
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
File: mdNWGe0hC-CsKdFwortc10VWk7w.mft (raw, json)
Hash identifier: crUvXifkB4cQLtJUxN2aIGug9ceNx7CBpbCfm0YeO/M=
Subject key identifier: B6:77:9B:0C:90:45:39:FD:A9:98:39:24:3F:0E:D5:46:CE:5C:FD:61
Authority key identifier: 99:D3:56:19:ED:21:0B:E0:AC:29:D1:70:A2:BB:5C:D7:45:56:93:BC
Certificate issuer: /CN=99d35619ed210be0ac29d170a2bb5cd7455693bc
Certificate serial: 019879AF34A30D91543AC993319832C83C02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
Manifest number: 1548
Signing time: Tue 05 Aug 2025 10:03:02 +0000
Manifest this update: Tue 05 Aug 2025 10:03:02 +0000
Manifest next update: Wed 06 Aug 2025 10:03:02 +0000
Files and hashes: 1: eUC78a5iIDA3NnkTRgfvxwNqxjg.roa (hash: gOCTr9qoGQ7aucr1ozDn80KAKdoZpLb4iX/BnNIbZIY=)
2: mdNWGe0hC-CsKdFwortc10VWk7w.crl (hash: PoLcArUmUQz6Lk/0pvFKAtUs2fE7qA4Fa2wTfPSRq+s=)
3: qtSiJdqBkG0uo9WVYHWv-Gpf4SI.roa (hash: tDTpVD4J8FxzW7VK20T8qWOQjmWt3jizwnkYWluPqRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:03:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:af:34:a3:0d:91:54:3a:c9:93:31:98:32:c8:3c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d35619ed210be0ac29d170a2bb5cd7455693bc
Validity
Not Before: Aug 5 10:03:02 2025 GMT
Not After : Aug 6 10:03:02 2025 GMT
Subject: CN=b6779b0c904539fda99839243f0ed546ce5cfd61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ba:3e:a7:d1:28:0f:6d:92:68:42:5c:9a:82:
8f:75:66:1c:e6:65:7c:52:b1:c3:3f:26:54:69:97:
34:d5:d9:22:f1:e1:14:f9:70:d5:77:3f:42:25:df:
5b:e7:d3:69:c8:79:6d:62:73:f8:85:04:68:49:32:
90:2c:c6:9f:c4:ad:5c:d4:8d:64:9b:c0:83:8b:10:
3a:5b:3e:f3:68:a2:ac:5a:07:91:6b:3e:fe:aa:18:
76:08:59:7b:01:1e:7d:36:b8:1a:f9:0d:0e:ea:b4:
20:86:95:dc:01:53:62:72:47:c9:b9:ef:9c:f9:89:
e8:83:a0:0f:fd:53:28:4c:14:8d:fc:a3:f0:52:b1:
3b:9b:e8:9c:88:94:20:97:04:13:53:27:67:bb:f6:
eb:51:6b:99:9a:80:87:24:58:d4:ae:dd:8f:34:9e:
26:a6:af:31:32:ef:f6:1b:38:4f:ff:43:30:d9:89:
bc:95:31:db:57:e6:99:3d:47:60:83:4a:c2:35:cc:
7c:5a:89:98:9c:18:96:14:0c:a8:76:f1:b0:4c:f4:
70:19:2d:96:f7:86:3c:a8:c6:78:8d:91:a6:26:aa:
fb:57:43:ca:d3:4b:41:f8:a6:89:c0:c7:23:4e:a7:
14:b3:c9:05:49:68:80:56:ad:19:ad:a3:2b:b6:27:
3a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:77:9B:0C:90:45:39:FD:A9:98:39:24:3F:0E:D5:46:CE:5C:FD:61
X509v3 Authority Key Identifier:
keyid:99:D3:56:19:ED:21:0B:E0:AC:29:D1:70:A2:BB:5C:D7:45:56:93:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d0:b7:9b:6d:b7:03:06:c9:dc:03:3f:ee:d5:67:17:a4:77:
09:95:0d:49:aa:7f:c9:07:00:1a:28:f2:c0:03:10:f9:95:52:
8b:c3:19:24:ed:c7:87:89:46:c7:da:44:1c:a7:e5:01:da:5c:
fa:c6:98:9e:66:1a:a0:22:34:34:7e:de:00:67:97:66:d9:99:
ae:7f:cb:88:ee:97:8b:b1:ea:8f:07:d0:bf:70:6a:5f:d2:a9:
c0:3c:be:dc:44:48:d0:53:8b:ca:d6:e7:6b:92:4b:be:9f:13:
5b:dc:82:16:13:d6:3d:47:62:66:26:77:04:8d:3b:bd:a6:f6:
dd:de:ed:ff:85:99:bd:13:2c:10:f8:ef:53:8e:11:62:17:be:
87:2b:e7:d9:46:95:1e:16:90:0f:9a:1c:6b:2b:80:20:a2:8b:
07:2b:59:4b:7d:7e:4e:93:b9:15:1c:ab:b2:b4:fd:dc:3c:7f:
0b:b8:d2:85:a3:51:13:7f:c8:26:f0:fc:08:ab:7b:42:77:e9:
65:88:33:72:01:da:d0:6e:99:7b:81:35:54:e7:72:c5:03:78:
14:c2:64:e9:c3:0b:52:45:f6:b6:58:1e:ab:22:1e:2a:10:99:
87:6c:2f:a0:27:fc:30:0c:7d:2e:18:9c:c4:8d:b4:5d:88:9d:
a0:c7:a9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:31:11 2025 by rpki-client