Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
File: M4nguKL_gqI7SN1ubnYXa0zTgy4.mft (raw, json)
Hash identifier: eT+Qd3GTqZKlJSS5QawZIfs/CBBrmQHp9c3uzEKgVRk=
Subject key identifier: CD:53:79:F8:40:E6:EA:9B:F7:7F:70:DA:72:A6:35:D4:8B:96:A7:5C
Authority key identifier: 33:89:E0:B8:A2:FF:82:A2:3B:48:DD:6E:6E:76:17:6B:4C:D3:83:2E
Certificate issuer: /CN=3389e0b8a2ff82a23b48dd6e6e76176b4cd3832e
Certificate serial: 0198440848C4FE3ED140C25E652F73FCB2CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
Manifest number: 1555
Signing time: Sat 26 Jul 2025 00:00:50 +0000
Manifest this update: Sat 26 Jul 2025 00:00:50 +0000
Manifest next update: Sun 27 Jul 2025 00:00:50 +0000
Files and hashes: 1: JMceSfi0AqXXn3Vf_3TI3F7NzUY.roa (hash: pe6susqm7TY0tacMrKbk21inj2AOVSm8thD8J6ZV9Xk=)
2: M4nguKL_gqI7SN1ubnYXa0zTgy4.crl (hash: iem1zATqu+BHMqysOkh26UhsKYuVlVUzUT+5I4/EK54=)
3: bK9CgrejwLSheO3uUPc3gSoXEuM.roa (hash: yazAgCwjNcsZSgaF8ULBtVRMqRXfNnLvbpG2BCIQgcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 00:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:08:48:c4:fe:3e:d1:40:c2:5e:65:2f:73:fc:b2:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3389e0b8a2ff82a23b48dd6e6e76176b4cd3832e
Validity
Not Before: Jul 26 00:00:50 2025 GMT
Not After : Jul 27 00:00:50 2025 GMT
Subject: CN=cd5379f840e6ea9bf77f70da72a635d48b96a75c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:01:50:fa:06:71:07:70:a2:58:eb:69:ac:ef:
b6:44:f4:3b:20:f8:a0:a4:8f:af:53:bd:3c:51:ac:
c2:bc:f1:73:9a:5c:43:15:78:f2:76:75:4c:7a:ce:
99:aa:ef:8c:13:48:02:a6:47:0a:cc:23:16:ff:7b:
d1:46:e6:e0:35:44:c8:9a:11:bc:8a:01:b6:9d:bb:
bd:94:d1:73:8c:30:4a:e3:45:df:26:64:ea:4f:f5:
a8:fe:3c:19:3f:d7:68:cb:0e:21:cb:1a:c9:23:eb:
db:98:83:00:e3:6a:6d:ed:fc:88:98:93:d5:98:8c:
13:b2:43:68:29:bb:69:71:64:fb:29:3b:ef:09:b1:
4f:e4:df:59:fd:62:09:d8:d3:4e:32:55:56:89:5d:
0e:25:2f:b8:8f:c1:4a:70:1e:0d:e2:06:8d:6a:4b:
47:94:f1:7f:2f:f3:c2:da:67:1e:50:3e:26:aa:bc:
ac:1f:09:33:87:65:d9:01:98:39:4a:40:30:84:85:
99:6a:1d:ce:83:7e:25:41:c5:34:04:8b:28:32:f0:
dd:39:65:30:08:a4:22:0b:4e:6d:5b:de:92:1a:b6:
f2:3e:13:d0:57:a8:6a:b7:b1:4e:ff:c1:7f:f0:23:
b9:4b:c7:f7:c3:6e:60:ce:8e:cb:a8:43:07:24:e4:
0d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:53:79:F8:40:E6:EA:9B:F7:7F:70:DA:72:A6:35:D4:8B:96:A7:5C
X509v3 Authority Key Identifier:
keyid:33:89:E0:B8:A2:FF:82:A2:3B:48:DD:6E:6E:76:17:6B:4C:D3:83:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:e6:b7:6a:f7:9f:fd:40:10:a9:f2:c9:25:53:7e:8d:b8:c6:
a9:11:8f:c8:fb:04:d9:ed:f7:6d:57:c3:72:3d:8c:f8:ee:dc:
a5:b7:c7:16:59:e6:13:f7:bb:0c:ad:58:b4:10:ff:2b:51:dc:
39:1a:b4:81:3a:8e:e7:f7:d1:41:af:e0:65:17:0e:d7:f9:ff:
ee:3d:13:9f:ea:9d:94:5a:f4:43:56:79:f1:ed:04:2c:a4:72:
f5:fc:8f:7a:84:a8:37:b3:df:f4:e6:e1:12:58:af:b8:81:a9:
c9:35:1b:68:63:f8:82:f2:58:4d:28:ac:1a:52:c6:2d:d2:05:
21:82:dd:d1:d4:b3:05:d1:84:80:f6:2e:b2:26:7c:78:30:f1:
e1:d9:83:80:be:c5:7c:01:42:7b:ea:a6:7a:fe:dc:2b:c7:9d:
9e:10:07:d8:4c:12:c0:3b:f6:70:49:dd:37:55:71:ca:be:45:
f3:91:12:c9:7d:3f:e7:e6:2a:1b:9f:f7:00:e3:75:31:7f:ce:
7a:15:54:1e:97:33:4b:5d:4d:2a:6b:df:74:54:03:47:15:69:
1d:62:cd:c1:58:cc:05:a3:bc:c1:45:82:93:7c:9f:3f:ee:5c:
34:93:7d:ae:41:01:d2:be:30:a8:ce:a8:80:94:a8:f4:e1:41:
62:de:d5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 09:28:19 2025 by rpki-client