Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
File: mfyNwqfBufMroZV_9JLcC6TyYP8.mft (raw, json)
Hash identifier: GCqAS6hy87qUA/LIQMhFvHD3vMwedLieTrw4Grx/fVE=
Subject key identifier: 67:16:4C:8E:C2:68:8A:A6:D8:1C:C4:A8:80:3A:21:3F:20:EC:4A:BB
Authority key identifier: 99:FC:8D:C2:A7:C1:B9:F3:2B:A1:95:7F:F4:92:DC:0B:A4:F2:60:FF
Certificate issuer: /CN=99fc8dc2a7c1b9f32ba1957ff492dc0ba4f260ff
Certificate serial: 0198D99956C19691543340F5BC9FBF8176E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
Manifest number: B4
Signing time: Sun 24 Aug 2025 01:02:41 +0000
Manifest this update: Sun 24 Aug 2025 01:02:41 +0000
Manifest next update: Mon 25 Aug 2025 01:02:41 +0000
Files and hashes: 1: bwcXy3FYmHBMxUWqGbTAjvoGjVE.roa (hash: i13BZ7NJZZP7VgcQkDsp+e+5aBIM+z4sday3aP/ehUI=)
2: mfyNwqfBufMroZV_9JLcC6TyYP8.crl (hash: zJGqnxsjAH5tHWzUS+zGakb/KTAIXPetEBZlIdnI6pQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:99:56:c1:96:91:54:33:40:f5:bc:9f:bf:81:76:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fc8dc2a7c1b9f32ba1957ff492dc0ba4f260ff
Validity
Not Before: Aug 24 01:02:41 2025 GMT
Not After : Aug 25 01:02:41 2025 GMT
Subject: CN=67164c8ec2688aa6d81cc4a8803a213f20ec4abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:30:77:b3:2a:81:1f:fe:32:11:c8:c3:ac:be:
9a:a7:83:f1:12:c3:f0:cc:d4:dd:2e:42:45:62:56:
2f:45:eb:33:55:f0:31:99:17:cc:78:8f:02:f5:50:
e4:4a:d8:ea:39:bf:93:80:1d:e8:3b:66:80:51:a2:
fa:b5:a5:24:71:71:fc:2c:25:1e:de:2d:43:db:87:
7e:78:d1:40:55:b9:77:fc:fa:96:8b:54:85:89:5f:
2f:7b:4b:b1:64:81:4c:36:17:24:df:86:2d:e6:83:
8d:34:ac:07:fc:b8:f0:6f:83:81:7a:13:d1:3f:d9:
c2:db:c6:13:8e:53:af:b1:99:c1:fb:42:22:94:de:
ab:47:d0:7a:6e:b2:bf:24:8a:45:72:c5:ac:ae:f3:
90:3a:78:ee:96:2f:ce:f6:70:67:f5:aa:cd:93:9b:
1e:f0:57:ea:f6:8e:f8:37:7c:1c:c9:68:09:03:96:
cc:d9:cd:c5:aa:79:6d:0f:85:e7:3b:ea:2f:fe:35:
44:d3:82:4e:7c:29:5b:59:00:fe:ab:ad:85:e5:52:
25:e6:78:e1:ed:dd:7d:fc:9b:21:9d:04:20:1f:84:
5e:6c:f4:80:2c:dd:11:47:2a:d2:03:f0:5c:81:93:
21:1b:3d:f5:ce:4f:ad:df:e9:09:39:b8:17:26:a2:
7d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:16:4C:8E:C2:68:8A:A6:D8:1C:C4:A8:80:3A:21:3F:20:EC:4A:BB
X509v3 Authority Key Identifier:
keyid:99:FC:8D:C2:A7:C1:B9:F3:2B:A1:95:7F:F4:92:DC:0B:A4:F2:60:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:71:cb:fa:e0:dd:65:df:05:60:b5:4a:d2:a1:ce:c7:b5:a8:
a1:36:19:cf:95:9f:2d:14:bf:4d:67:4d:32:50:28:df:74:43:
68:00:b6:5e:b0:64:22:1b:f9:c3:76:d8:7b:43:96:5e:9f:ac:
a0:93:9a:93:a6:d9:d5:3a:60:4a:6d:4a:77:dc:a8:bf:7b:0d:
2e:35:f0:08:a4:49:a6:e4:a2:1b:24:8e:1f:60:1b:d2:ba:6e:
09:50:b5:31:91:4b:f9:f2:1b:47:61:92:48:ae:9c:b8:5a:84:
7c:41:6a:6d:b9:3b:ae:28:00:cf:6b:ad:81:a1:33:35:28:1a:
60:56:74:92:fc:21:9c:21:75:2a:d2:29:cf:f8:13:fa:c5:63:
86:17:30:d5:f6:da:40:76:32:52:75:27:02:ba:b1:db:a2:18:
46:3f:11:6f:60:6d:ec:01:06:c3:44:1a:f0:9c:aa:0c:b9:fd:
ce:1c:d5:1a:99:e7:51:9d:7c:47:2c:59:44:7c:e4:1a:43:62:
57:f4:59:55:e5:76:4b:dd:4a:a5:06:de:52:78:0f:93:9d:c0:
0a:9f:35:ed:b6:94:89:06:9d:e6:15:ec:89:a0:df:7e:c8:67:
9a:96:04:6f:6a:f5:c0:3f:94:5b:b1:43:c0:f5:f5:e0:44:af:
18:e9:a8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:04:57 2025 by rpki-client