Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.mft
File: 99MudSlBh9Rujq4Pj-crX9er-IY.mft (raw, json)
Hash identifier: ExgyxmeRT+T1Enlf0YjlOawa+CT/P8JbaL9ObI7SBEU=
Subject key identifier: 7F:17:5C:5C:27:88:98:AF:9E:60:81:AD:8A:64:34:A3:C8:E8:10:85
Authority key identifier: F7:D3:2E:75:29:41:87:D4:6E:8E:AE:0F:8F:E7:2B:5F:D7:AB:F8:86
Certificate issuer: /CN=f7d32e75294187d46e8eae0f8fe72b5fd7abf886
Certificate serial: 0198D54E44D2F3DD11EDEBE4A690C8A52DB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/99MudSlBh9Rujq4Pj-crX9er-IY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.mft
Manifest number: 1651
Signing time: Sat 23 Aug 2025 05:02:12 +0000
Manifest this update: Sat 23 Aug 2025 05:02:12 +0000
Manifest next update: Sun 24 Aug 2025 05:02:12 +0000
Files and hashes: 1: 99MudSlBh9Rujq4Pj-crX9er-IY.crl (hash: TYCWrLJYduBAIWr4keXFtClnvlSW6aEQcR3Lkc3LizE=)
2: FYg_psCFhdR_n5VNhP25gINYx6M.roa (hash: h+fjKLWgHVAllkPWeuz1NL6KyEoRyUzS/iNO+yf1JFI=)
3: ZhvVa7SGL0ihaaWqEDQl81ffNSw.roa (hash: ytKQDKvlQVK8AL0ByiBKUDRRuwN5/717YGo/cNpO++k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.mft
rsync://rpki.ripe.net/repository/DEFAULT/99MudSlBh9Rujq4Pj-crX9er-IY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:44:d2:f3:dd:11:ed:eb:e4:a6:90:c8:a5:2d:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7d32e75294187d46e8eae0f8fe72b5fd7abf886
Validity
Not Before: Aug 23 05:02:12 2025 GMT
Not After : Aug 24 05:02:12 2025 GMT
Subject: CN=7f175c5c278898af9e6081ad8a6434a3c8e81085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a6:18:38:6c:71:22:2e:ad:c3:35:1a:92:fd:
3a:3f:82:b5:18:44:9a:6c:68:5f:44:a4:36:15:fe:
2a:b2:e4:28:8e:23:85:86:ee:3f:f9:41:b4:fd:12:
bb:72:67:a7:26:df:f3:91:0e:70:c9:2e:24:7d:fe:
5f:ac:f9:9e:10:5d:c8:b8:db:28:a0:d4:63:41:6a:
76:f9:a4:24:d1:3d:9b:79:fe:f7:32:0b:70:0a:bf:
76:0e:67:69:2b:02:d2:8e:a5:bf:e4:51:8b:c6:e2:
80:b5:de:2f:cc:44:a5:fc:99:b3:0e:da:15:23:e9:
72:58:26:8d:5b:5e:76:6a:fd:61:1a:88:a4:10:ae:
a1:24:67:d0:0d:51:75:04:1f:43:4b:4a:e1:c4:77:
b3:89:53:9f:fa:d5:ac:d3:27:cb:d7:84:bb:1f:cf:
90:d6:d2:36:ab:fd:53:f3:18:38:15:6e:8f:70:dd:
17:d1:73:42:15:cd:00:7c:dd:b9:7b:67:ea:29:81:
d3:6f:bc:da:0b:7f:75:77:50:9f:9a:cb:7d:02:21:
9e:0b:31:e1:3d:8d:dc:d9:2f:8c:61:fb:96:54:5d:
02:c8:8d:71:fd:2a:fc:fe:68:a5:23:d4:ff:a6:79:
99:7c:99:b7:14:8e:b7:f3:13:e3:b5:26:99:21:75:
9a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:17:5C:5C:27:88:98:AF:9E:60:81:AD:8A:64:34:A3:C8:E8:10:85
X509v3 Authority Key Identifier:
keyid:F7:D3:2E:75:29:41:87:D4:6E:8E:AE:0F:8F:E7:2B:5F:D7:AB:F8:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/99MudSlBh9Rujq4Pj-crX9er-IY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:5b:4e:fc:17:b2:21:19:5e:82:5d:cb:d7:56:49:60:8e:0e:
37:2b:b3:48:37:a2:ae:2d:5e:7d:b8:14:f5:81:6e:8a:f1:f1:
aa:ab:97:a8:2f:68:ed:82:b9:08:53:8d:a2:66:7a:b7:2b:70:
ea:e1:f0:c2:81:9f:10:5d:ad:d9:e0:98:14:24:25:c4:a1:03:
fa:33:33:36:8d:29:8a:52:09:f3:26:1d:ba:37:33:20:73:87:
c9:f4:80:68:4e:1c:5b:ac:a9:32:fb:7d:51:09:64:c7:e2:cb:
9e:35:30:7f:99:68:dd:b5:02:52:a3:ed:64:f1:89:6e:bf:70:
ff:e4:f3:20:34:9d:84:b0:54:a2:2f:4a:e2:2a:8c:6c:ad:a3:
25:23:52:0b:29:d1:80:af:73:d0:b9:2b:f8:3e:8c:d5:01:9e:
18:f9:82:3d:51:e8:71:67:67:64:86:13:52:a9:ee:81:48:21:
a4:78:ca:26:c8:0a:0f:27:db:7d:21:65:9a:48:7c:88:ae:52:
eb:59:bf:30:fc:9e:7e:a9:af:49:bf:b2:d6:1b:db:29:20:00:
3e:8e:45:96:69:ce:b7:69:04:b7:ca:79:a3:2a:e2:9c:d4:8a:
c5:9b:08:73:8c:82:f1:ab:b3:26:3a:87:6e:89:4c:74:c8:fe:
e4:82:03:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:27:28 2025 by rpki-client