Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft
File: mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft (raw, json)
Hash identifier: yi2cNOYtp8WVrAPTJtUAWYRrNdof8X9iLioVjJM6Zpo=
Subject key identifier: 40:ED:CA:EB:FC:5A:4E:39:9F:14:F1:F1:49:CB:40:02:BF:CF:D9:C7
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Certificate issuer: /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial: 0198D47410A4E21DD6AC12CE4D684BBF60B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft
Manifest number: 16A7
Signing time: Sat 23 Aug 2025 01:03:52 +0000
Manifest this update: Sat 23 Aug 2025 01:03:52 +0000
Manifest next update: Sun 24 Aug 2025 01:03:52 +0000
Files and hashes: 1: 6cG7apJZWTaCYJhEQ2AxuGdOU6Y.roa (hash: JJCXT/6UNi9mEIWqA8v8nCsjcSMSSRjcc/zrEHMqmj0=)
2: 8-2wmVJRsL2TEmAVOz7if3F5UE4.roa (hash: qftnaSQWJZ1Dcf4NARlvRfE0/61gmqu4lKIdir5SoN0=)
3: 8SwD2syCQhmofhgov7byX9Itmmw.roa (hash: cUvCnHiFH7D4J+0OEABbyLy6H+sXz0JcuvR63cJNE18=)
4: 99na7wV0wOq68_7vIbCrL9gfxjs.roa (hash: 42LNXKEAxEwEc7Szkj0BiLf8pgpR4M/aL88CA0G+dmY=)
5: 9pMjaJdgappxiU1Tk0UMIRy3SNc.roa (hash: KKwO3btWZ5ddNVsSe6VCRqppaOicRKCDauf9ToA7uzQ=)
6: JHPfdmZ9_Y7nWvY0D-d0lDb96Vg.roa (hash: gf2XByKnGE8jJhVC4HR5cPA59ppt1RRzDD6FJs3YMQ0=)
7: epU58EjYpMtSgrUzd3xlkI9EhKU.roa (hash: d2WOVeDIsDjpX00onNi7gIPb75WWaXv2cOi5GanZkh8=)
8: mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl (hash: Sas8iv9lYA+zvXRPH9WJw/rAlsLo/rnPsUmBrTD67Ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:10:a4:e2:1d:d6:ac:12:ce:4d:68:4b:bf:60:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Validity
Not Before: Aug 23 01:03:52 2025 GMT
Not After : Aug 24 01:03:52 2025 GMT
Subject: CN=40edcaebfc5a4e399f14f1f149cb4002bfcfd9c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f5:f8:8e:f3:ad:88:40:0f:19:b6:f0:75:6b:
83:90:dc:fb:70:2a:12:7e:e9:b5:68:86:b2:e6:84:
2a:e5:4e:9d:63:72:b6:cd:af:58:16:36:81:86:35:
bb:8f:df:f3:c4:54:8b:74:46:94:01:9d:09:45:df:
c8:1e:4e:77:9f:41:94:a5:a4:d4:fd:3d:62:ee:47:
8b:8e:2e:2a:1f:15:fa:a0:04:44:40:b2:fd:62:33:
c3:51:77:69:21:1c:8a:b8:63:a4:7f:62:10:62:12:
f1:90:14:65:b6:a6:05:60:8c:42:c0:dc:da:a8:c1:
2d:d2:f7:2a:65:99:7f:28:28:8f:a6:a5:52:24:37:
51:2a:9c:9c:a6:0c:4b:9c:74:55:16:37:7e:fb:5b:
3a:5b:2f:77:83:2b:67:0c:c8:8d:b8:92:43:8d:2d:
f4:25:72:0d:c9:30:d7:2e:ce:b0:f8:8f:c5:53:e8:
23:9f:ef:3f:e6:e0:56:0a:63:58:0d:4e:bd:32:26:
e0:35:9b:fb:0b:90:c2:87:81:89:b6:95:b4:48:e9:
08:dc:61:f1:a2:bf:0b:1a:4b:2a:af:02:dd:00:c7:
b9:67:f8:1f:98:d8:90:ba:0e:10:ef:78:e0:8b:ce:
9b:c7:53:7c:1a:45:0e:3b:c8:81:aa:66:16:f5:c2:
ad:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:ED:CA:EB:FC:5A:4E:39:9F:14:F1:F1:49:CB:40:02:BF:CF:D9:C7
X509v3 Authority Key Identifier:
keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:52:d7:33:35:c9:dc:37:1b:fa:5c:e4:3a:72:56:0c:bc:e1:
60:cf:6a:32:a3:06:d3:8a:82:a4:1e:81:02:54:63:02:a9:d4:
09:7b:40:ca:07:07:aa:8a:2f:50:6c:f0:3e:de:b4:6b:3e:9a:
0c:6f:22:54:9a:f7:93:9d:d7:df:1c:04:9d:ee:cc:e5:ae:78:
00:94:6c:1c:dd:a3:0b:68:a3:f4:d9:29:1a:61:14:1d:86:70:
5d:f5:a4:0d:3e:a9:7f:9b:47:0c:10:18:c0:0f:bf:4d:5b:2c:
fd:2e:d8:57:a9:28:ad:0c:3d:da:a5:a1:0e:99:7c:65:1d:26:
4b:9e:cb:f1:37:8e:8d:52:bb:d5:89:01:2c:a1:a0:a8:08:e5:
66:b2:8d:75:3f:a3:0f:1a:42:b0:7d:eb:32:1d:78:af:6b:1e:
97:97:f1:48:cc:08:14:37:72:1b:22:a1:e5:38:6e:c2:13:6b:
33:f6:2d:6f:98:6c:58:fe:91:f1:00:ff:98:9b:4f:34:02:6e:
75:a7:ce:dc:39:2c:61:e1:c7:62:29:36:67:c6:40:e6:12:5e:
65:fd:5f:fc:51:8a:de:00:54:53:74:7b:5f:6b:aa:f0:47:8a:
ee:fa:48:6d:07:d9:3c:49:cf:aa:12:f9:f8:de:94:6f:9b:ef:
f1:3c:e4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:39:41 2025 by rpki-client