Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
File: X99RbJXdbrLR2d1ODgMobBkR9uE.mft (raw, json)
Hash identifier: bW1ByYXcMvHvMereO4sBP0Eorfs68EbcTerXXc5RkCc=
Subject key identifier: 70:B9:0D:A9:D9:10:52:33:6D:DC:D9:52:07:5A:35:F8:8D:B6:50:AF
Authority key identifier: 5F:DF:51:6C:95:DD:6E:B2:D1:D9:DD:4E:0E:03:28:6C:19:11:F6:E1
Certificate issuer: /CN=5fdf516c95dd6eb2d1d9dd4e0e03286c1911f6e1
Certificate serial: 0198D5BC4CF104988EB78600378B72EBBD5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 07:02:24 +0000
Manifest this update: Sat 23 Aug 2025 07:02:24 +0000
Manifest next update: Sun 24 Aug 2025 07:02:24 +0000
Files and hashes: 1: X99RbJXdbrLR2d1ODgMobBkR9uE.crl (hash: xgsgBaASPU3cKbjY5sD5SdXePsYs7opAlrUKVRBk5XQ=)
2: gDWNTfdushTYGvH0YYGiHbmkEao.roa (hash: bmF6UCiNLmG9+dRjmLyfBtuEdv4BCZD7226wgKqq0bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:4c:f1:04:98:8e:b7:86:00:37:8b:72:eb:bd:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fdf516c95dd6eb2d1d9dd4e0e03286c1911f6e1
Validity
Not Before: Aug 23 07:02:24 2025 GMT
Not After : Aug 24 07:02:24 2025 GMT
Subject: CN=70b90da9d91052336ddcd952075a35f88db650af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:21:d2:44:ec:5d:61:01:80:70:5b:59:d0:6e:
ec:be:3f:b9:b4:b3:d9:f5:29:53:49:1f:59:dc:3f:
6f:17:35:e4:a6:7a:63:de:6c:4e:61:c3:4f:30:8d:
21:40:a7:c2:f8:7b:ae:e3:fa:5f:47:be:2c:a6:a5:
09:2a:46:bc:93:20:15:54:17:69:a6:1f:1e:42:08:
68:a3:34:55:86:b6:8f:1e:b5:2a:0f:a1:fa:6d:6e:
ff:61:bd:98:35:62:88:16:09:47:94:05:a0:f1:d2:
36:38:4e:21:3b:b4:9e:66:df:fb:27:33:2c:3b:28:
44:45:90:0c:09:e2:ac:a7:33:47:5b:62:5e:0b:1d:
81:27:48:c2:fe:8d:03:5b:d8:80:33:79:9c:b8:29:
0f:7d:c5:a4:8c:89:29:56:a9:5a:5d:e0:0b:fa:4b:
2f:7a:7e:9d:3e:4c:9b:e7:f3:09:36:71:ef:d7:f2:
8a:6f:f0:b6:09:33:b5:e8:bb:78:d9:4c:d2:2c:00:
0c:8e:6e:69:a0:4f:6a:60:4a:3e:9e:d8:bf:9e:54:
36:30:4c:a6:13:82:95:5f:3a:bc:63:18:3f:b9:35:
c8:fc:70:a6:49:2f:99:c1:10:46:e6:58:ee:46:8b:
26:10:c8:2c:e4:fb:6d:8a:f2:75:04:39:0a:86:62:
11:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B9:0D:A9:D9:10:52:33:6D:DC:D9:52:07:5A:35:F8:8D:B6:50:AF
X509v3 Authority Key Identifier:
keyid:5F:DF:51:6C:95:DD:6E:B2:D1:D9:DD:4E:0E:03:28:6C:19:11:F6:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:b1:13:da:67:21:91:11:5f:30:eb:bf:dc:49:7f:92:f0:cb:
5e:40:7d:94:93:a1:36:a2:1d:20:1f:db:ce:eb:3b:9e:a1:7f:
a1:1a:2f:c2:80:91:de:ee:6e:c5:7d:e0:41:9d:a2:39:2a:82:
a1:6e:dc:63:65:74:ed:9a:a2:c1:9c:3a:5e:20:01:d2:b6:13:
6a:1f:d9:5f:9b:39:57:70:27:a7:9f:ee:c9:7b:e7:9b:46:bb:
24:87:b7:ca:59:cb:0c:43:00:21:49:91:e3:37:ec:46:13:71:
bb:e1:2c:11:c7:d2:cb:da:3d:3a:4a:4c:e7:cb:ed:b3:39:2a:
21:c0:f2:20:b8:3c:8f:0f:e1:18:4a:2d:3c:4d:5e:bf:fc:54:
c7:86:6e:33:01:34:66:88:05:1b:23:ca:72:f2:c7:73:9e:f6:
ea:f9:45:9f:a1:07:86:4e:11:0b:c5:b9:e8:e3:a9:ee:1e:fc:
03:6e:35:a2:87:df:ae:32:5c:dd:19:6c:af:a6:3a:fa:20:76:
4f:20:6c:ac:04:18:2c:79:9b:80:bb:f7:3f:44:8a:98:e6:e3:
41:7e:12:a6:7b:eb:ab:de:06:14:23:3c:7a:9d:24:e7:1c:46:
0a:cc:9b:75:b8:a2:a7:e7:ce:c9:cb:ae:89:83:a5:34:e6:59:
0e:50:c8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:06:47 2025 by rpki-client