Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft
File: 99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft (raw, json)
Hash identifier: vnLp42dxkGE5K8RX94Vz7kDyBBMtZTbbGMlwKS/jZuc=
Subject key identifier: BF:BE:16:BE:34:15:C2:C5:6C:A8:FF:0E:09:31:99:A6:9B:0D:73:E2
Authority key identifier: F7:D5:35:08:3F:B1:40:DD:AB:45:3A:BF:82:1F:5D:B3:A6:F4:61:A4
Certificate issuer: /CN=f7d535083fb140ddab453abf821f5db3a6f461a4
Certificate serial: 0198D472DAA76F68723CF3CE8D4688D643B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/99U1CD-xQN2rRTq_gh9ds6b0YaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft
Manifest number: 0D91
Signing time: Sat 23 Aug 2025 01:02:33 +0000
Manifest this update: Sat 23 Aug 2025 01:02:33 +0000
Manifest next update: Sun 24 Aug 2025 01:02:33 +0000
Files and hashes: 1: 99U1CD-xQN2rRTq_gh9ds6b0YaQ.crl (hash: 1ib1wcv66SVaEWUdx5bH7ErIT/nvtwoq3VTYJsqU7VY=)
2: LSE36n14OlFyT2JPffWytn2VECM.roa (hash: aCXHANC+PKr6N/DP0npU9YHvABAfrys/iPm1LqbDFCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/99U1CD-xQN2rRTq_gh9ds6b0YaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:da:a7:6f:68:72:3c:f3:ce:8d:46:88:d6:43:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7d535083fb140ddab453abf821f5db3a6f461a4
Validity
Not Before: Aug 23 01:02:33 2025 GMT
Not After : Aug 24 01:02:33 2025 GMT
Subject: CN=bfbe16be3415c2c56ca8ff0e093199a69b0d73e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:00:35:93:77:da:a2:3a:4e:b1:05:c8:87:17:
ba:0a:5e:3d:c9:44:0c:ac:14:95:9f:28:fc:a2:66:
dc:a2:81:b5:4e:fa:54:70:ba:eb:77:56:e5:d7:aa:
15:e4:69:c5:11:46:96:ca:24:f4:48:50:bb:87:bb:
a1:c1:c0:d9:94:84:57:5f:7d:d8:df:a8:33:60:9c:
72:e5:7f:5d:66:f1:06:13:45:68:5d:12:d8:ff:7c:
2c:c2:99:85:55:6b:f1:30:78:be:b6:09:62:71:0a:
24:c4:f8:b7:1c:c2:1d:68:30:12:f0:94:5e:77:38:
6d:79:74:19:44:70:39:62:92:38:d8:ab:a8:1f:13:
c1:2d:a8:6a:c4:22:33:44:5c:f4:7c:69:0c:e7:d4:
64:61:59:69:b8:d8:42:23:46:9c:54:fa:77:ef:31:
7a:54:d3:c4:2b:bb:9a:50:44:0f:67:88:9b:32:17:
bc:a7:27:3a:a7:67:8f:43:8c:58:90:c3:7d:9d:9f:
70:bc:86:7e:d3:de:45:e7:09:63:e1:de:c4:f1:8a:
55:9f:0e:0f:b9:8c:29:ae:ab:a3:c6:53:33:86:12:
f2:da:d6:16:59:b0:b6:ed:b9:e5:32:b9:c4:5b:69:
00:12:5e:64:93:3c:d8:e5:73:a4:ee:71:a5:f0:e7:
21:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:BE:16:BE:34:15:C2:C5:6C:A8:FF:0E:09:31:99:A6:9B:0D:73:E2
X509v3 Authority Key Identifier:
keyid:F7:D5:35:08:3F:B1:40:DD:AB:45:3A:BF:82:1F:5D:B3:A6:F4:61:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/99U1CD-xQN2rRTq_gh9ds6b0YaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:2b:d4:cd:f7:87:31:78:52:0f:93:9f:80:97:79:8e:a7:2c:
da:96:3c:ee:0c:e5:27:8f:3a:cf:9e:80:2a:e2:71:d6:10:f7:
cd:77:5e:ce:58:7d:2d:7d:1c:40:9d:c1:64:93:f5:7d:7f:28:
7d:fb:70:24:18:54:53:be:04:49:1a:c7:94:04:c0:97:1c:79:
4b:43:73:72:bd:a7:df:c6:c1:dc:47:c2:b5:5a:3c:9b:2a:61:
02:60:8c:9b:56:e7:8a:96:39:df:44:57:68:a1:2c:d4:76:14:
2b:dc:77:ee:ab:b4:c6:41:52:a9:5a:ce:db:d8:ec:49:85:cb:
f0:07:d9:30:b3:0a:69:a7:ce:e4:8c:39:46:da:fd:5f:af:b7:
06:cf:49:18:8f:9d:7f:dc:25:de:eb:e7:db:a0:d2:5e:b7:91:
e7:43:e2:16:66:7b:62:e9:ae:25:5f:b4:c9:f1:4c:33:4a:c4:
cb:22:a6:20:1a:5d:3a:9f:d4:cc:85:ff:a2:03:a5:f2:51:17:
6d:40:84:50:66:21:4e:4d:e5:9b:d2:6a:3d:13:30:a1:68:b0:
b8:f7:0c:37:2a:ac:0a:82:11:e9:9a:88:28:7b:2a:22:3d:5f:
6f:70:00:d4:d0:fa:5f:dc:17:e3:1a:a9:ed:c5:02:f5:6b:e9:
2a:40:de:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:55 2025 by rpki-client