Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
File: mnj9TUGkk4S99ufcPrvFAL9m2dU.mft (raw, json)
Hash identifier: qxLVOFxKE3ndyGOVxkkshGmLq3RjaWRaEfxpzfLzG3I=
Subject key identifier: 50:61:A2:2D:68:28:82:5D:5A:89:07:66:C7:B8:BE:A8:97:C6:BD:4A
Authority key identifier: 9A:78:FD:4D:41:A4:93:84:BD:F6:E7:DC:3E:BB:C5:00:BF:66:D9:D5
Certificate issuer: /CN=9a78fd4d41a49384bdf6e7dc3ebbc500bf66d9d5
Certificate serial: 019872CF6950DA5756C499B458529C9685C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 02:00:52 +0000
Manifest this update: Mon 04 Aug 2025 02:00:52 +0000
Manifest next update: Tue 05 Aug 2025 02:00:52 +0000
Files and hashes: 1: UxU055m6SYgLYJdY0EIHyH-buK4.roa (hash: L8Prey4FtmmkUZS9Fb3qw934vxOuIVmwZLaUrRs5uYI=)
2: g-ueJOZ8CrwpGCeGD3tl16S98d0.roa (hash: bDoSFJsdsspb9o+5HCKGnMJFTdCyV6X4FzTImtyv2cE=)
3: mnj9TUGkk4S99ufcPrvFAL9m2dU.crl (hash: YmhYWV8RDUFGPNsKF3yd3iaksR5jKvmqlggoDjdZBZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:69:50:da:57:56:c4:99:b4:58:52:9c:96:85:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a78fd4d41a49384bdf6e7dc3ebbc500bf66d9d5
Validity
Not Before: Aug 4 02:00:52 2025 GMT
Not After : Aug 5 02:00:52 2025 GMT
Subject: CN=5061a22d6828825d5a890766c7b8bea897c6bd4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d1:30:61:c0:66:77:2b:04:d1:7f:d6:d4:24:
14:4f:22:20:66:a7:84:53:7e:1a:a6:d0:82:7c:84:
03:3b:ec:d6:91:82:01:cb:10:d4:22:d9:d1:ed:47:
fc:dc:39:b4:fb:7a:fa:27:53:63:77:65:56:0f:25:
fe:1d:db:05:34:a4:44:95:4e:a0:ac:60:2a:08:6c:
3a:5b:69:25:d9:ce:2a:45:c9:6c:47:f7:05:79:cc:
41:c1:f5:70:7f:f8:2c:24:a5:b6:66:ee:32:62:20:
58:5a:b9:e7:60:75:58:b5:ab:5a:ab:51:fd:63:f7:
95:0b:85:f7:fd:9e:72:71:8c:57:77:74:ee:0f:6e:
6b:14:63:ee:29:4d:a3:ec:9f:79:fe:d6:87:46:b4:
ec:e9:9e:56:e6:f8:07:45:62:b0:a0:ad:3a:fa:8c:
e7:c1:f8:24:4a:9a:af:8f:19:f7:78:3d:c7:23:86:
c8:9a:85:fe:02:59:af:13:ae:b4:0c:09:69:52:cb:
ec:a3:7a:9b:33:2e:ce:f8:00:d7:d6:99:ae:65:f9:
9d:7b:b3:7d:c4:c3:8e:b9:c4:4a:1a:63:0f:e8:a4:
87:e9:b3:e9:f6:f7:79:be:0e:ea:82:ee:2f:f7:b9:
8b:cc:3a:cd:5f:6d:20:77:20:d0:99:01:9c:1c:f6:
96:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:61:A2:2D:68:28:82:5D:5A:89:07:66:C7:B8:BE:A8:97:C6:BD:4A
X509v3 Authority Key Identifier:
keyid:9A:78:FD:4D:41:A4:93:84:BD:F6:E7:DC:3E:BB:C5:00:BF:66:D9:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:3f:03:ae:63:b8:21:ca:1f:aa:01:ed:38:2a:78:c0:c1:67:
ce:2c:c8:0a:22:66:fe:b3:ac:5b:88:4b:c8:a3:ff:37:85:2b:
ee:1a:d2:8c:2c:17:48:ef:a5:1c:ed:d6:29:19:53:d0:8b:5d:
a3:4e:42:bf:c7:da:53:a0:46:bc:e2:76:b8:28:24:b3:66:8e:
4f:23:e4:c8:b2:ee:32:31:12:d5:47:bb:2f:f9:f3:ae:fd:f0:
9b:70:72:e3:21:2e:81:16:d6:41:9c:7a:84:2d:3a:f7:60:99:
05:5b:b3:38:13:69:00:9a:68:1f:84:73:92:0e:12:93:dd:33:
7a:93:e4:3d:ee:59:5c:25:f7:10:d0:aa:66:bc:8e:50:22:0a:
45:11:92:0c:2e:d6:72:9e:3a:39:51:83:e4:dc:dd:75:42:4e:
70:73:ae:e9:66:7e:3b:b8:b8:66:2b:3d:1e:a8:ec:22:36:99:
c5:e7:6e:30:e4:f6:38:03:4c:9b:3d:fb:f0:a5:dc:ac:76:d9:
f4:09:78:73:ee:a4:9c:9f:31:b7:6b:f0:09:04:c8:f0:b9:d0:
e3:de:35:79:f5:23:e3:e3:25:c3:bb:e7:c5:b1:db:e0:d6:f6:
54:b0:1e:72:02:a9:be:01:ee:33:f7:3d:a7:32:78:b8:de:11:
b9:4a:65:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:38 2025 by rpki-client