
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.mft
File: 996iwVmT1oMXUKpjDg5oDZ7viIo.mft (raw, json)
Hash identifier: 89QdSrJQfzqV3FdDVPqPiPRcsw/Tr6+4B/rn7kbL6sw=
Subject key identifier: 63:AE:FD:CA:19:D1:67:92:8C:C6:5D:88:00:55:75:82:21:0C:E0:B2
Authority key identifier: F7:DE:A2:C1:59:93:D6:83:17:50:AA:63:0E:0E:68:0D:9E:EF:88:8A
Certificate issuer: /CN=f7dea2c15993d6831750aa630e0e680d9eef888a
Certificate serial: 0198D40493EE7199485FFEE94B8546810808
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/996iwVmT1oMXUKpjDg5oDZ7viIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.mft
Manifest number: FE
Signing time: Fri 22 Aug 2025 23:02:06 +0000
Manifest this update: Fri 22 Aug 2025 23:02:06 +0000
Manifest next update: Sat 23 Aug 2025 23:02:06 +0000
Files and hashes: 1: 996iwVmT1oMXUKpjDg5oDZ7viIo.crl (hash: UBGblJMxwUx9R+8pAieYOOeDLfOhc434S8dvFXkJ6ZE=)
2: Q_OYedJWMY4R6WjcRHhbze4rY30.roa (hash: I5gaAF/DaFJrmNnPn+q8QcrAIPjnX3NXACdoAl2BzTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/996iwVmT1oMXUKpjDg5oDZ7viIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:93:ee:71:99:48:5f:fe:e9:4b:85:46:81:08:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7dea2c15993d6831750aa630e0e680d9eef888a
Validity
Not Before: Aug 22 23:02:06 2025 GMT
Not After : Aug 23 23:02:06 2025 GMT
Subject: CN=63aefdca19d167928cc65d8800557582210ce0b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a1:eb:98:6e:6b:82:6d:78:be:ed:fb:b0:ee:
93:86:5d:da:47:22:8e:3c:f1:64:34:04:24:04:a4:
6b:c4:7f:f2:50:33:ff:77:1e:be:29:84:e7:37:d3:
1e:4d:b2:ef:5e:5c:5f:f4:09:66:89:b0:46:b6:15:
05:3b:dd:ce:c6:01:61:aa:ed:b6:09:50:38:9e:f2:
49:e2:91:70:18:4b:05:dc:da:74:d9:cc:a0:00:ed:
b3:e2:31:5e:69:e2:b3:fa:35:83:c7:b3:be:b5:a2:
ce:22:1a:98:83:6b:24:0a:82:d3:ad:63:f7:77:24:
a0:c6:d1:28:8f:be:74:ad:e3:97:ea:3c:27:96:61:
ac:fb:86:1d:4e:1f:8c:50:cc:7e:5c:cc:79:4a:ca:
54:99:03:8f:f6:d5:84:47:3e:e3:19:6f:95:38:a3:
0d:7a:2d:14:19:50:29:77:00:e6:44:9e:fb:b9:8c:
b6:2a:43:88:5c:3f:28:2c:b3:8c:29:02:86:28:7c:
71:93:69:aa:26:ab:af:fb:e8:dd:1c:41:f1:20:c7:
9a:81:b0:35:60:22:27:a4:cb:bf:8c:a1:ba:69:3e:
ac:59:fc:db:da:18:20:66:96:8a:8f:48:dc:b1:9f:
5f:96:14:e8:5e:35:56:0e:2b:6a:80:48:f7:6d:83:
ee:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:AE:FD:CA:19:D1:67:92:8C:C6:5D:88:00:55:75:82:21:0C:E0:B2
X509v3 Authority Key Identifier:
keyid:F7:DE:A2:C1:59:93:D6:83:17:50:AA:63:0E:0E:68:0D:9E:EF:88:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/996iwVmT1oMXUKpjDg5oDZ7viIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:1a:c8:26:23:d8:90:14:33:e7:67:95:ca:40:31:44:22:0d:
24:14:5b:7e:84:e5:c8:4f:c8:62:6b:6c:1f:15:ea:d3:a3:9f:
71:51:11:18:d1:96:6a:b5:ff:b0:db:eb:73:10:25:bc:cf:0e:
a8:ee:be:29:f1:13:de:a7:bb:9e:89:c6:86:f8:d2:2a:a5:8d:
b2:23:f9:f9:2e:16:5e:e1:b0:52:0e:64:45:08:99:c4:b4:b4:
3b:1e:59:39:51:9e:e1:7c:22:20:8c:75:dc:80:a5:6a:67:9c:
5b:a5:f1:85:27:55:f5:5d:48:c4:de:05:45:bc:2f:c1:35:dc:
8d:1e:0f:06:13:9e:5a:81:dd:6b:ab:1d:41:5a:cd:b4:1c:c5:
17:61:20:86:9e:0b:bb:d2:44:7b:fc:bc:12:34:69:58:2d:f1:
de:f9:4f:fa:bf:5b:2f:89:7f:5c:5a:71:32:e7:3b:dc:65:2b:
35:48:4a:5f:38:d7:c8:12:b8:9d:91:e2:dd:64:2e:47:b5:e9:
1d:80:4b:a0:6c:62:e6:6e:7c:47:15:b3:e0:7f:6b:71:c4:cf:
25:be:aa:90:7b:88:d4:f8:50:1b:cf:1f:4f:89:23:b6:96:fd:
e8:30:8c:f2:5f:c6:17:64:69:58:2a:9f:20:de:38:66:65:21:
96:6c:84:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:31 2025 by rpki-client