Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.mft
File: rgMnvx57e_vdLyFMjvYpqink1m8.mft (raw, json)
Hash identifier: 6X5HhMh8f/150nfR9YT9Q1b7fkMs8QWuq8oy4aeROV4=
Subject key identifier: EF:BA:F8:5A:34:A3:6E:6B:0C:F5:5C:58:9C:85:0B:CB:3E:B5:C4:51
Authority key identifier: AE:03:27:BF:1E:7B:7B:FB:DD:2F:21:4C:8E:F6:29:AA:29:E4:D6:6F
Certificate issuer: /CN=ae0327bf1e7b7bfbdd2f214c8ef629aa29e4d66f
Certificate serial: 019922FA9FA316DDD90D2578EBBE18D77D08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rgMnvx57e_vdLyFMjvYpqink1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.mft
Manifest number: 1674
Signing time: Sun 07 Sep 2025 07:01:14 +0000
Manifest this update: Sun 07 Sep 2025 07:01:14 +0000
Manifest next update: Mon 08 Sep 2025 07:01:14 +0000
Files and hashes: 1: D07K9M73JE_RghORuqvEImVGd0Q.roa (hash: kPt/ZOiMf9T1o4/zGBCvETiXAjwGaiEUsN/6gQ2oC8U=)
2: rgMnvx57e_vdLyFMjvYpqink1m8.crl (hash: yBUA9HRPFaCItYj/o8Q+F0Q8Nfmqab5ofBNSGeCO98g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rgMnvx57e_vdLyFMjvYpqink1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:9f:a3:16:dd:d9:0d:25:78:eb:be:18:d7:7d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae0327bf1e7b7bfbdd2f214c8ef629aa29e4d66f
Validity
Not Before: Sep 7 07:01:14 2025 GMT
Not After : Sep 8 07:01:14 2025 GMT
Subject: CN=efbaf85a34a36e6b0cf55c589c850bcb3eb5c451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d2:d9:5f:94:f4:59:b9:f9:6e:a9:f6:e4:81:
3d:87:15:0b:14:0e:ce:6f:e5:5d:d7:c3:04:a1:8a:
f8:74:c7:04:92:c7:b9:7e:a2:41:46:e4:6a:b7:39:
db:53:27:b5:4f:5c:74:29:d7:ce:8f:3f:11:e4:4f:
02:64:df:39:b6:44:00:1b:a6:18:c8:fb:a2:47:9c:
e3:08:47:82:13:45:f9:ea:1d:cd:d6:6a:25:76:f5:
40:91:3d:dd:c4:f5:cb:90:43:50:71:a8:bb:bc:48:
a2:79:f0:43:99:4d:f2:2e:ec:5b:f0:e6:5b:5e:8b:
14:dd:05:c7:9a:4f:19:f8:69:21:60:28:6a:fa:20:
44:ed:bf:58:00:c4:d5:a0:33:85:88:c7:c7:2e:1a:
59:6e:3f:80:00:34:fa:75:07:0d:00:90:9d:73:29:
0e:b2:ef:88:65:4b:76:04:8c:5b:8b:8d:c9:76:49:
16:b9:98:be:bf:eb:65:b8:a9:b4:da:f6:40:c1:02:
0c:e8:86:bd:a1:72:e6:b7:df:ca:6e:cb:5e:45:80:
74:a3:9f:8a:80:92:87:a7:10:17:9a:3c:4d:af:54:
8b:af:da:d2:59:f5:b0:05:f2:d1:b8:88:13:7d:dc:
dc:c4:af:c0:9c:b0:76:21:c3:d7:f3:d4:a8:22:d7:
36:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:BA:F8:5A:34:A3:6E:6B:0C:F5:5C:58:9C:85:0B:CB:3E:B5:C4:51
X509v3 Authority Key Identifier:
keyid:AE:03:27:BF:1E:7B:7B:FB:DD:2F:21:4C:8E:F6:29:AA:29:E4:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rgMnvx57e_vdLyFMjvYpqink1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:f6:ec:a5:7c:25:19:cf:ff:1d:a7:c4:8e:13:f4:06:1e:b8:
