Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.mft
File: mnZNjTrnJbReDUgH9hLsPR8qP08.mft (raw, json)
Hash identifier: 47oksvPISPLt0G4evaK3R8lQ2pAkgU9IG4afZwaha20=
Subject key identifier: 95:67:54:FD:20:9C:22:C0:B8:D7:8A:3E:47:E4:BD:4C:D6:C2:F9:69
Authority key identifier: 9A:76:4D:8D:3A:E7:25:B4:5E:0D:48:07:F6:12:EC:3D:1F:2A:3F:4F
Certificate issuer: /CN=9a764d8d3ae725b45e0d4807f612ec3d1f2a3f4f
Certificate serial: 01974AE8CF1AB8F5A6153BFCE38E0910DC1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnZNjTrnJbReDUgH9hLsPR8qP08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 15:01:00 +0000
Manifest this update: Sat 07 Jun 2025 15:01:00 +0000
Manifest next update: Sun 08 Jun 2025 15:01:00 +0000
Files and hashes: 1: GX6PPZ2aZNuKqCQABtqOUWCcHRs.roa (hash: iBMcSS3f9LeIBBwiwQeNPCdp76Ute65WO/S9tw7lGK8=)
2: mnZNjTrnJbReDUgH9hLsPR8qP08.crl (hash: 0ucWJOTlsb9wZtrEIveZbWbazwDes0bFVG18OfZjfsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnZNjTrnJbReDUgH9hLsPR8qP08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:cf:1a:b8:f5:a6:15:3b:fc:e3:8e:09:10:dc:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a764d8d3ae725b45e0d4807f612ec3d1f2a3f4f
Validity
Not Before: Jun 7 15:01:00 2025 GMT
Not After : Jun 8 15:01:00 2025 GMT
Subject: CN=956754fd209c22c0b8d78a3e47e4bd4cd6c2f969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:72:70:ef:bd:d9:f8:e1:a0:ab:22:63:87:6d:
70:ea:95:98:61:e8:86:c9:fa:10:af:76:e5:64:96:
e1:95:a1:fc:04:cb:5f:6e:10:01:32:24:63:0e:be:
bd:00:20:dc:2a:dd:a5:97:38:e5:ec:e2:00:f3:df:
26:01:0a:8b:87:17:ef:3a:b8:c2:44:db:5a:05:82:
43:ac:4c:93:f6:86:49:8e:40:b1:03:01:84:f9:ac:
3c:34:f6:e0:d4:1b:ae:33:89:3e:b6:6d:a6:5d:3e:
f0:67:ba:e3:82:c7:bc:33:cd:4c:b9:95:13:95:97:
35:cb:9b:fa:fa:d4:1c:88:0e:c4:ed:81:f1:36:df:
53:3b:25:d2:56:d1:e1:69:78:87:06:65:78:ed:2e:
ac:33:a0:61:d1:1d:c0:a7:c0:65:a5:af:dc:db:08:
73:e6:cf:3b:26:25:29:9d:bb:62:d9:e9:08:92:58:
7a:9b:5c:cd:b2:1b:01:f2:35:04:e6:24:38:95:6c:
cd:38:e0:d0:6a:24:cb:7c:49:f6:ff:28:bf:29:7f:
ce:46:15:44:36:37:8a:c0:6b:50:f9:ae:62:13:95:
64:2d:f3:bb:2c:5e:7e:a2:c6:69:3c:12:93:da:94:
ff:8b:18:77:91:28:85:ed:a6:eb:17:78:92:55:04:
6a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:67:54:FD:20:9C:22:C0:B8:D7:8A:3E:47:E4:BD:4C:D6:C2:F9:69
X509v3 Authority Key Identifier:
keyid:9A:76:4D:8D:3A:E7:25:B4:5E:0D:48:07:F6:12:EC:3D:1F:2A:3F:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnZNjTrnJbReDUgH9hLsPR8qP08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:f1:e5:ab:73:47:12:c3:52:54:fa:b6:51:f2:8d:7e:de:ad:
