Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3c4a64-4b35-41d2-82a5-f30303f3f2f5/1/mfSXPlJLCHF1gld2MNMxk-U7Z8k.mft
File: mfSXPlJLCHF1gld2MNMxk-U7Z8k.mft (raw, json)
Hash identifier: IjPWlc+HRWRNI79wW/hbB37effPbo+lnRI5N8P8P0Dc=
Subject key identifier: 95:A6:98:A2:41:E8:B3:3E:37:A2:74:4A:28:43:F6:ED:49:9A:36:54
Authority key identifier: 99:F4:97:3E:52:4B:08:71:75:82:57:76:30:D3:31:93:E5:3B:67:C9
Certificate issuer: /CN=99f4973e524b08717582577630d33193e53b67c9
Certificate serial: 0198D4E021F3EA827B2C43359A8C7616DD6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfSXPlJLCHF1gld2MNMxk-U7Z8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3c4a64-4b35-41d2-82a5-f30303f3f2f5/1/mfSXPlJLCHF1gld2MNMxk-U7Z8k.mft
Manifest number: 04FB
Signing time: Sat 23 Aug 2025 03:01:55 +0000
Manifest this update: Sat 23 Aug 2025 03:01:55 +0000
Manifest next update: Sun 24 Aug 2025 03:01:55 +0000
Files and hashes: 1: mfSXPlJLCHF1gld2MNMxk-U7Z8k.crl (hash: AdsxOuwtyewnZsD91TeF2E+gsPWW/ZGpoOh0pc4e3zo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3c4a64-4b35-41d2-82a5-f30303f3f2f5/1/mfSXPlJLCHF1gld2MNMxk-U7Z8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3c4a64-4b35-41d2-82a5-f30303f3f2f5/1/mfSXPlJLCHF1gld2MNMxk-U7Z8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfSXPlJLCHF1gld2MNMxk-U7Z8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:21:f3:ea:82:7b:2c:43:35:9a:8c:76:16:dd:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f4973e524b08717582577630d33193e53b67c9
Validity
Not Before: Aug 23 03:01:55 2025 GMT
Not After : Aug 24 03:01:55 2025 GMT
Subject: CN=95a698a241e8b33e37a2744a2843f6ed499a3654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:82:33:82:ba:3c:1b:b0:8d:e3:56:d4:ab:fa:
e5:57:51:4f:3a:c9:b7:46:55:8e:a6:96:a5:31:73:
b2:8c:58:b4:0a:d2:4a:82:10:37:9e:e3:ff:4d:f6:
22:42:83:42:11:6b:b8:f9:f1:b6:58:a3:a6:a9:fd:
86:91:01:7b:f2:12:71:ff:78:62:af:9b:32:28:d4:
df:0f:3a:6d:c2:d5:47:47:f6:b3:58:b0:3c:95:b5:
cb:07:22:b3:97:3f:f2:45:2f:9c:02:55:ca:48:e9:
a2:3d:d9:4c:84:a9:ca:d1:14:8d:80:dd:0b:51:3d:
31:ba:47:04:f0:18:0f:93:23:69:35:7a:ad:bf:7e:
e8:af:58:f0:e2:22:6b:a0:e2:30:01:ec:93:3a:c9:
d4:48:7c:b6:9c:ca:c4:3f:be:15:bb:b4:65:5d:80:
a1:67:da:fd:16:f6:0c:44:20:98:26:31:a0:81:84:
e8:28:b4:2e:c4:ee:fe:94:d7:81:fb:c5:6b:f3:af:
e2:2c:5a:fd:97:58:e4:97:c7:c7:89:c6:42:a1:e1:
39:e1:92:13:11:05:29:40:1f:a8:78:56:fb:d5:ec:
d2:08:87:5a:80:8e:c0:58:fb:7d:94:a6:98:1e:18:
ef:a3:5b:12:cf:27:22:62:69:01:59:c6:68:4f:f4:
db:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A6:98:A2:41:E8:B3:3E:37:A2:74:4A:28:43:F6:ED:49:9A:36:54
X509v3 Authority Key Identifier:
keyid:99:F4:97:3E:52:4B:08:71:75:82:57:76:30:D3:31:93:E5:3B:67:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfSXPlJLCHF1gld2MNMxk-U7Z8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3c4a64-4b35-41d2-82a5-f30303f3f2f5/1/mfSXPlJLCHF1gld2MNMxk-U7Z8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3c4a64-4b35-41d2-82a5-f30303f3f2f5/1/mfSXPlJLCHF1gld2MNMxk-U7Z8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:6d:e0:fa:c0:ce:a6:5e:bb:30:10:72:a6:5f:1f:8f:c4:94:
f6:c9:4c:27:0a:13:f7:dc:0f:2d:52:fc:af:ed:1a:b8:06:e8:
ff:c3:25:1a:e6:d1:4a:72:c9:b8:e9:6a:55:91:26:40:39:63:
3c:dc:b3:9b:c0:f2:f6:fe:72:36:2a:12:5e:15:ec:ca:4b:06:
e1:3a:29:a9:16:56:76:7b:d1:0c:3d:7b:93:a3:f2:f5:ea:65:
80:ce:63:66:7c:26:7a:f5:bf:2c:1a:ff:06:46:7b:eb:2d:77:
b4:6f:f4:91:09:47:38:bc:2f:bd:91:5b:27:78:10:8c:20:31:
55:fc:58:5d:3b:f7:37:1f:6e:a1:0f:ad:22:f2:41:9b:72:9f:
03:99:2d:c5:61:f8:54:12:1b:33:2f:3c:fa:b0:fa:60:dd:3d:
b3:2a:47:4e:36:0d:19:2e:c1:7c:6b:f3:b4:21:2f:68:57:34:
dd:ec:a8:2c:b5:e1:db:37:44:3e:42:64:74:0e:71:98:33:f9:
1e:e1:f2:41:2f:48:b4:88:b9:9c:84:56:0f:70:9e:32:cb:f6:
17:39:4b:c8:09:a1:81:f7:ca:9c:19:10:1b:04:66:98:7a:ec:
0c:45:e9:04:80:ae:10:73:1d:1e:79:51:9c:37:ea:c1:fb:9e:
6f:de:ae:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:08 2025 by rpki-client