Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft
File: 99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft (raw, json)
Hash identifier: KqHLvGDjrhzaflFgIb2+Npux+wPdtqyVMLidheXGno0=
Subject key identifier: B0:83:B4:D8:00:AC:AD:C3:C3:05:3F:BA:90:02:C7:31:45:3A:AE:E1
Authority key identifier: F7:D5:35:08:3F:B1:40:DD:AB:45:3A:BF:82:1F:5D:B3:A6:F4:61:A4
Certificate issuer: /CN=f7d535083fb140ddab453abf821f5db3a6f461a4
Certificate serial: 0199FBEB06D01EC02F0D20147FEC0FC363C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/99U1CD-xQN2rRTq_gh9ds6b0YaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft
Manifest number: 0E2A
Signing time: Sun 19 Oct 2025 10:01:47 +0000
Manifest this update: Sun 19 Oct 2025 10:01:47 +0000
Manifest next update: Mon 20 Oct 2025 10:01:47 +0000
Files and hashes: 1: 99U1CD-xQN2rRTq_gh9ds6b0YaQ.crl (hash: KgwBpHfRAwXDW6GrJMRyox+MG5oyqUrnEK/WmMmJiM8=)
2: LSE36n14OlFyT2JPffWytn2VECM.roa (hash: aCXHANC+PKr6N/DP0npU9YHvABAfrys/iPm1LqbDFCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/99U1CD-xQN2rRTq_gh9ds6b0YaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:06:d0:1e:c0:2f:0d:20:14:7f:ec:0f:c3:63:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7d535083fb140ddab453abf821f5db3a6f461a4
Validity
Not Before: Oct 19 10:01:47 2025 GMT
Not After : Oct 20 10:01:47 2025 GMT
Subject: CN=b083b4d800acadc3c3053fba9002c731453aaee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7c:83:b4:85:aa:98:15:89:f8:04:18:e0:97:
93:59:48:a2:10:62:4e:6f:66:4b:14:34:08:af:b2:
52:ac:f2:26:a2:37:0a:da:0a:b8:4f:10:2d:6f:b7:
8a:ab:4d:d4:d3:3b:cf:47:48:e4:70:34:98:d0:58:
c9:69:8f:9e:52:cb:04:10:5b:fe:ed:d3:42:f1:0f:
a1:af:e7:6a:35:89:40:e1:a9:33:51:f2:c5:41:bf:
36:a5:1c:b2:18:7d:ea:8e:ca:37:7a:6d:1a:43:33:
98:85:85:a5:82:8d:01:50:79:a2:6a:d0:fc:a3:3c:
d0:ae:ce:c9:fc:a9:1d:28:e1:62:37:fa:83:9e:0a:
06:da:de:10:5b:d5:72:aa:a3:0f:1b:45:46:7c:78:
b9:8e:d7:01:37:dc:dc:5f:d6:3d:51:17:1e:4d:6d:
c1:3f:45:4b:7d:59:42:ef:d1:35:77:19:9c:29:15:
d4:d6:9a:3f:a2:d2:8c:b6:f3:f0:e9:5f:3e:95:9b:
aa:8e:38:e7:99:96:e3:b1:ee:1b:67:8a:34:25:a5:
5b:40:fe:fc:41:bc:03:3b:4b:e0:e9:4c:95:57:51:
4c:28:24:72:e7:5a:53:92:9c:df:48:b4:fd:ff:73:
8a:48:b8:2f:e8:a7:8b:2a:c9:b9:7e:b9:37:76:cc:
a7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:83:B4:D8:00:AC:AD:C3:C3:05:3F:BA:90:02:C7:31:45:3A:AE:E1
X509v3 Authority Key Identifier:
keyid:F7:D5:35:08:3F:B1:40:DD:AB:45:3A:BF:82:1F:5D:B3:A6:F4:61:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/99U1CD-xQN2rRTq_gh9ds6b0YaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:35:7d:5b:56:40:38:38:0c:1c:47:75:55:2a:6b:92:90:11:
2a:57:ad:9a:3b:e3:32:bc:03:83:3a:b7:bc:63:0b:f7:ed:7d:
af:5f:b1:7a:ce:4e:2d:f5:84:88:fc:4c:bc:88:0b:c7:82:f9:
74:4d:f4:d1:3b:e0:42:f0:4e:52:3e:3b:08:d7:6a:9f:f6:c0:
f7:65:11:8c:e7:1a:e3:ea:d7:9e:4b:15:34:bb:35:c6:0c:69:
fe:a5:b4:36:65:0a:53:42:e0:7e:ad:ea:92:1e:c8:55:28:1e:
73:2a:4b:93:db:b3:ed:b1:f0:f6:e1:6a:a7:46:dd:b7:c7:af:
25:06:e3:40:93:15:92:85:dd:d5:09:63:49:ef:78:4b:9a:af:
49:48:ac:bf:df:36:0e:97:72:85:6d:ab:50:e5:97:69:96:5b:
4c:3f:56:e0:66:9d:7f:fe:b9:dd:0d:28:8b:2b:5f:cc:00:63:
bd:e5:40:27:3a:1f:75:6c:f4:c3:d0:96:15:1c:ba:1c:2d:0b:
7b:09:bf:09:43:3f:ec:12:ff:60:47:6f:29:2a:9d:db:0b:a5:
e9:84:f6:30:ad:15:a6:3c:15:64:fb:59:bc:14:89:b0:44:fa:
a5:6c:a3:00:9e:73:9b:27:07:14:c3:7b:ac:db:8d:7e:d4:33:
2e:b5:a4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:42:03 2025 by rpki-client