Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
File: mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft (raw, json)
Hash identifier: 4kBLevhRSRWCgj9pQEP4mwfooNVnbOn2OvXPE+4Y4LY=
Subject key identifier: 68:92:F0:77:BB:70:3E:EE:ED:89:3B:56:47:B2:EC:E4:CF:42:E3:E0
Authority key identifier: 98:C9:C3:18:9B:EC:13:79:31:1B:D1:35:3F:A9:74:9A:68:DD:99:2D
Certificate issuer: /CN=98c9c3189bec1379311bd1353fa9749a68dd992d
Certificate serial: 019A228A8B9CEE320D3AC2E16143C6BBF0C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
Manifest number: 0ABF
Signing time: Sun 26 Oct 2025 22:01:36 +0000
Manifest this update: Sun 26 Oct 2025 22:01:36 +0000
Manifest next update: Mon 27 Oct 2025 22:01:36 +0000
Files and hashes: 1: 30qNUm4LVV2JzJAozjpjCljWLl8.roa (hash: xrG/y+AM3EYc5/EtWlaqcCc/K9J1cl96ejgIPJZYD9U=)
2: Z6_bYbvmyerAM_VgnIaDcW67oTI.roa (hash: QWDvfYg2hEe0SCxsF7DniMhJuC7NKbaUI8wFEj7S2ns=)
3: mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl (hash: WtbHb1/PrHQkWbMa0Ef4iKIJFabFMPX4tuzoNx3eEFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 22:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:8a:8b:9c:ee:32:0d:3a:c2:e1:61:43:c6:bb:f0:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98c9c3189bec1379311bd1353fa9749a68dd992d
Validity
Not Before: Oct 26 22:01:36 2025 GMT
Not After : Oct 27 22:01:36 2025 GMT
Subject: CN=6892f077bb703eeeed893b5647b2ece4cf42e3e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3c:9d:7e:4e:23:7c:2e:86:fb:dd:d4:72:02:
a7:a8:14:83:84:68:11:b8:a7:20:b5:5e:82:0b:64:
e6:9f:c9:0e:10:aa:25:29:b2:8b:21:e6:37:55:3e:
02:6a:2d:16:28:1e:8f:06:31:d4:2f:ac:89:bd:f7:
49:ba:29:f2:8e:d9:a2:82:30:ee:79:2b:b5:c9:a8:
34:3e:aa:2f:16:c3:27:65:cd:a6:df:ad:d9:d5:b5:
86:9a:68:02:54:33:5c:3d:c3:d7:69:92:c3:ee:94:
fe:7f:92:04:05:20:3d:6b:20:6d:2d:fa:20:ee:f9:
4e:64:b3:96:54:58:c5:f6:df:82:00:71:0b:b2:e0:
c9:ae:ef:37:21:7d:24:bb:40:02:f0:5b:0b:20:35:
5b:14:f3:6d:f4:f3:38:f7:cd:3e:25:9c:ec:ef:b3:
7a:4c:bf:29:c6:0c:2f:9d:d1:de:b7:a1:33:8a:fd:
e6:fb:70:0b:a4:06:73:f4:b2:c7:65:7c:59:31:30:
1e:3a:0a:56:ef:12:b4:96:9f:ec:e2:ad:bc:91:68:
7e:d7:bf:bd:0b:a3:eb:3e:bb:71:88:71:74:b8:f6:
7f:42:91:2d:cb:53:01:5d:a7:6c:24:5c:bc:3b:50:
23:3c:f6:3e:2b:64:a0:51:2f:cd:85:f6:82:0b:01:
09:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:92:F0:77:BB:70:3E:EE:ED:89:3B:56:47:B2:EC:E4:CF:42:E3:E0
X509v3 Authority Key Identifier:
keyid:98:C9:C3:18:9B:EC:13:79:31:1B:D1:35:3F:A9:74:9A:68:DD:99:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:90:36:49:d4:80:de:ed:cc:76:49:6f:34:bb:46:07:b4:45:
bc:4a:3b:2d:7a:ef:1c:ec:e5:12:73:0b:d4:76:6b:5a:36:14:
0a:0a:0d:98:9c:ec:8e:20:e5:ea:32:a2:31:cb:90:4e:21:01:
a3:58:b5:56:d2:84:bd:2b:2d:c5:9a:e2:6c:0e:57:f9:79:00:
f2:79:c1:10:8b:e6:7a:79:34:85:d7:1a:41:d8:96:99:83:9c:
da:9b:76:2a:06:6e:67:d4:e3:34:60:c1:d1:ab:19:e1:e0:1d:
3e:6b:47:e8:b0:db:48:c6:1b:82:b6:a6:25:70:bc:e7:13:69:
82:a6:77:67:80:e0:01:7d:e7:0e:2a:b0:85:6d:8a:bd:a3:62:
24:6a:50:8f:a9:8b:6d:5d:c2:ea:5e:f8:aa:23:94:d8:a1:6d:
4e:4d:c3:44:10:81:bb:58:59:a1:4c:85:35:9d:d2:21:65:07:
b8:0f:ef:9a:4a:14:f2:cb:ef:c2:56:7f:00:4a:c6:ce:a8:68:
06:67:16:b6:8f:63:b3:f3:3f:99:0e:d5:6f:0d:4d:2c:e3:d1:
e1:85:64:71:ca:28:1b:da:ed:f0:3d:d1:2e:84:6e:bb:f1:30:
b8:b4:db:29:cd:82:28:7d:e0:26:75:ee:eb:f6:e1:e7:66:bd:
4a:be:76:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:12:23 2025 by rpki-client