Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.mft
File: mnF-0dxIgETl4qsAdUM1WM_ejIU.mft (raw, json)
Hash identifier: 5J9wKFv5xNXMQhxIb/6BgURkm1Wl2LgxpExpeMnMCJk=
Subject key identifier: D0:68:A1:99:F4:51:A8:FC:EB:5D:91:6F:43:96:8C:39:72:29:D5:1C
Authority key identifier: 9A:71:7E:D1:DC:48:80:44:E5:E2:AB:00:75:43:35:58:CF:DE:8C:85
Certificate issuer: /CN=9a717ed1dc488044e5e2ab0075433558cfde8c85
Certificate serial: 019874503BDB4CADCB9F7CCAB883BF10C6F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnF-0dxIgETl4qsAdUM1WM_ejIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.mft
Manifest number: 0504
Signing time: Mon 04 Aug 2025 09:01:11 +0000
Manifest this update: Mon 04 Aug 2025 09:01:11 +0000
Manifest next update: Tue 05 Aug 2025 09:01:11 +0000
Files and hashes: 1: 1-I5euRLEKsr7FF-4VskQLdu5Wm0.roa (hash: 4AXnB9gGffBa+5UGJwTlfxl3dTLBtwfWaDwofBbf+WY=)
2: MtoIhFzzjtMtI4g5kxOun27y3IM.roa (hash: DlZC6F8VIFuzmjWhSIX/LygNaAgpAHPicElZhEshqgM=)
3: mnF-0dxIgETl4qsAdUM1WM_ejIU.crl (hash: XvswLIEYfPTWqd0tWTlJdxBnwqnzRjs8RlwlQ0Co6kA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnF-0dxIgETl4qsAdUM1WM_ejIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:3b:db:4c:ad:cb:9f:7c:ca:b8:83:bf:10:c6:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a717ed1dc488044e5e2ab0075433558cfde8c85
Validity
Not Before: Aug 4 09:01:11 2025 GMT
Not After : Aug 5 09:01:11 2025 GMT
Subject: CN=d068a199f451a8fceb5d916f43968c397229d51c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2a:66:ce:c2:f1:03:cd:e1:c0:a3:ec:2d:ab:
fc:61:ce:8b:ee:5e:b6:fe:d5:3a:c1:0f:13:e6:cb:
18:83:6b:ff:39:6d:16:69:a1:2c:b8:b0:25:20:4f:
bc:67:bf:eb:80:f2:37:a8:ed:d5:37:33:ab:ad:53:
df:36:98:59:9b:f9:9d:8c:1f:25:cf:00:51:e1:a8:
bd:93:89:93:8f:1c:e3:4d:45:a9:d4:33:5e:6e:7c:
75:a9:52:dd:21:bb:b4:86:8b:a9:87:76:bd:d8:30:
43:04:77:1d:7c:9c:9e:2f:79:50:aa:dc:39:67:bd:
a0:31:65:8d:b7:d9:57:6a:b8:1e:ec:bc:b6:c7:ce:
37:ad:39:8e:74:83:68:00:2e:ba:4c:1d:78:ca:8c:
f3:17:c5:39:a2:92:90:e9:2c:90:81:bc:48:a7:d2:
4a:49:9d:86:44:c0:46:6c:f9:a0:68:82:71:35:84:
41:f3:d4:9d:a6:ea:42:69:e5:ab:ee:9e:e8:07:f8:
fd:39:14:e2:00:2f:e9:b9:4e:11:0b:15:61:fc:d3:
56:80:34:f9:80:cb:06:bc:8d:9c:05:07:0f:b1:3d:
54:e8:ac:50:f4:02:dd:f2:bb:1e:d7:a6:d6:2f:c7:
2f:e7:60:c0:98:e1:f1:a8:ec:9c:85:b7:38:dd:ac:
da:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:68:A1:99:F4:51:A8:FC:EB:5D:91:6F:43:96:8C:39:72:29:D5:1C
X509v3 Authority Key Identifier:
keyid:9A:71:7E:D1:DC:48:80:44:E5:E2:AB:00:75:43:35:58:CF:DE:8C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnF-0dxIgETl4qsAdUM1WM_ejIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:d6:69:bb:0e:ac:ee:9e:5d:68:61:f7:7a:d6:c0:ca:98:56:
c5:d6:b6:b4:f6:9f:6f:60:9d:5e:fd:09:d1:e4:7b:5c:4e:a4:
75:5a:03:7e:96:f9:e4:4a:2b:10:fe:b1:9b:e9:b5:a4:ba:c5:
ac:e3:4d:3a:46:09:a7:5f:79:00:0e:b9:b7:e6:6b:ac:53:aa:
36:dc:7c:3c:ae:b6:cc:5c:6c:b6:f5:77:69:b2:e8:2a:c1:94:
94:cf:c8:7c:e6:e2:cb:50:e6:54:e7:b7:cc:64:c7:2d:9c:30:
3e:17:ca:44:b5:6d:07:4b:03:92:2f:65:94:57:41:9a:8e:04:
bc:ab:0e:4c:05:bf:c3:66:80:88:3e:16:35:19:5c:9f:2a:cb:
56:a8:1f:16:da:f7:8f:24:0a:58:c6:07:06:7e:16:3b:3b:f3:
df:0b:cc:f2:3a:ef:9a:57:36:cb:90:04:86:b8:6b:e0:e7:69:
41:6c:52:d4:2e:86:fe:13:b4:82:2d:bd:01:ee:88:4f:4c:38:
f8:56:4b:c0:76:9b:f0:ee:15:d1:27:e4:c2:8e:cc:06:5c:6f:
c1:dc:f2:56:28:58:a1:48:0f:04:a7:40:79:33:04:90:b2:f8:
70:38:2a:13:f4:3c:13:01:b7:84:1a:d3:61:cc:e2:61:23:6a:
a5:a8:0b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:42:39 2025 by rpki-client