time: Wed 05 Nov 2025 16:02:06 +0000
Manifest this update: Wed 05 Nov 2025 16:02:06 +0000
Manifest next update: Thu 06 Nov 2025 16:02:06 +0000
Files and hashes: 1: 30qNUm4LVV2JzJAozjpjCljWLl8.roa (hash: xrG/y+AM3EYc5/EtWlaqcCc/K9J1cl96ejgIPJZYD9U=)
2: Z6_bYbvmyerAM_VgnIaDcW67oTI.roa (hash: QWDvfYg2hEe0SCxsF7DniMhJuC7NKbaUI8wFEj7S2ns=)
3: mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl (hash: UI/m66BaMxNPUjRPcO9+uLzQjPRUcDeWJ4ymibRFKzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c1:00:d0:0e:6a:06:1e:54:9c:79:56:7c:9a:b0:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98c9c3189bec1379311bd1353fa9749a68dd992d
Validity
Not Before: Nov 5 16:02:06 2025 GMT
Not After : Nov 6 16:02:06 2025 GMT
Subject: CN=08319547656674ad0c88c449b38ba73a865003d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7f:00:26:3a:b9:8c:2c:51:8a:74:42:50:0b:
44:98:e5:8c:16:c1:6e:aa:3b:1a:df:e8:94:53:95:
8e:fd:16:e1:68:89:15:08:49:1c:0e:dc:f0:65:c2:
37:d4:70:ce:1f:85:9c:d9:d5:74:31:c6:fc:59:18:
26:2c:b9:04:08:bf:bf:15:c7:cb:77:a1:bc:70:10:
c7:5f:b3:b1:ab:6e:91:ff:8a:74:3a:0d:da:ae:b6:
f7:71:b5:ba:99:cb:42:94:6b:2e:48:db:ac:da:57:
91:9f:51:5e:64:ce:38:b1:0c:a9:28:33:e2:9e:5d:
92:86:6d:b2:43:c3:4e:ff:79:62:f7:50:e1:a7:7c:
c1:4b:93:55:16:5b:39:c3:10:2e:d0:89:91:52:f0:
3c:67:91:be:27:4b:30:f4:1e:4b:d2:1e:16:2d:fc:
03:8f:34:41:0f:cb:ac:b6:8c:d3:c2:88:70:c0:18:
14:06:37:f2:38:bf:21:fe:b0:7f:42:e4:38:d5:c9:
b8:a9:24:8b:48:cd:c7:6a:5a:a5:d9:32:ac:fb:a6:
4f:b1:01:72:e6:d2:1a:55:ad:4c:28:32:29:2d:5e:
e6:0a:a4:85:fe:4d:74:d0:84:de:49:59:f3:63:f3:
73:79:9b:a2:9a:81:0f:16:80:40:91:b2:7a:e0:6b:
41:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:31:95:47:65:66:74:AD:0C:88:C4:49:B3:8B:A7:3A:86:50:03:D4
X509v3 Authority Key Identifier:
keyid:98:C9:C3:18:9B:EC:13:79:31:1B:D1:35:3F:A9:74:9A:68:DD:99:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:2c:a7:6f:b9:6f:fe:a0:8a:9c:5b:fe:31:61:bc:9f:8e:78:
c0:27:23:27:08:1c:7c:25:8a:86:7d:e4:b5:82:fd:be:0f:64:
7f:84:fa:49:ef:08:5e:8b:7d:c2:26:1d:83:fa:1a:68:8d:b2:
ae:b4:66:ef:77:a8:10:da:09:e0:75:e6:cd:1b:59:2c:47:f1:
97:c7:5d:0d:21:40:18:cc:c9:de:da:b1:27:33:fb:e8:3d:e3:
ad:5c:3c:04:31:c3:e5:b1:a0:19:66:95:b9:81:51:15:fb:06:
02:24:3a:fc:92:71:67:56:ca:8a:ba:fb:e6:38:e7:01:f6:9f:
fc:7c:25:55:31:a3:f7:3b:5b:1b:f6:a8:d6:82:6b:6d:af:9d:
86:af:75:7a:92:a7:aa:59:5e:8e:ca:6d:20:b2:07:2e:ce:5a:
5b:67:a2:c7:67:f4:ee:1a:04:bc:64:cd:91:78:20:19:29:b7:
9e:b7:a4:71:da:b7:bd:5a:e3:8e:cb:29:64:f7:29:fc:a8:61:
f7:6d:79:96:bc:59:6e:be:4d:d7:eb:56:d8:2f:f2:44:8b:09:
38:0c:a9:6a:31:2c:8e:df:e3:3c:f4:3f:58:05:6f:63:e1:db:
0b:5d:a7:5f:2f:eb:c6:9c:64:c1:ad:42:9b:b8:f3:64:ba:89:
dc:3c:dd:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:28:09 2025 by rpki-client