Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.mft
File: md6y4fhaF9okDPyBbZcsheQR5iQ.mft (raw, json)
Hash identifier: JyGVUYadjWFJ7swxHBAHAhWalpPDFhuwWYzpZYAIqhI=
Subject key identifier: F7:A1:61:21:A6:32:ED:2D:6C:B0:CF:11:5A:DC:B0:D3:D6:60:09:9C
Authority key identifier: 99:DE:B2:E1:F8:5A:17:DA:24:0C:FC:81:6D:97:2C:85:E4:11:E6:24
Certificate issuer: /CN=99deb2e1f85a17da240cfc816d972c85e411e624
Certificate serial: 019874BDC65C969605F31E81E415A51F3653
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/md6y4fhaF9okDPyBbZcsheQR5iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 11:00:50 +0000
Manifest this update: Mon 04 Aug 2025 11:00:50 +0000
Manifest next update: Tue 05 Aug 2025 11:00:50 +0000
Files and hashes: 1: G9mF37Fb91r0jC33-YcK9r4IAmk.roa (hash: MaEVR8Nlqavgaakwb2T4C4sUXoGT+mVODKAXw14Vucs=)
2: md6y4fhaF9okDPyBbZcsheQR5iQ.crl (hash: cQlYoQ31kf76gQa3S156Xz3XQxlZhDSDtbHpoi2np7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/md6y4fhaF9okDPyBbZcsheQR5iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:bd:c6:5c:96:96:05:f3:1e:81:e4:15:a5:1f:36:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99deb2e1f85a17da240cfc816d972c85e411e624
Validity
Not Before: Aug 4 11:00:50 2025 GMT
Not After : Aug 5 11:00:50 2025 GMT
Subject: CN=f7a16121a632ed2d6cb0cf115adcb0d3d660099c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:90:16:f8:6b:63:aa:3d:44:8d:6c:f8:a1:4d:
3a:9b:78:6b:16:04:c9:c3:3f:92:9d:c3:d9:6f:1d:
26:40:6d:c9:51:d1:7f:81:54:1b:4f:7b:a0:a5:56:
9a:52:7c:1a:70:94:a1:8a:10:24:e1:01:4f:5b:80:
69:0f:0c:17:f8:d3:d8:c6:a8:44:6e:0d:ec:00:5d:
3a:ca:0e:92:56:8d:80:76:c9:b5:1b:0d:40:ad:07:
68:96:fc:63:70:1f:f3:b1:58:b3:5d:e0:66:f3:1b:
dd:1e:83:9a:d6:1d:ca:40:0a:e9:e1:82:0c:a8:49:
97:7f:3d:3c:cd:ec:ae:ba:e5:86:1d:d1:5f:83:ee:
43:21:aa:29:64:fc:87:c7:12:d3:20:71:ec:4a:5f:
88:d4:74:dc:df:f3:d6:1a:2a:a3:1d:9e:f2:3d:36:
cf:bc:c7:7f:6b:b5:57:38:a4:37:0b:3d:5b:02:c3:
57:a6:60:c3:43:aa:85:00:5a:fb:de:28:f6:ae:d0:
30:e7:e9:22:1c:cf:a8:f9:70:90:f4:b2:86:14:5b:
3a:32:e2:10:2a:36:10:7d:83:b6:c2:3b:99:a9:68:
ed:33:fd:36:01:75:08:d2:44:8f:c3:1a:e0:d9:28:
d2:97:5f:6a:f2:56:36:f7:33:83:b2:95:91:01:d2:
75:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A1:61:21:A6:32:ED:2D:6C:B0:CF:11:5A:DC:B0:D3:D6:60:09:9C
X509v3 Authority Key Identifier:
keyid:99:DE:B2:E1:F8:5A:17:DA:24:0C:FC:81:6D:97:2C:85:E4:11:E6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/md6y4fhaF9okDPyBbZcsheQR5iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:fb:0c:41:e9:6d:96:5a:45:d3:cf:65:62:58:18:4a:10:a2:
b6:71:58:cc:64:c7:3b:00:3d:ea:58:d8:17:85:8a:cb:62:9e:
3d:22:1c:32:40:98:1b:ab:f8:83:83:5a:a7:b3:12:8a:41:8a:
16:8c:63:5d:10:c6:98:3d:5b:1d:4e:ac:30:e9:a2:cc:d4:a0:
0c:c2:5e:fd:86:b9:65:af:55:4e:0b:46:08:f6:f8:79:80:63:
1e:00:70:99:68:bc:5b:7a:aa:99:9a:a8:46:e3:b3:c3:16:5c:
c2:ff:fe:5c:f8:65:33:7d:d7:df:d3:8b:ca:6b:3c:fa:8c:9d:
ba:56:92:c4:41:fe:95:b2:e8:b7:2b:d7:bb:79:e1:b9:3f:37:
3f:5d:b2:fe:e2:f4:19:3f:0f:da:7e:4e:24:0b:f1:09:1f:b3:
31:26:84:be:8a:a7:26:01:1a:a5:a5:81:13:9b:c4:e5:29:2d:
c2:f2:2b:31:9d:03:48:95:af:80:7c:eb:92:f9:3d:f5:c0:03:
6e:00:7f:6a:53:e1:e1:6d:dc:6d:f6:1a:c2:1b:54:3e:35:85:
a6:b6:b5:1c:11:19:f2:f4:fa:ce:74:83:c6:f3:18:ae:31:d1:
04:d7:f8:b4:d6:68:d7:5e:ed:82:b3:72:9f:4c:14:02:1b:ef:
7a:07:e4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:24:41 2025 by rpki-client