Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
File: mnj9TUGkk4S99ufcPrvFAL9m2dU.mft (raw, json)
Hash identifier: XDJ/icTgjI5kVdGGs0Dwk8CpFAFhor3NB0BVsNqtbbc=
Subject key identifier: F2:28:7C:1B:3C:AE:64:E6:15:33:BE:92:A3:91:C8:0D:55:47:04:E4
Authority key identifier: 9A:78:FD:4D:41:A4:93:84:BD:F6:E7:DC:3E:BB:C5:00:BF:66:D9:D5
Certificate issuer: /CN=9a78fd4d41a49384bdf6e7dc3ebbc500bf66d9d5
Certificate serial: 019770083456314D6CF55FF62005209DB0FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 20:01:15 +0000
Manifest this update: Sat 14 Jun 2025 20:01:15 +0000
Manifest next update: Sun 15 Jun 2025 20:01:15 +0000
Files and hashes: 1: UxU055m6SYgLYJdY0EIHyH-buK4.roa (hash: L8Prey4FtmmkUZS9Fb3qw934vxOuIVmwZLaUrRs5uYI=)
2: g-ueJOZ8CrwpGCeGD3tl16S98d0.roa (hash: bDoSFJsdsspb9o+5HCKGnMJFTdCyV6X4FzTImtyv2cE=)
3: mnj9TUGkk4S99ufcPrvFAL9m2dU.crl (hash: AzGT0lwHO7HCvfyAGf53rn7NFZAM8I+8cGHLlniUnzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:08:34:56:31:4d:6c:f5:5f:f6:20:05:20:9d:b0:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a78fd4d41a49384bdf6e7dc3ebbc500bf66d9d5
Validity
Not Before: Jun 14 20:01:15 2025 GMT
Not After : Jun 15 20:01:15 2025 GMT
Subject: CN=f2287c1b3cae64e61533be92a391c80d554704e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ce:0b:73:fa:ed:5c:b7:53:fd:35:56:d0:36:
65:14:ed:2e:8b:01:77:35:13:b6:8e:5a:f0:7a:25:
84:d9:fc:53:09:84:23:2d:74:2c:c3:75:91:19:2a:
02:a0:0e:c6:a9:45:04:3a:1c:f7:71:0b:2a:dd:76:
22:65:d5:65:c1:d6:8c:80:e6:e4:92:76:d5:23:f6:
c4:ee:96:22:60:42:fa:e3:5d:1e:a7:3a:d7:54:72:
e4:fc:d5:79:5c:55:38:e5:f5:1c:a2:63:a6:b5:54:
57:7e:86:5d:50:27:70:5d:6d:3c:2c:71:bb:07:55:
e9:51:72:be:85:a3:f0:48:01:dd:98:31:ac:66:fe:
1d:e6:29:8c:41:f8:56:46:ca:9e:32:cc:b0:11:d1:
57:47:0b:bf:fc:8e:20:53:53:51:00:17:56:e1:46:
b5:69:62:b4:a2:ef:f3:a1:65:5f:0e:98:7d:19:57:
29:bc:b4:77:11:16:3c:b6:4c:26:3a:a7:76:2d:34:
45:02:6e:0e:24:ed:f5:14:3d:41:93:bf:59:25:97:
97:37:66:0f:4a:14:c1:21:25:e2:84:de:6b:bb:57:
08:8d:e6:07:e0:a8:2d:c3:45:e1:fb:8b:33:06:32:
15:3c:ae:c8:9e:bb:b5:0d:06:1f:65:64:06:76:fd:
f6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:28:7C:1B:3C:AE:64:E6:15:33:BE:92:A3:91:C8:0D:55:47:04:E4
X509v3 Authority Key Identifier:
keyid:9A:78:FD:4D:41:A4:93:84:BD:F6:E7:DC:3E:BB:C5:00:BF:66:D9:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:3e:24:af:30:8e:bc:6d:08:50:76:5f:06:a0:cc:fe:85:0f:
61:22:17:85:19:0e:37:62:37:76:6f:ba:1b:62:e3:58:ef:88:
35:a2:5a:38:87:93:f0:29:29:9f:14:af:d7:dc:78:e3:b2:3f:
b5:54:e5:74:14:a8:58:03:cd:5d:ab:9b:b8:a6:3c:74:ef:4c:
12:de:f9:9a:2d:be:6b:d8:2f:97:20:3f:40:b4:aa:ce:99:2e:
76:61:77:5b:ad:39:c0:9f:2e:02:5c:d5:3d:5e:31:50:bb:a0:
4b:73:9a:47:d5:a1:f4:f0:d5:c4:b0:5e:1d:85:5f:c2:2b:31:
d5:0f:b1:06:b8:74:ed:c0:0a:9d:65:7c:2f:66:41:b7:a0:2f:
f4:64:ed:12:a4:3e:56:1d:0e:13:85:c1:05:75:b7:d5:a3:40:
96:07:92:02:63:c3:ec:35:05:bf:c7:33:a5:7a:b6:17:01:5d:
21:3e:d0:29:55:4d:8e:c3:ff:8e:43:f3:2d:2b:a9:c0:73:9f:
c5:9e:07:cf:2e:94:6a:f7:35:01:b1:4d:d7:1e:66:d5:35:cb:
ab:b8:32:71:84:be:da:b2:d6:3c:8e:e6:4f:69:5d:c3:03:ee:
69:7e:41:07:e3:6a:bb:7c:58:5e:44:f4:17:0f:06:6c:fa:7c:
da:1f:da:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:45:03 2025 by rpki-client