Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.mft
File: mdy98GMqEBYTqPbJRJsp7UXBqHI.mft (raw, json)
Hash identifier: Meo9ISi8V8bm4uRFDVmRVt3lK8UKHQ8gNzlZJB2XA6M=
Subject key identifier: B9:08:CD:22:9C:A6:73:69:4F:DB:93:55:45:52:2D:1D:48:71:44:7E
Authority key identifier: 99:DC:BD:F0:63:2A:10:16:13:A8:F6:C9:44:9B:29:ED:45:C1:A8:72
Certificate issuer: /CN=99dcbdf0632a101613a8f6c9449b29ed45c1a872
Certificate serial: 0198898E7D6BED9F3A4CB1BA2F704EBFE528
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdy98GMqEBYTqPbJRJsp7UXBqHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.mft
Manifest number: 0FCF
Signing time: Fri 08 Aug 2025 12:01:13 +0000
Manifest this update: Fri 08 Aug 2025 12:01:13 +0000
Manifest next update: Sat 09 Aug 2025 12:01:13 +0000
Files and hashes: 1: GM4FjF5iGCwwZrvF5OPLK7EJcKc.roa (hash: TNBXDdJILbU4GHZNotTea3UIv8zTS99ELWCKcINIuvk=)
2: cMpaW7cVC0wOITYTuoFWwIF5n44.roa (hash: 4diQ6JOCI3p/sKjl0F+QVRHdBT8AYRe0IlWz174rlII=)
3: mdy98GMqEBYTqPbJRJsp7UXBqHI.crl (hash: PVGygPjvCVSNqIOtjPbEuPtac9UdjLr6CBLEH2YNaGo=)
4: q11-oGTlQe1qTZRc7a_TUm1IpLc.roa (hash: LcRd4esaozcBtrhM5u7DUki+tNg95Mjqju0EcrMRViM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mdy98GMqEBYTqPbJRJsp7UXBqHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:8e:7d:6b:ed:9f:3a:4c:b1:ba:2f:70:4e:bf:e5:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99dcbdf0632a101613a8f6c9449b29ed45c1a872
Validity
Not Before: Aug 8 12:01:13 2025 GMT
Not After : Aug 9 12:01:13 2025 GMT
Subject: CN=b908cd229ca673694fdb935545522d1d4871447e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0a:97:2a:0a:9c:b7:dc:67:fa:e0:fd:d0:a5:
36:1f:46:6b:5c:66:4f:47:00:32:ae:1d:98:3f:22:
04:6a:d6:e6:52:9c:27:a8:28:fa:88:c6:f4:3c:bf:
83:68:32:86:28:26:96:5c:c1:73:9a:77:41:56:30:
9c:c0:0d:69:81:f2:50:a1:ae:83:10:ce:b6:b7:2f:
9c:b3:3e:d0:1e:18:b5:f7:15:53:86:a6:13:ab:80:
fa:32:55:68:c1:de:75:d9:9e:5e:db:d5:fe:2e:4c:
f2:72:1c:81:0b:1c:20:b6:28:21:2a:32:c7:15:b1:
af:d7:0f:5c:25:7a:d7:b1:1a:18:d7:0f:10:fa:74:
2c:11:32:e5:26:48:0f:9e:6d:b3:d9:66:4b:f5:4a:
65:2a:d7:fd:87:da:ab:62:4d:56:3f:da:bf:18:90:
2e:a1:9d:3e:f7:72:4c:5c:8c:50:7b:24:63:94:ea:
07:02:f2:5a:26:52:19:ea:8e:e4:da:1a:c4:c5:b2:
74:4d:b8:80:83:09:a0:49:d5:97:f7:bc:7f:d2:3b:
14:b4:8d:69:68:33:c7:52:92:ea:09:d6:36:ec:51:
68:d3:bc:1d:0c:17:e2:d6:11:79:43:30:fd:d1:35:
38:ae:4f:11:d5:4f:b0:27:3c:02:77:85:df:f3:da:
f9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:08:CD:22:9C:A6:73:69:4F:DB:93:55:45:52:2D:1D:48:71:44:7E
X509v3 Authority Key Identifier:
keyid:99:DC:BD:F0:63:2A:10:16:13:A8:F6:C9:44:9B:29:ED:45:C1:A8:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdy98GMqEBYTqPbJRJsp7UXBqHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:44:e9:df:cf:df:ef:e5:db:94:8f:26:20:9b:f3:b6:a5:79:
cc:50:c2:6d:ed:03:ab:6e:a6:16:f8:cf:0a:f9:10:ab:13:58:
22:17:43:24:58:46:ff:0e:6b:4c:44:71:5d:78:15:ee:ed:03:
b3:6a:ee:04:71:9c:d5:fc:ec:5b:2c:f4:80:fb:57:8b:e6:6f:
33:33:be:c7:39:ee:c2:38:be:b3:3f:a5:74:10:5c:4d:cc:de:
6b:28:de:c7:07:fb:a6:8a:88:72:30:41:c7:53:79:43:d1:03:
8d:6c:11:3f:33:13:21:3b:5b:e2:92:0c:4d:28:ea:b8:82:bf:
8b:3d:92:aa:d9:3a:5e:2a:25:4b:6e:51:53:f1:76:13:7d:79:
db:b3:0d:4e:3a:89:56:05:fe:b5:3f:5b:ba:2a:eb:e2:e9:e7:
85:a0:51:e3:15:09:40:b2:7a:48:2e:7c:56:7a:f0:80:ce:e2:
78:52:42:2e:d1:77:6e:60:d4:28:35:ad:55:01:a3:be:07:37:
5f:1c:37:6f:85:44:39:5a:8e:76:4d:45:50:ea:84:68:66:b4:
6f:0e:3d:74:62:2f:cb:80:b6:25:00:38:e6:20:ca:dc:5a:72:
98:07:8e:5f:59:0d:aa:5d:db:be:d0:ca:76:dc:02:5f:af:c4:
91:de:47:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:27:44 2025 by rpki-client