Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
File: mfL0sCJG5gTiN_N5RaOCv62hJ38.mft (raw, json)
Hash identifier: Er2fwJa/K7W/fMAKr9TXiG9FrqqJwXet7PW/xhOJt1Q=
Subject key identifier: 74:26:9A:D3:03:BA:32:FA:39:38:E2:C9:AD:EA:0A:71:08:21:0F:FC
Authority key identifier: 99:F2:F4:B0:22:46:E6:04:E2:37:F3:79:45:A3:82:BF:AD:A1:27:7F
Certificate issuer: /CN=99f2f4b02246e604e237f37945a382bfada1277f
Certificate serial: 0198D4A80EC417C80027C50E7D91F47968A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
Manifest number: 0733
Signing time: Sat 23 Aug 2025 02:00:40 +0000
Manifest this update: Sat 23 Aug 2025 02:00:40 +0000
Manifest next update: Sun 24 Aug 2025 02:00:40 +0000
Files and hashes: 1: mfL0sCJG5gTiN_N5RaOCv62hJ38.crl (hash: Hxw6MYJzqy15B9xjRh2oRaG7QI62fm2H6BME9mjUZP8=)
2: tD16yJgx6FslawER1Evjktr90DU.roa (hash: IgaqAI1HCcxs2x01fN4KAw3fM/ZJo5SCnC5NuJ1Z+9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:0e:c4:17:c8:00:27:c5:0e:7d:91:f4:79:68:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f2f4b02246e604e237f37945a382bfada1277f
Validity
Not Before: Aug 23 02:00:40 2025 GMT
Not After : Aug 24 02:00:40 2025 GMT
Subject: CN=74269ad303ba32fa3938e2c9adea0a7108210ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a0:c8:77:83:ee:6f:6a:76:5e:59:6d:f7:8f:
b7:4a:8b:c2:ed:34:51:5a:a3:44:17:5b:a4:69:b2:
e5:53:7d:79:af:6d:74:6c:5f:0d:ef:9d:8b:cb:c8:
02:8e:23:40:9c:bd:4b:88:9a:46:5b:25:32:6d:3a:
ab:e3:a5:f3:9d:ce:56:31:46:08:d2:ab:33:71:4f:
68:91:f3:bf:ad:86:c6:e7:84:ae:1a:b4:1d:3d:23:
a0:57:ec:e6:9e:2d:9e:53:41:fe:5f:2f:34:a5:13:
ca:63:04:28:28:94:e6:03:97:aa:04:08:0e:8a:b2:
d8:68:8e:6a:f6:70:cf:4b:44:2b:9d:8e:f4:e8:90:
95:c2:64:f2:92:47:0b:59:5b:bd:63:39:19:9a:4c:
d1:ff:fe:72:63:12:dc:3c:96:86:d4:fd:6f:ae:e9:
2a:ad:0b:de:b6:4e:b9:34:63:6f:4b:22:13:7e:1a:
9e:4b:f4:09:b2:5d:a4:ad:96:7f:96:54:98:c4:57:
11:43:72:ac:13:f7:d3:88:a4:e5:fe:6f:5e:64:b2:
f7:c3:d9:f0:07:86:bb:a2:c5:34:ca:61:6b:ef:e2:
dc:6b:03:1a:c9:08:94:13:e8:df:e4:5e:7a:a5:7e:
16:68:51:78:bc:ea:13:75:31:4e:ec:f3:29:28:97:
24:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:26:9A:D3:03:BA:32:FA:39:38:E2:C9:AD:EA:0A:71:08:21:0F:FC
X509v3 Authority Key Identifier:
keyid:99:F2:F4:B0:22:46:E6:04:E2:37:F3:79:45:A3:82:BF:AD:A1:27:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:6f:73:54:18:14:2c:25:6d:79:a6:fa:28:8f:ef:3a:a2:6a:
1d:75:ad:03:45:b7:87:09:c1:23:c8:61:e4:c9:85:bc:0c:2b:
f3:56:2b:93:31:98:0b:b6:08:d5:16:f1:20:b3:88:d6:df:1f:
7e:df:d8:48:44:b2:04:89:78:ac:6c:48:d9:79:2a:91:de:b3:
81:a9:08:7e:d7:25:8c:cd:a9:19:1c:5a:f3:32:56:61:88:4c:
04:f6:d4:6d:22:37:63:2a:d6:ae:b9:b6:84:16:f3:73:22:49:
64:c2:1d:af:68:ba:25:5e:6d:94:b8:b0:ac:fb:83:0c:ef:a4:
47:25:7d:64:92:b7:c3:5d:d1:4a:e7:3e:91:cf:51:f4:e2:ca:
01:73:c2:c7:c1:cd:ad:81:a5:93:04:8d:30:67:09:54:4f:53:
c8:88:6a:0e:63:9d:0b:ce:43:64:23:eb:37:55:80:33:05:b9:
7e:cd:45:8d:74:df:87:b0:a2:01:a5:5d:76:45:2e:3a:9c:9e:
42:d7:36:60:9f:0a:61:ec:00:e9:36:5d:0b:0d:c2:11:64:46:
85:7f:d6:02:17:c2:78:63:fa:c1:9e:cf:8d:05:4e:94:5d:4a:
d9:dd:25:0a:c4:c8:ac:d1:09:7a:66:8f:e2:a4:8a:2a:27:f1:
0f:0c:8e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:39:57 2025 by rpki-client