Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/fcf322-17c1-4f40-a618-bd14d344bbf2/1/v99XKOyr1W70Y3NWlVhmylRoaRo.mft
File: v99XKOyr1W70Y3NWlVhmylRoaRo.mft (raw, json)
Hash identifier: iEIzrHR8wz98oRN6kCVaVgka5XQIDYj1XYQrJ/UMxNg=
Subject key identifier: 20:66:2D:43:6A:5B:07:61:F7:44:E1:5F:14:94:70:21:FC:32:F3:6B
Authority key identifier: BF:DF:57:28:EC:AB:D5:6E:F4:63:73:56:95:58:66:CA:54:68:69:1A
Certificate issuer: /CN=bfdf5728ecabd56ef4637356955866ca5468691a
Certificate serial: 019840CFC914D3453133C98753D8DB709028
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v99XKOyr1W70Y3NWlVhmylRoaRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/fcf322-17c1-4f40-a618-bd14d344bbf2/1/v99XKOyr1W70Y3NWlVhmylRoaRo.mft
Manifest number: 021F
Signing time: Fri 25 Jul 2025 09:00:15 +0000
Manifest this update: Fri 25 Jul 2025 09:00:15 +0000
Manifest next update: Sat 26 Jul 2025 09:00:15 +0000
Files and hashes: 1: 5ZRHOA8DDg_XhJ8JjCvhTOGiC1w.roa (hash: eWpgjaoVJC0L+xFRvzTJa/HrtM2zzM7SykfE1sq9g2I=)
2: v99XKOyr1W70Y3NWlVhmylRoaRo.crl (hash: x/H5kbKEZv4XXkLO1+9WyXOgqeMhnTt0zC22+bJlyrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/fcf322-17c1-4f40-a618-bd14d344bbf2/1/v99XKOyr1W70Y3NWlVhmylRoaRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/fcf322-17c1-4f40-a618-bd14d344bbf2/1/v99XKOyr1W70Y3NWlVhmylRoaRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/v99XKOyr1W70Y3NWlVhmylRoaRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:40:cf:c9:14:d3:45:31:33:c9:87:53:d8:db:70:90:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfdf5728ecabd56ef4637356955866ca5468691a
Validity
Not Before: Jul 25 09:00:15 2025 GMT
Not After : Jul 26 09:00:15 2025 GMT
Subject: CN=20662d436a5b0761f744e15f14947021fc32f36b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:95:de:c5:46:cf:e1:02:26:73:ca:e2:c9:6a:
1b:b5:6e:92:ef:ed:7e:e7:eb:48:d6:e9:dd:dc:0e:
0f:a5:83:8d:85:2f:ca:3d:f8:93:f4:f6:0a:c6:87:
6f:cc:05:b2:4d:78:52:44:2e:96:3d:b3:72:6a:90:
19:35:07:41:5a:43:c5:7c:d0:dd:c8:44:a9:f9:cc:
9f:3e:48:c0:a8:bb:5a:70:4a:19:6e:70:02:6e:d1:
1e:c8:63:5c:f6:83:33:e9:d2:14:d0:82:76:9b:06:
1f:d9:f7:b1:e5:8d:03:fa:b3:44:7d:f1:c3:a0:a2:
8a:1a:e5:a2:3d:47:72:ca:b7:40:8d:8a:d9:c2:8d:
82:25:2a:05:1b:ee:71:40:0b:c5:08:18:e9:52:62:
12:17:2d:e9:3b:86:d8:9a:d8:65:83:b0:84:c1:ad:
21:46:b3:57:a2:49:05:5a:0e:e4:e1:ab:8f:40:f7:
d3:ba:98:47:a8:a0:36:9d:de:6a:68:c6:c4:c5:dc:
37:22:b1:03:4e:e2:b8:6e:dc:de:25:69:bc:5f:ee:
17:76:67:de:ee:31:a6:16:01:68:9b:be:b7:e6:1c:
ca:c9:b0:93:54:60:28:d1:0e:7e:69:ae:08:95:dc:
c9:24:0f:a5:13:d4:42:46:31:0e:a5:bd:e8:64:02:
fb:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:66:2D:43:6A:5B:07:61:F7:44:E1:5F:14:94:70:21:FC:32:F3:6B
X509v3 Authority Key Identifier:
keyid:BF:DF:57:28:EC:AB:D5:6E:F4:63:73:56:95:58:66:CA:54:68:69:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v99XKOyr1W70Y3NWlVhmylRoaRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/fcf322-17c1-4f40-a618-bd14d344bbf2/1/v99XKOyr1W70Y3NWlVhmylRoaRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/fcf322-17c1-4f40-a618-bd14d344bbf2/1/v99XKOyr1W70Y3NWlVhmylRoaRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:fc:36:1a:7e:39:60:a8:ed:84:ed:6d:29:fe:67:ec:df:9f:
1f:77:cb:0b:73:a3:c4:fa:68:ea:e3:cb:01:68:77:31:13:59:
2b:b0:ed:75:19:f1:2c:7d:ee:ba:34:35:b5:6e:c7:1e:1a:81:
c6:ed:3d:d9:20:ba:6b:7c:4f:ac:31:d3:0a:40:a3:f6:5c:ce:
19:2e:37:b2:4a:21:d2:b7:24:df:56:04:39:ee:f9:36:8f:bf:
de:80:1e:96:33:e1:ba:cb:ca:a6:aa:85:2a:45:26:e2:14:c3:
89:7a:9c:d6:7e:9c:3f:72:a1:d4:8c:5f:ab:7d:5a:c2:35:dc:
e3:7f:be:89:27:80:33:d5:e9:eb:2a:78:55:f1:62:94:f4:44:
cd:14:8e:0b:e0:14:f9:e5:a1:9f:c3:2c:52:41:c9:27:57:a3:
6a:3a:81:3d:65:ab:b4:b3:6a:39:ad:6c:79:fa:fa:9e:f6:93:
7c:28:c7:89:70:4f:88:ed:16:87:66:19:28:bf:0b:86:bb:76:
10:11:73:64:b0:98:36:b4:f9:d6:9a:a3:ef:d0:9f:1e:a7:f5:
70:74:b4:bb:9c:f0:ac:27:88:81:7a:64:61:c0:a7:84:d8:e9:
e6:fb:1b:df:ad:f9:36:99:65:cb:0c:28:61:da:b4:82:e1:e5:
77:c9:d0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 16:18:20 2025 by rpki-client