Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft
File: _Z99xQlavbRF0YmFfTEBqK7info.mft (raw, json)
Hash identifier: gnM/ksxAlu6Ebno1BqYQa8qAGPYNS8QDtSCx/LrD8BU=
Subject key identifier: DE:B0:C1:3B:87:82:41:05:49:23:55:03:EC:8A:7C:37:A0:0C:52:C8
Authority key identifier: FD:9F:7D:C5:09:5A:BD:B4:45:D1:89:85:7D:31:01:A8:AE:E2:9D:FA
Certificate issuer: /CN=fd9f7dc5095abdb445d189857d3101a8aee29dfa
Certificate serial: 01987BD276E49757A2C5B8BF50F2AD17ABBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Z99xQlavbRF0YmFfTEBqK7info.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft
Manifest number: 161A
Signing time: Tue 05 Aug 2025 20:00:47 +0000
Manifest this update: Tue 05 Aug 2025 20:00:47 +0000
Manifest next update: Wed 06 Aug 2025 20:00:47 +0000
Files and hashes: 1: _Z99xQlavbRF0YmFfTEBqK7info.crl (hash: GvskMBYhFIccwZEU6LWjOjqSe2XtfOAW25lQ5PgjQ9g=)
2: hb6ryi0zlarGbicwA660cAdO1uU.roa (hash: npI6mlOfecW2btMEPci2EHiqJhnGF4s0rXnIs0wQ4wY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Z99xQlavbRF0YmFfTEBqK7info.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 20:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:d2:76:e4:97:57:a2:c5:b8:bf:50:f2:ad:17:ab:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd9f7dc5095abdb445d189857d3101a8aee29dfa
Validity
Not Before: Aug 5 20:00:47 2025 GMT
Not After : Aug 6 20:00:47 2025 GMT
Subject: CN=deb0c13b8782410549235503ec8a7c37a00c52c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:fb:cd:bb:50:2f:e9:43:23:7b:c1:55:47:c9:
74:8e:15:32:5b:30:bb:2e:3c:1e:1d:af:32:e2:1e:
4f:15:ca:2d:de:d6:f3:fd:3e:e8:86:15:7d:01:d1:
6f:0e:1a:da:3f:32:bd:4a:7e:73:5e:23:a5:80:2b:
28:c5:70:0c:59:15:21:bb:77:02:a7:6e:01:fa:b1:
bf:07:64:1c:37:15:c2:76:79:a8:fd:f3:35:3a:46:
03:e9:82:98:3a:00:89:54:b4:82:5e:f5:68:bd:59:
c9:a3:07:64:9b:f4:e8:52:23:93:1e:f5:f4:d1:fb:
22:dc:52:ed:2c:3e:18:a8:5f:2e:f5:00:3b:dd:a6:
b8:98:68:51:07:d7:fc:33:ac:de:af:10:1c:91:fb:
54:a3:42:7a:f6:d6:df:08:47:30:ff:53:52:ac:4a:
7b:01:d0:b3:47:50:c1:fd:fb:84:b6:e5:bd:3f:50:
09:99:3d:dc:17:73:3d:76:5f:41:35:46:13:77:94:
ca:3d:cf:be:4d:20:38:a0:73:13:ce:7a:7c:24:d0:
f7:9b:a2:6e:67:44:33:3f:2c:5b:bd:4c:55:f4:ab:
bf:a8:32:88:32:d1:36:5e:2f:77:8e:c8:c2:cb:ae:
c1:74:f6:01:39:1a:a1:b7:11:6f:19:65:7f:1f:93:
25:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B0:C1:3B:87:82:41:05:49:23:55:03:EC:8A:7C:37:A0:0C:52:C8
X509v3 Authority Key Identifier:
keyid:FD:9F:7D:C5:09:5A:BD:B4:45:D1:89:85:7D:31:01:A8:AE:E2:9D:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Z99xQlavbRF0YmFfTEBqK7info.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:89:18:32:f6:9f:bd:29:d1:c0:56:0d:f1:5a:b4:9c:8a:d2:
af:24:65:ff:88:90:4d:c8:ac:81:e7:19:f6:5c:d9:d3:ae:9d:
91:6a:ae:e0:bc:b0:a0:14:cd:5a:da:09:b8:d1:ce:12:40:55:
7e:d8:11:92:6f:d5:c7:d6:8b:41:06:53:ee:0c:ff:79:8a:55:
e9:0e:d6:36:46:75:90:30:af:16:3c:e4:52:1e:92:b8:4e:b4:
0a:fe:65:93:09:be:e4:9e:ce:d6:d5:28:28:6a:ae:11:f4:32:
59:4a:35:c8:04:77:37:44:71:0a:ba:05:8f:45:71:bb:57:e5:
64:dc:df:f8:98:e9:71:a1:38:c9:e2:9b:97:2b:dc:22:7e:0c:
90:42:b7:78:50:ef:dd:46:7d:1d:68:de:8e:7c:2c:1d:ac:15:
4b:01:e4:b1:c9:34:f6:7b:2a:c3:01:dc:02:bf:a0:91:f7:79:
f1:63:b7:53:c8:d2:24:64:0d:a6:82:ab:ca:30:a4:f1:0c:67:
9c:16:18:98:59:e8:dd:9f:5f:aa:7b:81:d5:ad:67:22:e8:43:
12:f9:a6:72:27:06:9c:69:7b:df:4d:54:58:c5:6f:33:07:cb:
15:a5:26:f6:0c:49:5e:83:41:88:30:48:34:82:3b:7a:7e:98:
01:da:e7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:52:46 2025 by rpki-client