f0:ec:bb:fe:21:12:e8:89:1c:a3:02:5b:47:8d:17:9c:86:6a:
63:aa:a5:2c:95:32:c8:2d:98:48:9d:68:15:ce:13:e5:52:8f:
ef:c0:e9:76:a4:1d:19:69:c2:88:b2:9a:20:f8:1c:2d:2f:02:
7f:64:e1:1f:53:42:61:52:46:10:81:4c:c1:d1:be:74:92:4f:
39:b6:00:8e:3c:f3:db:81:a7:b3:f8:5f:95:c3:dc:7f:b4:82:
c2:5a:01:bc:93:81:49:1d:ca:57:cb:cd:6a:0b:14:b9:76:17:
c1:01:1a:85:97:ee:65:97:3a:0e:f1:a0:9c:19:3f:d1:c3:b2:
23:5e:32:a4:bf:99:bb:20:43:0a:77:35:20:45:6b:e2:4b:cc:
47:c3:b5:c0:ab:74:e6:53:c4:8a:1b:24:43:a0:86:44:63:91:
0b:a7:b1:05:7d:ca:2d:24:ef:45:27:c8:22:66:61:0d:69:49:
85:ec:55:f6:5e:ae:47:40:23:63:9d:12:91:6d:32:5f:74:97:
03:7c:9d:be:5a:45:18:7d:75:e6:a7:09:c3:da:6a:0f:32:bf:
7e:20:49:86:1f:3b:fa:9b:1e:03:e9:91:74:bb:19:c6:6c:20:
7f:ff:2b:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+p+jFt3ZDSV4674Y130IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlMDMyN2JmMWU3YjdiZmJkZDJmMjE0YzhlZjYyOWFhMjll
NGQ2NmYwHhcNMjUwOTA3MDcwMTE0WhcNMjUwOTA4MDcwMTE0WjAzMTEwLwYDVQQD
EyhlZmJhZjg1YTM0YTM2ZTZiMGNmNTVjNTg5Yzg1MGJjYjNlYjVjNDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NLZX5T0Wbn5bqn25IE9hxULFA7O
b+Vd18MEoYr4dMcEkse5fqJBRuRqtznbUye1T1x0KdfOjz8R5E8CZN85tkQAG6YY
yPuiR5zjCEeCE0X56h3N1moldvVAkT3dxPXLkENQcai7vEiiefBDmU3yLuxb8OZb
XosU3QXHmk8Z+GkhYChq+iBE7b9YAMTVoDOFiMfHLhpZbj+AADT6dQcNAJCdcykO
su+IZUt2BIxbi43JdkkWuZi+v+tluKm02vZAwQIM6Ia9oXLmt9/KbsteRYB0o5+K
gJKHpxAXmjxNr1SLr9rSWfWwBfLRuIgTfdzcxK/AnLB2IcPX89SoItc2SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO+6+Fo0o25rDPVcWJyFC8s+tcRRMB8GA1UdIwQY
MBaAFK4DJ78ee3v73S8hTI72Kaop5NZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmdNbnZ4NTdlX3ZkTHlGTWp2WXBxaW5rMW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9mMDkwYmUtNDIyYi00ZjJhLTg2NGYt
OWZjYTI5ZGVjZGE4LzEvcmdNbnZ4NTdlX3ZkTHlGTWp2WXBxaW5rMW04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9mMDkwYmUtNDIyYi00ZjJhLTg2NGYtOWZjYTI5ZGVjZGE4
LzEvcmdNbnZ4NTdlX3ZkTHlGTWp2WXBxaW5rMW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANfbspXwl
Gc//HafEjhP0Bh648Oy7/iES6IkcowJbR40XnIZqY6qlLJUyyC2YSJ1oFc4T5VKP
78DpdqQdGWnCiLKaIPgcLS8Cf2ThH1NCYVJGEIFMwdG+dJJPObYAjjzz24Gns/hf
lcPcf7SCwloBvJOBSR3KV8vNagsUuXYXwQEahZfuZZc6DvGgnBk/0cOyI14ypL+Z
uyBDCnc1IEVr4kvMR8O1wKt05lPEihskQ6CGRGORC6exBX3KLSTvRSfIImZhDWlJ
hexV9l6uR0AjY50SkW0yX3SXA3ydvlpFGH115qcJw9pqDzK/fiBJhh87+pseA+mR
dLsZxmwgf/8rtA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:40:00 2025 by rpki-client