
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
File: cMnQbFGt1oKQY_G2exddDAAB5zY.mft (raw, json)
Hash identifier: Yyg0GtN2NUH5Lol7nAblTO9eJlW6NkU4GihopBBfT4g=
Subject key identifier: 7B:E1:17:1F:9E:57:80:01:A6:14:0F:64:8B:61:F5:88:E2:E1:C7:0F
Authority key identifier: 70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36
Certificate issuer: /CN=70c9d06c51add6829063f1b67b175d0c0001e736
Certificate serial: 01987B9CD73B72D65995EAACF95D83503A55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
Manifest number: 161C
Signing time: Tue 05 Aug 2025 19:02:12 +0000
Manifest this update: Tue 05 Aug 2025 19:02:12 +0000
Manifest next update: Wed 06 Aug 2025 19:02:12 +0000
Files and hashes: 1: 5giw-glAqkb4ga3tho0-9kOiFpQ.roa (hash: wPSRGEewfNLQ9tlgNj7BpPtVBQPthONm5g14lvlKftQ=)
2: cMnQbFGt1oKQY_G2exddDAAB5zY.crl (hash: IPTtWmY8PVaqpRDvkIEnZN+Vp9RRA/trI0fTlALB4es=)
3: lO9ygzFEh6vlzFwa5Ivf2tcAutc.roa (hash: 0P+81vJocBAhACHTKyLTeE5L1N5kiVqd+TGA07c8eWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9c:d7:3b:72:d6:59:95:ea:ac:f9:5d:83:50:3a:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70c9d06c51add6829063f1b67b175d0c0001e736
Validity
Not Before: Aug 5 19:02:12 2025 GMT
Not After : Aug 6 19:02:12 2025 GMT
Subject: CN=7be1171f9e578001a6140f648b61f588e2e1c70f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e7:0e:4b:6d:1f:78:87:c2:c6:05:87:00:ec:
74:ff:29:7a:07:bd:43:d5:eb:6e:e2:ef:0b:83:79:
81:d5:49:75:72:2c:5b:07:00:19:9f:ed:4e:0c:91:
8b:0e:8f:3a:4f:4e:83:9b:a4:bd:ff:b5:c0:8c:d2:
15:60:57:84:b6:43:74:04:7b:df:5c:f0:62:f5:6d:
9d:9a:7c:8e:7f:fe:7b:8c:8c:98:9a:58:49:46:e8:
91:16:be:52:39:10:5a:fd:c1:40:41:a8:ac:11:78:
23:62:ba:6a:bd:bd:7d:22:66:be:f4:82:cd:37:6a:
3a:4b:af:77:0a:58:01:10:de:34:4d:f6:e1:79:97:
c3:05:3c:8b:07:ee:75:20:d1:f0:68:33:82:a7:66:
34:53:0c:4a:e7:4d:9d:49:ee:4a:8b:0a:37:07:d0:
15:b8:a9:89:ca:65:f0:5b:31:37:fe:6e:f4:99:98:
10:7f:c9:fa:fc:0d:de:3c:48:99:6b:99:bb:32:86:
8e:bc:fb:87:5c:13:6a:45:ee:55:14:e5:75:fc:af:
a4:38:39:19:4b:83:c8:2d:45:f0:d4:12:82:1f:d8:
33:44:7c:08:1a:c4:76:b7:95:9c:15:94:aa:27:e8:
e5:12:77:18:14:91:0c:86:f5:cb:3c:2e:e2:45:80:
37:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E1:17:1F:9E:57:80:01:A6:14:0F:64:8B:61:F5:88:E2:E1:C7:0F
X509v3 Authority Key Identifier:
keyid:70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:c6:ea:5f:85:81:2b:93:2c:55:bc:af:bc:4d:b5:29:96:cc:
0b:72:82:1c:c1:96:de:39:e7:59:6a:b2:fc:c2:b1:34:ec:89:
77:c1:75:e3:12:0c:43:86:1e:ff:7e:93:91:83:dd:df:0d:ea:
4a:2a:63:4a:04:ca:70:df:5a:bf:a6:c9:8c:d6:48:b6:dc:e6:
c2:32:97:da:ce:92:30:b1:39:14:d0:a1:74:3a:e6:97:fa:ef:
0e:b0:9b:65:d1:94:78:da:19:7d:5f:62:c8:c2:42:e9:23:56:
2e:3e:cf:53:c9:8a:4b:9f:f5:8f:0d:dd:f1:aa:2a:01:96:e5:
b4:75:01:0a:e9:aa:f9:dc:c7:f9:01:2e:e3:d1:c9:f9:73:54:
d5:64:1b:08:49:18:c1:23:8e:a4:a2:31:de:7d:72:6b:5f:e0:
be:b3:3a:43:10:70:10:b7:0a:a3:24:f0:19:35:9a:36:45:21:
c4:56:30:d9:c6:f3:eb:6e:d6:0d:ce:5b:ff:f6:e4:9d:ca:9a:
cf:09:09:e3:09:d9:8d:c4:c1:0c:49:1e:e6:c9:e8:32:6a:ea:
32:74:fd:2e:23:97:1c:20:4d:9a:c9:f6:86:06:6e:05:f9:6b:
9d:a8:2a:98:ab:96:59:47:40:f9:43:8a:78:c1:85:32:81:df:
92:74:cd:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:51:06 2025 by rpki-client