
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
File: MnVXzyJinQWKURSWWy-d-O9NtpA.mft (raw, json)
Hash identifier: Wn7rpf9LJuDmZ+Mc8JbznDXsIvAXUREBr53Tmfc4Z6s=
Subject key identifier: 99:A6:4D:0C:F0:64:E8:29:2E:E0:59:E8:D3:47:C8:AB:55:99:59:B2
Authority key identifier: 32:75:57:CF:22:62:9D:05:8A:51:14:96:5B:2F:9D:F8:EF:4D:B6:90
Certificate issuer: /CN=327557cf22629d058a5114965b2f9df8ef4db690
Certificate serial: 019921B273524A4645F225D274E9480AFC30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
Manifest number: 0D57
Signing time: Sun 07 Sep 2025 01:02:46 +0000
Manifest this update: Sun 07 Sep 2025 01:02:46 +0000
Manifest next update: Mon 08 Sep 2025 01:02:46 +0000
Files and hashes: 1: MnVXzyJinQWKURSWWy-d-O9NtpA.crl (hash: 194bcpgYCXUq3aybnf31wrmGW/tVU7xKI4WZAdT0nu0=)
2: hApSbA3jzy_s3iVNvrGjhLhy3rU.roa (hash: 1X2vbtL7wfNX8hGTI4KlZns0bkwGbPIYpWY571Ew9V0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:73:52:4a:46:45:f2:25:d2:74:e9:48:0a:fc:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=327557cf22629d058a5114965b2f9df8ef4db690
Validity
Not Before: Sep 7 01:02:46 2025 GMT
Not After : Sep 8 01:02:46 2025 GMT
Subject: CN=99a64d0cf064e8292ee059e8d347c8ab559959b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ac:86:40:82:10:1c:72:7d:67:f3:17:5c:9d:
86:3f:97:df:fb:9a:16:a2:4a:7d:0d:82:40:d4:87:
44:1b:29:7c:23:9f:8c:d7:c6:61:e1:c7:54:43:46:
49:9b:77:3e:10:53:84:44:81:2a:e4:a6:06:81:a6:
ba:37:c3:29:7c:09:a4:23:84:85:bb:be:fc:8a:f3:
0c:c6:d1:4c:20:06:90:29:5c:54:a6:b0:9c:38:4f:
e5:c7:e9:2a:80:32:c3:fb:ed:1a:ab:4d:cc:ad:af:
eb:1d:7c:f0:d1:39:78:0b:40:82:d4:0b:38:ea:71:
fc:84:fb:49:f6:76:c8:f6:ce:02:21:fa:77:48:b8:
fe:b4:c5:0c:e5:ce:c2:e3:c3:dd:64:b8:de:b5:8b:
c5:83:b4:f7:cd:90:d3:0a:c6:2c:a5:c6:5c:89:e6:
2c:fe:53:c6:70:89:65:b4:ca:65:75:4d:71:6d:c3:
03:b3:23:73:e6:59:de:eb:3a:5c:60:b1:9f:aa:77:
d2:31:fb:fa:30:63:23:5d:97:ed:a7:a1:55:04:46:
40:8c:a5:69:a2:98:41:81:83:65:eb:e6:d2:0a:6e:
b1:76:5a:e7:69:cc:5f:b2:e9:1a:da:63:1e:8e:20:
b2:4f:38:b3:00:72:ab:1f:be:c0:47:28:71:91:56:
6c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A6:4D:0C:F0:64:E8:29:2E:E0:59:E8:D3:47:C8:AB:55:99:59:B2
X509v3 Authority Key Identifier:
keyid:32:75:57:CF:22:62:9D:05:8A:51:14:96:5B:2F:9D:F8:EF:4D:B6:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:c3:de:45:c1:c1:ea:9e:ab:ac:80:f8:8a:09:44:14:74:0b:
71:a7:c8:ac:6d:c6:c8:2e:31:22:2d:2f:54:fb:13:45:53:19:
ec:dc:42:d4:39:2e:59:07:fa:d7:f7:45:0c:2f:fd:78:66:b9:
2b:06:3a:f8:3b:1a:69:11:ab:05:cb:5b:36:59:13:b9:14:92:
f8:41:e6:55:43:05:69:9a:8c:1b:d0:45:60:e7:7b:cd:c3:c9:
b9:20:53:64:49:c6:6e:1c:33:3c:6a:9c:fe:70:c6:6b:a6:23:
76:a7:3a:2f:77:b3:b9:9c:83:d0:7e:dd:f4:0f:e9:9d:e8:a3:
be:30:b6:18:2c:04:1b:80:07:1c:bd:b6:8a:25:94:a2:96:2a:
34:8c:41:6d:54:47:69:bd:20:ad:a5:11:fe:3e:35:4a:8a:bd:
d0:13:fc:04:fb:2f:86:17:4e:18:82:62:09:b6:7e:27:3f:eb:
1e:80:9c:b4:87:36:16:57:4c:c0:81:93:82:f2:25:d2:e2:74:
1f:39:12:5a:e2:41:7c:62:2f:4c:82:83:1a:3d:a7:91:36:25:
8b:99:8c:67:57:b7:ed:b4:b8:02:c7:03:ca:b9:11:ac:60:f8:
bf:7d:96:12:fa:d3:5e:b7:3a:87:aa:8d:4d:bb:a7:d1:58:55:
ee:80:10:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:36 2025 by rpki-client