Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.mft
File: 996iwVmT1oMXUKpjDg5oDZ7viIo.mft (raw, json)
Hash identifier: eQbU8IhdsxA5H0NKXFuxj+qcY8BJJvgZ+p3mHwahUz4=
Subject key identifier: F2:28:A9:AB:CD:0C:16:37:ED:3B:74:F4:78:57:75:3E:98:D5:46:60
Authority key identifier: F7:DE:A2:C1:59:93:D6:83:17:50:AA:63:0E:0E:68:0D:9E:EF:88:8A
Certificate issuer: /CN=f7dea2c15993d6831750aa630e0e680d9eef888a
Certificate serial: 0199FF598CAF30D456C5DB31CB826C207854
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/996iwVmT1oMXUKpjDg5oDZ7viIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.mft
Manifest number: 0199
Signing time: Mon 20 Oct 2025 02:01:22 +0000
Manifest this update: Mon 20 Oct 2025 02:01:22 +0000
Manifest next update: Tue 21 Oct 2025 02:01:22 +0000
Files and hashes: 1: 996iwVmT1oMXUKpjDg5oDZ7viIo.crl (hash: TbVHWRqvW2alXTpFntY3b4KTRi92VVmTy8nc3RtGqUo=)
2: Q_OYedJWMY4R6WjcRHhbze4rY30.roa (hash: I5gaAF/DaFJrmNnPn+q8QcrAIPjnX3NXACdoAl2BzTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/996iwVmT1oMXUKpjDg5oDZ7viIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:8c:af:30:d4:56:c5:db:31:cb:82:6c:20:78:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7dea2c15993d6831750aa630e0e680d9eef888a
Validity
Not Before: Oct 20 02:01:22 2025 GMT
Not After : Oct 21 02:01:22 2025 GMT
Subject: CN=f228a9abcd0c1637ed3b74f47857753e98d54660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b9:c5:9e:c2:60:f1:17:57:d5:63:89:c8:97:
2e:bf:75:d1:b1:33:a7:ab:11:a9:8a:61:a1:8c:ac:
10:39:24:8b:63:18:86:a0:c4:4f:55:d3:51:5e:39:
42:35:a9:c5:b8:5d:e2:40:50:9c:51:17:e7:65:20:
2b:60:28:3a:1f:df:d4:0f:43:43:8e:0d:f9:d9:e4:
fe:fc:7c:b8:ef:37:63:24:a7:14:d0:af:04:48:93:
af:34:c0:39:11:9f:9e:1c:3e:13:9f:a9:e6:1d:58:
4c:62:f0:fa:20:28:ea:0b:87:40:01:08:4f:0b:a4:
19:ea:dd:c7:92:99:83:1e:6c:04:ff:76:5e:d9:f3:
9d:7b:9c:d4:3a:42:3c:72:52:ac:3d:4e:4d:0d:b8:
ac:e1:ff:4e:08:7b:54:14:1e:f0:dc:72:e5:fc:5c:
d7:26:ee:f2:89:ef:72:85:63:fe:6c:6e:49:41:0f:
89:0d:55:1b:16:b8:5f:ea:c0:ce:17:3a:88:54:fd:
52:5d:4b:f5:5b:1a:02:5f:24:15:a0:f6:9c:44:4d:
97:f8:ab:78:fd:8d:4f:95:f5:f2:cd:fe:d9:1c:5f:
7c:72:e8:6f:13:5b:49:1e:5f:66:ed:5a:3f:d6:c7:
d8:6e:52:19:3a:24:60:09:0b:6e:44:62:ef:69:cd:
ae:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:28:A9:AB:CD:0C:16:37:ED:3B:74:F4:78:57:75:3E:98:D5:46:60
X509v3 Authority Key Identifier:
keyid:F7:DE:A2:C1:59:93:D6:83:17:50:AA:63:0E:0E:68:0D:9E:EF:88:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/996iwVmT1oMXUKpjDg5oDZ7viIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:83:f1:cf:0f:a3:24:2d:b7:7a:6f:c0:0f:1a:5d:62:04:ea:
d6:44:44:e1:e7:8d:ea:98:7f:a5:ea:ff:3f:b3:b0:ce:25:e5:
3e:43:ab:12:21:1d:50:3b:d4:54:17:90:90:33:25:ff:0e:dc:
4a:75:92:8d:69:be:3b:6b:b5:af:26:66:d1:67:b8:0b:24:08:
c7:95:e8:97:34:55:0a:f2:3c:96:aa:3f:7d:69:d0:33:99:5d:
e7:2d:e5:ee:d7:61:61:17:bc:52:c5:d6:cf:5b:91:6e:e3:fa:
03:00:55:48:a9:af:84:7c:54:88:63:c1:1b:7b:9d:92:79:0d:
f0:ca:46:3b:59:e4:c9:1a:3f:71:09:28:84:24:7d:93:9d:21:
b1:84:6d:02:84:c0:2a:5a:27:f4:27:0f:3f:3c:04:06:41:20:
e4:ae:41:70:02:3b:7d:8a:8f:0f:1a:ec:42:54:c0:41:4a:83:
65:c1:b7:26:6f:27:5b:6f:de:01:85:fd:8e:56:a4:89:33:48:
03:d4:c9:46:d1:1b:d2:d5:4c:4d:98:28:b1:b0:60:aa:33:03:
49:55:74:49:41:6b:64:fa:6e:3a:31:ab:8f:a5:08:d0:9a:88:
db:8a:e5:0b:08:29:69:5c:55:93:3d:9b:b2:6d:54:34:41:64:
fc:7f:32:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:45:05 2025 by rpki-client