
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.mft
File: mnCwUeXN-WLbwms1JIjQgxvfmjw.mft (raw, json)
Hash identifier: KDiMz37TUDoQKqjQLTJmrVcjKvpljs1hAK4eczG0GBk=
Subject key identifier: DC:CF:73:49:1B:24:B4:C3:9E:A3:75:9B:99:04:D3:79:C4:79:9D:2C
Authority key identifier: 9A:70:B0:51:E5:CD:F9:62:DB:C2:6B:35:24:88:D0:83:1B:DF:9A:3C
Certificate issuer: /CN=9a70b051e5cdf962dbc26b352488d0831bdf9a3c
Certificate serial: 01987DC0EBAFBBD1759C11B20CB84CF21017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnCwUeXN-WLbwms1JIjQgxvfmjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.mft
Manifest number: 12D5
Signing time: Wed 06 Aug 2025 05:00:51 +0000
Manifest this update: Wed 06 Aug 2025 05:00:51 +0000
Manifest next update: Thu 07 Aug 2025 05:00:51 +0000
Files and hashes: 1: ApYo8usd2f87kfxBSCL43GkwNl4.roa (hash: HVht7PktvVlX5vG6maaHsCCbjpS8pRttM16W+m0bt9g=)
2: Uc7Gw0WDW5zdDRKa954NyTzqv6g.roa (hash: FmxP6Uz7faOa7pJaYu4u/4WUOpulDOhau3FqT5C1MnI=)
3: mnCwUeXN-WLbwms1JIjQgxvfmjw.crl (hash: 4t3iP+cj4DJy6TAU47IoKimXnrvOgzdtFaMc4GTkzo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnCwUeXN-WLbwms1JIjQgxvfmjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:c0:eb:af:bb:d1:75:9c:11:b2:0c:b8:4c:f2:10:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a70b051e5cdf962dbc26b352488d0831bdf9a3c
Validity
Not Before: Aug 6 05:00:51 2025 GMT
Not After : Aug 7 05:00:51 2025 GMT
Subject: CN=dccf73491b24b4c39ea3759b9904d379c4799d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f6:2e:23:b6:5c:62:b3:c8:9e:ab:2b:11:ed:
2e:78:ab:f2:eb:00:9a:61:6d:d6:00:49:7f:fc:86:
4a:63:74:4f:01:d2:27:73:f3:bb:57:6f:d5:85:43:
5d:01:be:0f:9e:d9:ba:72:52:7c:12:11:48:37:6b:
29:2a:30:e8:96:85:56:5c:af:ea:33:04:aa:32:3c:
92:bb:b0:f4:9c:d0:7e:6a:fa:d9:98:42:f3:dd:ac:
b5:60:3c:3e:88:1a:44:f6:f8:07:98:5f:6d:60:88:
1e:c3:bd:5a:f6:89:87:d9:bd:65:58:bc:d4:b1:9e:
e1:bf:f2:1a:c5:25:4e:0d:2c:8f:d8:56:d4:9f:36:
c8:ed:e1:4a:90:3a:57:94:d3:d4:fd:fd:32:c3:56:
75:78:79:9f:a4:46:11:af:5e:07:44:a5:66:da:37:
06:63:e9:bb:db:8b:9f:ba:1f:7b:93:fd:af:07:1e:
47:ed:71:b2:03:46:aa:62:8e:cc:e7:c1:60:dc:d9:
26:e0:52:07:c8:89:82:29:4b:72:76:7a:2e:af:a3:
d7:e9:5f:6a:fb:72:f9:c3:bf:69:32:40:c5:80:ee:
fe:ab:03:2e:7a:2c:ba:81:a5:2d:d5:bc:ac:23:80:
92:fb:f9:d8:c5:a9:e2:be:49:13:61:a6:29:12:cb:
f0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:CF:73:49:1B:24:B4:C3:9E:A3:75:9B:99:04:D3:79:C4:79:9D:2C
X509v3 Authority Key Identifier:
keyid:9A:70:B0:51:E5:CD:F9:62:DB:C2:6B:35:24:88:D0:83:1B:DF:9A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnCwUeXN-WLbwms1JIjQgxvfmjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:be:94:6d:11:b4:3b:e3:0e:5e:eb:08:77:7e:3f:07:9a:7c:
0c:c8:ae:81:57:27:a6:44:aa:d1:10:e1:d2:dc:81:4f:02:bb:
42:6c:9d:73:5f:19:87:38:0b:5a:cb:fd:a5:5b:11:df:ba:68:
eb:7d:e8:02:34:85:e8:de:2e:05:1c:7e:6d:3a:4a:16:72:7c:
13:56:4e:f3:15:e3:19:89:21:00:7a:1f:5b:b5:45:d9:c3:f2:
8f:be:e7:df:b8:5a:b4:ea:59:2d:82:0e:59:1c:2f:08:44:29:
05:60:82:2e:41:98:2f:09:66:3c:f5:eb:f3:ff:b6:02:41:33:
cf:31:bc:45:aa:20:4a:6a:9b:61:a4:8b:12:91:eb:f6:5d:ab:
74:13:0d:1d:48:63:09:93:3e:09:91:5c:dc:ae:5c:7d:40:d7:
8e:1e:d2:74:0d:b0:42:94:d4:21:f9:c1:3f:5e:8a:40:d5:7d:
2a:21:2f:ec:2b:29:31:4e:15:2f:ad:86:15:ba:11:75:8e:ad:
72:82:81:bc:b2:1b:b8:5f:ca:d8:5a:29:0c:98:e0:cc:0c:fa:
38:82:b4:03:47:37:8d:05:d9:1a:56:7d:67:e7:d7:c7:19:e4:
c1:59:73:c2:62:a2:36:78:4a:39:fb:27:f8:4b:9f:dd:58:69:
69:d8:28:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:33:06 2025 by rpki-client