Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
File: cMnQbFGt1oKQY_G2exddDAAB5zY.mft (raw, json)
Hash identifier: 4yMAsa8QH7wvg5GgUmzxSIQrPE6vdsPRngHBLplKgEM=
Subject key identifier: B3:31:96:A8:D1:7D:90:0A:E7:E9:93:A8:C5:DE:0E:83:45:1D:A9:49
Authority key identifier: 70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36
Certificate issuer: /CN=70c9d06c51add6829063f1b67b175d0c0001e736
Certificate serial: 019923A0A02BC7DEBF891FB2F96C6AA5A275
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 10:02:33 +0000
Manifest this update: Sun 07 Sep 2025 10:02:33 +0000
Manifest next update: Mon 08 Sep 2025 10:02:33 +0000
Files and hashes: 1: 5giw-glAqkb4ga3tho0-9kOiFpQ.roa (hash: wPSRGEewfNLQ9tlgNj7BpPtVBQPthONm5g14lvlKftQ=)
2: cMnQbFGt1oKQY_G2exddDAAB5zY.crl (hash: aCKrecCK22/83ogMH4TiovMZpq53ZsjOmM2MTS5+nrM=)
3: lO9ygzFEh6vlzFwa5Ivf2tcAutc.roa (hash: 0P+81vJocBAhACHTKyLTeE5L1N5kiVqd+TGA07c8eWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:a0:2b:c7:de:bf:89:1f:b2:f9:6c:6a:a5:a2:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70c9d06c51add6829063f1b67b175d0c0001e736
Validity
Not Before: Sep 7 10:02:33 2025 GMT
Not After : Sep 8 10:02:33 2025 GMT
Subject: CN=b33196a8d17d900ae7e993a8c5de0e83451da949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:15:74:06:76:50:2c:07:d5:23:60:6c:0c:4d:
94:9f:60:5f:ca:55:e9:c5:53:b6:c4:54:0c:dd:19:
23:0c:0f:9c:c8:df:58:77:06:14:03:14:59:ec:1d:
a2:d4:c7:4a:42:0c:5d:a3:77:41:c3:dd:c4:bc:d1:
75:a9:30:f2:51:d3:b9:93:30:43:92:c1:3e:1b:f3:
81:a3:6e:69:07:eb:8d:c7:d5:19:c1:64:79:49:92:
14:7b:32:42:6c:78:32:5f:b5:86:33:21:19:eb:34:
dc:5b:ce:18:e2:1d:6c:9b:e9:02:e6:21:a4:77:f7:
ba:00:9d:0d:0d:b0:46:e2:9a:9b:ce:16:a7:7e:e1:
b5:14:02:9d:17:1d:57:ac:f7:31:31:53:8d:47:e9:
06:c6:09:05:9a:eb:0d:24:f6:a9:8e:58:bf:ac:c5:
f1:28:bf:d0:55:77:33:42:86:db:2e:9f:bb:69:0d:
19:3c:e1:8a:14:b2:9f:9c:56:5f:08:33:9e:84:ec:
9b:f7:9c:fa:0a:d0:ff:3e:5c:d8:04:be:55:ba:5f:
1e:7b:b3:fa:20:e4:9c:53:8c:9e:5a:80:02:50:28:
d2:c4:e2:fe:be:9e:77:ed:a8:1e:51:38:91:8b:06:
c3:07:f4:9b:9f:51:7d:1d:24:d3:55:6a:be:45:7b:
d6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:31:96:A8:D1:7D:90:0A:E7:E9:93:A8:C5:DE:0E:83:45:1D:A9:49
X509v3 Authority Key Identifier:
keyid:70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:68:4a:07:d8:b1:01:15:4d:63:dc:19:a1:1b:e8:8b:3f:19:
fb:d0:61:fe:c1:80:54:f3:3b:66:62:60:2c:24:7f:f8:49:ee:
ac:42:42:d6:93:84:e9:72:f5:10:e0:02:90:5f:61:65:4b:ac:
a2:0f:19:e5:e6:6e:5e:f6:ef:b9:18:22:00:2e:b6:70:c4:1c:
2f:43:9c:8b:4f:2c:d4:e5:05:6a:32:dd:28:f9:8d:17:31:70:
16:02:30:fa:4c:0d:7f:45:10:d8:4d:f4:1c:14:b9:d2:33:f4:
2c:03:a0:88:15:17:24:a1:f3:a0:29:49:e8:c3:15:dd:86:94:
d9:0f:79:65:c0:26:76:19:c2:c1:8f:39:7f:be:fc:0e:e5:39:
ec:ab:25:d0:3b:50:44:94:ac:0f:1d:e5:08:b0:0d:6f:6c:a6:
de:10:3f:7e:8b:66:95:f7:d6:b1:15:d3:1d:e9:ef:21:ef:35:
0f:19:c8:2f:06:7c:9f:41:6d:b9:7b:7b:7d:f6:45:2d:8c:1d:
b5:d6:c0:cd:2f:b8:62:41:e7:45:ea:ff:16:0c:a7:68:4e:77:
e5:09:4d:2c:c4:4b:11:18:75:1e:47:08:5c:6a:85:b1:89:34:
f8:f1:eb:2b:58:6e:e0:0d:20:87:8e:26:19:3b:c7:b2:28:7b:
7d:09:92:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:00 2025 by rpki-client