
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft
File: mWchgxr7izgwe0n1ue5ikq0eWFA.mft (raw, json)
Hash identifier: QtjkWh4zolpMhKYIYw12iJCPyaDvQB468t2rzdfUIig=
Subject key identifier: 35:A7:BC:EE:36:54:0A:30:FB:7F:C3:D4:F0:DF:18:C0:DF:6D:A4:5D
Authority key identifier: 99:67:21:83:1A:FB:8B:38:30:7B:49:F5:B9:EE:62:92:AD:1E:58:50
Certificate issuer: /CN=996721831afb8b38307b49f5b9ee6292ad1e5850
Certificate serial: 0198D404BAB4A024B1928BC78661CEA7D597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft
Manifest number: 1660
Signing time: Fri 22 Aug 2025 23:02:16 +0000
Manifest this update: Fri 22 Aug 2025 23:02:16 +0000
Manifest next update: Sat 23 Aug 2025 23:02:16 +0000
Files and hashes: 1: DNtnbvJyFX3vGs4Q6JEG_ZsHFQg.roa (hash: K+AhFAZDpy/NkiLJfIEeAFYckiqA8OuE/Pb388Cb1M4=)
2: H0P6Uhc2PQuAj9mI5JuLmXDsE-E.roa (hash: lFsz70YXVH8oaNr7AK6yGfw7Y8IvCmN3m4Wget06GNk=)
3: VdxEEuOoMeJjzuf1tOIRu5y_cuY.roa (hash: AIf8SEV2T1VKgT7ROpLNSZ5BKqfUXSKlfSWrsWX9IKQ=)
4: ZDeqr4bzVJZzwb_UfOlQJbn9JTw.roa (hash: 3Blt9qc0qNOTbyRJx5iL7tY6336Yd2GQWHTIQYOz0WA=)
5: mWchgxr7izgwe0n1ue5ikq0eWFA.crl (hash: ZqE5+ZHZzNlS3bggNrKNVD6NbsI1UN05qMxZ019nbCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:ba:b4:a0:24:b1:92:8b:c7:86:61:ce:a7:d5:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=996721831afb8b38307b49f5b9ee6292ad1e5850
Validity
Not Before: Aug 22 23:02:16 2025 GMT
Not After : Aug 23 23:02:16 2025 GMT
Subject: CN=35a7bcee36540a30fb7fc3d4f0df18c0df6da45d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4b:2d:e0:52:ec:32:0b:70:16:22:3b:95:eb:
c7:c3:67:d0:59:21:c9:53:c5:e6:ae:21:44:50:99:
ab:21:2f:13:7e:15:43:dd:f4:c3:bb:fe:5b:fa:36:
03:ec:68:b0:e9:f3:56:5e:3c:e4:b1:c7:4e:93:b7:
15:61:fe:51:1c:3f:8e:e2:ed:33:ef:16:84:05:b6:
22:bb:02:5d:eb:57:a6:03:f4:f0:e4:d4:56:68:d7:
90:08:c1:b5:1c:c0:33:27:84:ae:45:3a:5f:43:09:
a7:d9:7f:bd:21:cd:ea:c5:86:e2:b6:4c:6d:13:b7:
13:85:bf:2f:cc:3f:92:cf:06:f0:54:bd:c5:45:1e:
b1:4b:a3:f5:fb:09:3c:cb:b0:aa:01:42:a9:26:96:
09:42:d1:d6:96:07:44:8c:2f:e3:ba:ac:7a:83:f6:
db:13:f8:72:53:c5:2a:02:7c:60:4d:93:80:4c:02:
3c:25:34:df:fd:19:3e:cc:5d:d0:f6:b7:20:26:a5:
43:82:09:ae:d2:4b:d6:67:9d:bb:75:40:08:1a:0f:
6a:ea:da:7c:93:8f:7b:cd:d6:ab:1f:6a:54:42:3a:
f9:0e:1e:78:de:2c:1d:c1:36:dd:f8:2a:16:96:81:
a4:12:42:cb:d1:45:78:2c:08:1f:46:44:0b:20:07:
02:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A7:BC:EE:36:54:0A:30:FB:7F:C3:D4:F0:DF:18:C0:DF:6D:A4:5D
X509v3 Authority Key Identifier:
keyid:99:67:21:83:1A:FB:8B:38:30:7B:49:F5:B9:EE:62:92:AD:1E:58:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:2f:61:69:14:96:0f:c8:c9:c0:ff:4a:73:7b:10:96:13:a0:
76:d6:d9:2a:e7:89:0a:c2:64:6c:a3:a7:a4:99:31:76:ab:2f:
8d:b7:d1:c7:19:9e:ae:db:a5:93:55:0e:d1:6b:20:f6:03:d2:
3c:ee:43:68:a7:97:e1:9d:99:5f:77:86:68:0f:38:d6:73:3c:
b8:54:e2:1d:93:ab:64:11:91:d0:25:0b:36:db:96:3f:06:a2:
27:97:0d:7c:09:7f:8a:e6:85:5a:d0:eb:77:fa:06:35:01:a4:
50:10:78:a3:58:0b:a3:60:79:06:08:4b:e3:8f:10:e2:df:76:
fe:af:85:a4:b1:40:43:4d:74:b5:30:2d:18:c8:54:88:69:46:
51:13:ef:44:6d:5a:d0:0b:d1:e9:d2:d4:16:91:c1:ff:d8:c2:
b9:16:b5:4b:8c:da:c1:2d:82:0e:37:c7:4f:a7:49:49:3d:18:
f9:96:cc:6c:61:9a:b1:47:75:ab:17:a8:ca:f7:55:3d:38:a7:
5b:21:02:3c:ef:62:ef:87:a6:ef:b4:93:b0:95:4b:25:b3:62:
9c:e2:ed:53:cd:1e:66:d6:ba:cf:33:f9:e0:be:2a:c5:1a:af:
ad:ca:43:f8:72:8e:6b:59:be:a5:35:57:3e:d8:19:6b:ee:ce:
cd:d6:ef:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:46:40 2025 by rpki-client