4b:f2:36:7d:5f:d7:e1:79:5b:14:8f:26:c0:02:b9:37:1c:f9:
b0:77:58:cc:ff:55:9d:80:e9:0c:9f:fa:45:8d:3b:b0:5e:2a:
7b:18:d4:2c:cc:65:af:b2:cf:0c:54:41:9b:eb:7f:3d:da:e0:
5a:5f:af:ed:16:dc:30:8a:0d:93:24:9c:fa:54:40:4e:7d:c8:
8c:9f:7c:71:0e:b4:20:87:b7:04:18:98:67:7c:25:e1:53:86:
7a:43:b1:c1:98:92:4f:f8:c0:52:d3:b1:a5:99:7d:f2:45:d2:
a7:f0:87:45:86:25:5a:a5:ed:d5:eb:17:d4:7e:b5:e1:71:d6:
3e:0e:29:90:f9:4a:75:76:69:78:01:3a:95:1f:70:8e:b4:c9:
92:c6:15:33:32:ba:6a:39:b0:dd:52:42:80:e8:d1:09:29:09:
9c:96:56:f1:63:02:5f:b0:cb:e7:80:38:5a:9c:d4:5b:d5:cf:
58:ce:88:a4:32:8c:f5:b5:91:c6:57:ba:75:d2:5f:c8:01:a3:
07:f9:dd:21:49:90:40:b0:84:45:28:2b:b0:05:1e:67:af:03:
42:d6:65:2b:9c:6e:9c:bc:d5:d1:d2:83:81:48:a6:5c:02:98:
e8:2e:16:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdK6M8auPWmFTv8444JENweMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNzY0ZDhkM2FlNzI1YjQ1ZTBkNDgwN2Y2MTJlYzNkMWYy
YTNmNGYwHhcNMjUwNjA3MTUwMTAwWhcNMjUwNjA4MTUwMTAwWjAzMTEwLwYDVQQD
Eyg5NTY3NTRmZDIwOWMyMmMwYjhkNzhhM2U0N2U0YmQ0Y2Q2YzJmOTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXJw773Z+OGgqyJjh21w6pWYYeiG
yfoQr3blZJbhlaH8BMtfbhABMiRjDr69ACDcKt2llzjl7OIA898mAQqLhxfvOrjC
RNtaBYJDrEyT9oZJjkCxAwGE+aw8NPbg1BuuM4k+tm2mXT7wZ7rjgse8M81MuZUT
lZc1y5v6+tQciA7E7YHxNt9TOyXSVtHhaXiHBmV47S6sM6Bh0R3Ap8Blpa/c2whz
5s87JiUpnbti2ekIklh6m1zNshsB8jUE5iQ4lWzNOODQaiTLfEn2/yi/KX/ORhVE
NjeKwGtQ+a5iE5VkLfO7LF5+osZpPBKT2pT/ixh3kSiF7abrF3iSVQRq5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJVnVP0gnCLAuNeKPkfkvUzWwvlpMB8GA1UdIwQY
MBaAFJp2TY065yW0Xg1IB/YS7D0fKj9PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW5aTmpUcm5KYlJlRFVnSDloTHNQUjhxUDA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC84OWFmYmEtNGZlZC00MmVmLWE3NTEt
ZjVmZjlhZmMzMjY2LzEvbW5aTmpUcm5KYlJlRFVnSDloTHNQUjhxUDA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC84OWFmYmEtNGZlZC00MmVmLWE3NTEtZjVmZjlhZmMzMjY2
LzEvbW5aTmpUcm5KYlJlRFVnSDloTHNQUjhxUDA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqfHlq3NH
EsNSVPq2UfKNft6tS/I2fV/X4XlbFI8mwAK5Nxz5sHdYzP9VnYDpDJ/6RY07sF4q
exjULMxlr7LPDFRBm+t/PdrgWl+v7RbcMIoNkySc+lRATn3IjJ98cQ60IIe3BBiY
Z3wl4VOGekOxwZiST/jAUtOxpZl98kXSp/CHRYYlWqXt1esX1H614XHWPg4pkPlK
dXZpeAE6lR9wjrTJksYVMzK6ajmw3VJCgOjRCSkJnJZW8WMCX7DL54A4WpzUW9XP
WM6IpDKM9bWRxle6ddJfyAGjB/ndIUmQQLCERSgrsAUeZ68DQtZlK5xunLzV0dKD
gUimXAKY6C4Wdg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:39:12 2025 by rpki-client