Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
File: mnj9TUGkk4S99ufcPrvFAL9m2dU.mft (raw, json)
Hash identifier: 6qkKtyB/i7JNxRbuT6dyOqx5g+sgDbuUQC0Etwhh7Ns=
Subject key identifier: 80:59:EC:24:2C:F2:8B:19:40:AF:09:BE:6C:D5:11:51:F2:B2:6B:BB
Authority key identifier: 9A:78:FD:4D:41:A4:93:84:BD:F6:E7:DC:3E:BB:C5:00:BF:66:D9:D5
Certificate issuer: /CN=9a78fd4d41a49384bdf6e7dc3ebbc500bf66d9d5
Certificate serial: 0199C4C4E6C874D91429996F5E671133F7B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
Manifest number: 16C5
Signing time: Wed 08 Oct 2025 17:01:02 +0000
Manifest this update: Wed 08 Oct 2025 17:01:02 +0000
Manifest next update: Thu 09 Oct 2025 17:01:02 +0000
Files and hashes: 1: UxU055m6SYgLYJdY0EIHyH-buK4.roa (hash: L8Prey4FtmmkUZS9Fb3qw934vxOuIVmwZLaUrRs5uYI=)
2: g-ueJOZ8CrwpGCeGD3tl16S98d0.roa (hash: bDoSFJsdsspb9o+5HCKGnMJFTdCyV6X4FzTImtyv2cE=)
3: mnj9TUGkk4S99ufcPrvFAL9m2dU.crl (hash: Un67CS+hnslJ0EwPuIGF5hQEJ+CV4zkCjSPfDvFNFXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:c4:e6:c8:74:d9:14:29:99:6f:5e:67:11:33:f7:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a78fd4d41a49384bdf6e7dc3ebbc500bf66d9d5
Validity
Not Before: Oct 8 17:01:02 2025 GMT
Not After : Oct 9 17:01:02 2025 GMT
Subject: CN=8059ec242cf28b1940af09be6cd51151f2b26bbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b0:63:c6:e9:20:c9:da:04:e5:30:5e:f8:52:
02:87:27:3f:fe:b5:5d:30:b5:7e:f1:3a:2c:6e:68:
42:9a:b5:31:c0:74:08:4b:91:e2:0d:13:d1:48:d3:
98:a5:22:b0:e9:07:94:37:d4:0b:68:21:2d:cf:08:
cb:f5:bb:f5:85:3c:82:dd:5b:74:af:c0:3e:58:79:
98:1e:6c:ff:0e:67:fd:6d:41:66:ac:8c:97:94:eb:
a5:95:dd:d2:28:87:fc:43:9c:67:49:a6:0b:d5:dd:
84:34:02:9a:90:5d:3f:fd:6e:1b:81:7a:37:8d:df:
f1:51:ad:b0:41:bf:b8:b0:d0:59:f7:bc:ba:8c:de:
17:e9:ef:78:29:9c:67:75:9b:77:af:70:52:7b:61:
12:9e:22:42:af:59:a9:a4:e9:a4:cc:2c:a4:27:26:
99:76:6f:88:7a:27:9f:ff:80:c7:91:1f:c7:d3:7f:
3d:2a:43:ac:95:1f:ae:a0:42:c4:81:4d:2a:41:f6:
be:73:5f:5b:18:89:5f:5e:46:e0:4d:92:e6:50:db:
2f:94:42:61:a4:01:e8:e6:d6:08:e2:7b:6f:6f:bd:
13:1a:2b:94:f4:ce:e7:d3:a6:f7:ac:82:6f:f2:e6:
0d:f6:d1:4a:ed:9d:8b:99:04:65:ca:5c:06:04:35:
74:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:59:EC:24:2C:F2:8B:19:40:AF:09:BE:6C:D5:11:51:F2:B2:6B:BB
X509v3 Authority Key Identifier:
keyid:9A:78:FD:4D:41:A4:93:84:BD:F6:E7:DC:3E:BB:C5:00:BF:66:D9:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:59:f5:01:0a:19:54:c5:39:2b:9d:79:39:6a:06:1c:80:b1:
48:12:e2:54:04:01:b0:cb:9a:fc:55:39:c5:89:c8:54:ba:5a:
32:b6:67:03:48:a2:92:a9:6e:b8:c8:3d:dd:7e:9d:61:71:51:
bd:7e:b0:82:c0:a3:af:cb:e5:54:26:c5:be:3b:51:b7:80:f9:
46:00:c6:51:06:9f:00:a5:eb:ff:fd:07:d6:fd:19:ea:c7:16:
61:07:64:3b:a6:05:ea:7b:87:f2:9d:eb:b0:de:56:79:d4:78:
3c:1f:de:07:08:26:0f:b9:60:f2:5d:06:e8:6b:f5:8d:41:72:
86:05:bf:c4:7a:1f:9c:a6:37:3b:2a:5b:31:1a:56:a9:ca:7f:
dd:97:80:ac:94:8b:9b:63:c5:8f:40:fb:72:a4:88:fc:53:71:
31:9b:5f:89:f4:ab:a3:e6:f3:dc:cc:7f:35:85:29:6a:9a:e0:
ee:70:53:e2:71:04:af:0d:01:7f:5e:af:5c:e8:1b:71:00:04:
d2:9b:6c:43:2e:f7:37:08:09:5d:7a:16:1b:ce:f4:eb:97:fa:
e8:ec:30:fb:b0:03:bf:fd:04:85:fc:b0:3f:7c:df:8f:14:a3:
49:50:e0:e1:ba:4b:60:bb:c9:69:a9:ec:4d:3a:ab:fa:82:59:
10:30:e5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:31:52 2025 by rpki-client