Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft
File: _Z99xQlavbRF0YmFfTEBqK7info.mft (raw, json)
Hash identifier: cgjN6MXEGuAK8r0qYvF0kwCm//3G9v+b3l90sEq3ySY=
Subject key identifier: 09:81:AF:31:70:F9:0B:A9:06:DF:DD:B6:5C:EF:81:DF:23:85:D2:A5
Authority key identifier: FD:9F:7D:C5:09:5A:BD:B4:45:D1:89:85:7D:31:01:A8:AE:E2:9D:FA
Certificate issuer: /CN=fd9f7dc5095abdb445d189857d3101a8aee29dfa
Certificate serial: 0198D6981B195C664B6EBF4E3F40C6F5BDAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Z99xQlavbRF0YmFfTEBqK7info.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 11:02:29 +0000
Manifest this update: Sat 23 Aug 2025 11:02:29 +0000
Manifest next update: Sun 24 Aug 2025 11:02:29 +0000
Files and hashes: 1: _Z99xQlavbRF0YmFfTEBqK7info.crl (hash: rsBo1BmIYggaK+3QfCrmYeRg1P2H+oRZCNX2e6nbobo=)
2: hb6ryi0zlarGbicwA660cAdO1uU.roa (hash: npI6mlOfecW2btMEPci2EHiqJhnGF4s0rXnIs0wQ4wY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Z99xQlavbRF0YmFfTEBqK7info.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:1b:19:5c:66:4b:6e:bf:4e:3f:40:c6:f5:bd:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd9f7dc5095abdb445d189857d3101a8aee29dfa
Validity
Not Before: Aug 23 11:02:29 2025 GMT
Not After : Aug 24 11:02:29 2025 GMT
Subject: CN=0981af3170f90ba906dfddb65cef81df2385d2a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3d:14:90:94:fc:f6:17:44:c3:2d:f0:67:f6:
b8:5b:40:eb:8a:dd:17:90:36:56:fd:3b:85:ad:8a:
78:e6:e5:fb:13:39:fb:dd:6a:ee:31:ad:5e:2c:b8:
a2:ee:69:c5:2a:85:2b:95:12:82:66:f2:fb:18:74:
62:bc:ef:f9:2b:3e:a4:09:e2:33:53:ab:17:dc:0f:
28:6e:a9:ce:f9:a8:94:5d:de:90:7b:bb:9d:0c:68:
3f:34:80:5b:64:c8:e9:24:95:d1:93:86:a2:7a:e3:
26:8f:7c:28:5e:2c:e3:ba:5c:bb:15:f8:62:cc:c6:
65:ea:8f:0d:7a:af:49:f8:77:57:50:a4:38:79:0e:
e9:9e:39:e5:f6:ab:41:ef:ce:2c:5e:86:18:52:86:
17:a4:fe:f6:51:40:c3:ef:95:13:76:d3:14:9c:e6:
82:2d:23:83:8d:c1:ec:47:1e:f4:a7:6e:2b:b8:9a:
2a:d4:f6:13:db:b1:e1:25:61:48:f9:57:ca:23:e0:
9f:b5:86:80:a5:f7:38:c0:30:fb:aa:49:e7:c0:ef:
76:8e:68:ad:09:1d:ff:dd:68:bc:a0:d1:7c:83:72:
16:f6:fe:d3:fd:56:a1:24:7a:1d:2c:b5:4c:be:f0:
56:38:13:7b:cc:a8:05:b6:58:af:7d:ee:9d:b1:8a:
23:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:81:AF:31:70:F9:0B:A9:06:DF:DD:B6:5C:EF:81:DF:23:85:D2:A5
X509v3 Authority Key Identifier:
keyid:FD:9F:7D:C5:09:5A:BD:B4:45:D1:89:85:7D:31:01:A8:AE:E2:9D:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Z99xQlavbRF0YmFfTEBqK7info.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:6d:41:76:af:6c:0f:a7:3c:11:7f:e7:cc:22:19:fe:d4:e6:
f7:a0:87:bc:46:23:6e:0b:74:5f:47:1c:ec:6b:0b:fc:4f:bf:
18:75:8a:92:a3:a5:43:96:56:23:8d:ec:3d:76:5c:1d:3c:4c:
bc:f2:20:0c:8e:c2:bc:61:c8:78:67:0e:46:bb:61:bb:4a:45:
0f:a7:ff:30:c2:45:ac:6d:9a:b6:4a:67:11:7c:20:83:88:23:
bc:fd:78:99:0d:b5:c1:94:8f:20:31:a4:5e:a5:7a:bb:01:5a:
c0:d5:9a:8a:5d:7e:26:48:b8:76:6d:13:f6:1f:ad:f1:68:42:
03:40:ef:2f:fa:b9:74:17:92:09:01:9d:76:fa:fc:57:90:cd:
b8:f0:0a:f6:fc:c8:f5:04:20:10:0e:34:a2:01:8c:ae:6e:8d:
57:8a:c9:46:51:2a:3e:4c:cf:0e:11:32:6b:01:21:42:ea:67:
cb:00:2a:72:72:9c:a0:88:0d:2b:14:0e:72:4d:e2:4c:bd:56:
88:2d:77:47:63:58:a3:df:96:b2:d7:94:cf:0d:ea:f7:d4:fe:
ea:ef:91:69:94:1b:bf:8c:ec:2a:5a:2b:c4:8b:a3:ac:d5:cf:
cc:bb:34:4d:0e:22:28:25:74:7f:83:14:b1:ef:71:27:aa:eb:
b4:78:50:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:52:12 2025 by rpki-client