Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/mnRIG4fez2ODfiaXRiyeRHANS90.mft
File: mnRIG4fez2ODfiaXRiyeRHANS90.mft (raw, json)
Hash identifier: qCRucE23RIjWBq/YG+ZqaEPRUvD9gY/POGRb/0uiDYo=
Subject key identifier: 05:E9:F0:2E:AF:63:AA:FE:EA:B4:51:84:48:90:ED:97:23:79:BB:8E
Authority key identifier: 9A:74:48:1B:87:DE:CF:63:83:7E:26:97:46:2C:9E:44:70:0D:4B:DD
Certificate issuer: /CN=9a74481b87decf63837e2697462c9e44700d4bdd
Certificate serial: 0198496630637A5DB3EEFCCDD0238622D02E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnRIG4fez2ODfiaXRiyeRHANS90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/mnRIG4fez2ODfiaXRiyeRHANS90.mft
Manifest number: 05B9
Signing time: Sun 27 Jul 2025 01:01:30 +0000
Manifest this update: Sun 27 Jul 2025 01:01:30 +0000
Manifest next update: Mon 28 Jul 2025 01:01:30 +0000
Files and hashes: 1: CK4siPWBYfHEvMudVxcsDQPxAR4.roa (hash: YhDnpIVqIiFTzSv32iL9GB9Nu0H7+HMcl1R+Eah/CyM=)
2: mnRIG4fez2ODfiaXRiyeRHANS90.crl (hash: W9Ih/Dl7ZFvCMOQy4BKHS70vQvGP7ZLMlUspO/Pqcdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/mnRIG4fez2ODfiaXRiyeRHANS90.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/mnRIG4fez2ODfiaXRiyeRHANS90.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnRIG4fez2ODfiaXRiyeRHANS90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:30:63:7a:5d:b3:ee:fc:cd:d0:23:86:22:d0:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a74481b87decf63837e2697462c9e44700d4bdd
Validity
Not Before: Jul 27 01:01:30 2025 GMT
Not After : Jul 28 01:01:30 2025 GMT
Subject: CN=05e9f02eaf63aafeeab451844890ed972379bb8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7a:42:40:aa:e8:bf:f0:11:18:a7:2e:0b:63:
85:91:14:bc:e1:77:97:2c:48:bf:fa:3c:c4:c0:b5:
ec:53:5c:54:74:8c:ba:27:05:05:7e:6e:65:6f:c4:
ae:02:a9:d2:57:d8:bb:56:ed:24:5c:f6:fa:7d:e4:
e8:6a:14:4b:54:32:6e:1f:bc:db:9a:73:9a:f7:13:
cf:3b:33:6d:76:14:e2:37:6c:05:a7:ed:4d:d3:57:
7d:e5:e5:cf:f5:b9:95:9f:51:f7:07:ef:04:16:3d:
fb:6b:ea:30:22:1a:f1:60:f2:ba:d2:2d:52:3e:22:
e9:b6:95:3a:60:50:b8:be:48:fb:c6:cc:de:65:a0:
1c:3a:0a:65:ac:10:cd:cd:44:53:48:47:df:de:66:
f9:de:8b:34:04:ed:98:74:50:84:5f:f7:a6:d4:fa:
9b:cd:a5:93:ec:5b:9b:29:10:2d:ca:68:14:10:59:
ad:33:db:15:61:83:bd:28:e5:4a:f5:d9:31:71:f2:
24:51:38:47:b3:1a:33:05:5d:96:9f:e2:03:df:51:
56:ff:75:8f:e5:ba:a1:ab:da:f7:14:e0:70:a1:ac:
e2:7e:8f:e9:1c:60:ab:e1:4f:dd:3d:8f:f2:ea:22:
c1:f1:23:78:de:8a:de:dc:6b:9e:ea:a1:ad:d5:31:
a7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E9:F0:2E:AF:63:AA:FE:EA:B4:51:84:48:90:ED:97:23:79:BB:8E
X509v3 Authority Key Identifier:
keyid:9A:74:48:1B:87:DE:CF:63:83:7E:26:97:46:2C:9E:44:70:0D:4B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnRIG4fez2ODfiaXRiyeRHANS90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/mnRIG4fez2ODfiaXRiyeRHANS90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/mnRIG4fez2ODfiaXRiyeRHANS90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:6a:2a:67:0f:74:bc:43:8e:73:d2:fd:78:45:e9:ce:86:c7:
c6:3b:4f:44:24:32:5f:00:cf:4b:0b:98:3a:8b:96:b4:2e:7f:
3f:c2:fb:b2:64:4c:a6:63:b1:da:ec:bd:fe:82:b3:97:f7:60:
9c:73:8d:5c:55:8a:d7:6c:37:91:bd:6e:80:30:30:cf:44:2d:
df:59:10:94:5b:70:f2:34:c4:0e:55:01:61:2e:38:29:69:6c:
6e:4b:49:c5:f7:d8:19:0a:88:eb:59:29:f9:e7:02:c8:5a:a5:
88:75:b6:2a:b0:a5:3a:bd:3b:23:db:4d:f3:ee:73:70:e4:5f:
00:67:90:a9:35:86:84:9e:7e:04:9f:31:83:1b:48:86:0a:2b:
25:45:41:b2:24:09:2e:f3:8d:38:91:8a:8a:da:4a:51:ff:97:
4d:30:06:57:6b:b1:34:bc:a0:f1:f8:e9:44:0a:9e:28:e7:1d:
92:41:45:5e:08:5b:0e:a4:2a:aa:fd:5e:cc:d8:1c:da:8a:d0:
01:ff:e5:bd:75:e3:3d:e1:a0:af:f0:f6:4f:06:d8:b4:e0:bc:
d0:a6:16:4d:eb:82:72:05:f3:71:1a:2b:5c:33:25:80:44:4a:
00:be:bf:9c:2c:c0:ce:6e:7f:84:3b:c1:57:bf:00:7e:f7:15:
7a:67:7f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:13:24 2025 by rpki-client