
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.mft
File: 996iwVmT1oMXUKpjDg5oDZ7viIo.mft (raw, json)
Hash identifier: /aB8D3Dg+ZmN6OQp8K5fW2et3DmtALXPahKf/1jf1lc=
Subject key identifier: 21:2B:81:05:3B:AF:69:09:7F:1A:11:16:3A:DE:97:5B:58:C7:48:75
Authority key identifier: F7:DE:A2:C1:59:93:D6:83:17:50:AA:63:0E:0E:68:0D:9E:EF:88:8A
Certificate issuer: /CN=f7dea2c15993d6831750aa630e0e680d9eef888a
Certificate serial: 019848F71EEF3FC9B65C3E14F54108BCE326
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/996iwVmT1oMXUKpjDg5oDZ7viIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.mft
Manifest number: B6
Signing time: Sat 26 Jul 2025 23:00:11 +0000
Manifest this update: Sat 26 Jul 2025 23:00:11 +0000
Manifest next update: Sun 27 Jul 2025 23:00:11 +0000
Files and hashes: 1: 996iwVmT1oMXUKpjDg5oDZ7viIo.crl (hash: I7KiOH2+x0RZLtepZn+C8/yqZpbwTtuxv4ujkXjzDvw=)
2: Q_OYedJWMY4R6WjcRHhbze4rY30.roa (hash: I5gaAF/DaFJrmNnPn+q8QcrAIPjnX3NXACdoAl2BzTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/996iwVmT1oMXUKpjDg5oDZ7viIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 23:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:1e:ef:3f:c9:b6:5c:3e:14:f5:41:08:bc:e3:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7dea2c15993d6831750aa630e0e680d9eef888a
Validity
Not Before: Jul 26 23:00:11 2025 GMT
Not After : Jul 27 23:00:11 2025 GMT
Subject: CN=212b81053baf69097f1a11163ade975b58c74875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c8:2e:4f:86:b6:b9:b8:bc:e6:38:5d:26:a8:
27:90:84:84:bb:56:5a:ce:25:43:e4:4c:cb:60:2c:
04:9f:d8:e1:ed:cf:24:3c:36:b0:48:3f:a0:05:e6:
73:7c:bc:75:a1:b4:7d:94:ab:43:d1:18:f6:ed:7f:
43:a8:32:6c:b4:43:66:43:48:b3:9d:64:ad:d2:e4:
c4:52:c7:b4:96:24:0a:ae:f7:37:29:ab:bd:d8:41:
cb:82:f5:6a:ec:da:5b:44:11:2f:17:f1:d1:75:ff:
20:4a:eb:ec:4a:17:d8:85:51:0c:5d:70:51:13:b8:
5c:24:81:6f:de:9b:cb:00:9c:18:b4:64:14:40:45:
db:df:94:14:f4:be:0b:1f:6a:19:aa:e9:7c:e1:1e:
62:6e:64:00:22:36:37:24:c3:b7:fa:f5:7d:84:ed:
9c:80:33:6f:0d:86:27:45:a5:33:7b:53:d4:32:4f:
a4:dd:ee:b0:2c:f3:bf:79:97:44:9d:c6:e0:8c:80:
80:94:05:97:35:5f:1f:15:9d:98:41:96:7e:29:4b:
2b:d5:f6:3f:96:ac:44:e5:05:ae:d0:bc:e1:1f:bb:
20:56:b3:5e:18:2c:3a:44:9a:ff:a7:3d:27:85:6f:
dc:4b:9a:47:67:27:fb:68:76:aa:e2:3c:ae:a0:9c:
e3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:2B:81:05:3B:AF:69:09:7F:1A:11:16:3A:DE:97:5B:58:C7:48:75
X509v3 Authority Key Identifier:
keyid:F7:DE:A2:C1:59:93:D6:83:17:50:AA:63:0E:0E:68:0D:9E:EF:88:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/996iwVmT1oMXUKpjDg5oDZ7viIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:5b:e1:22:33:3d:da:b1:d1:db:cc:ad:be:b1:b5:59:7f:03:
c6:55:2e:57:88:65:b6:19:c7:16:35:24:da:1a:30:f1:ff:5a:
51:0b:09:d4:24:ca:8b:5a:c5:43:6b:8f:6a:0e:b5:2f:82:21:
19:1b:e9:c2:9c:bf:32:bb:ec:e3:f2:ac:68:4b:8a:65:45:83:
dd:a4:e0:3e:a4:4a:be:7f:5a:e3:1b:e9:b3:c6:19:e2:90:72:
18:cd:1a:24:3e:00:d8:90:c3:0d:e0:4d:e3:8c:1c:9f:da:e3:
1d:af:ed:74:f1:8f:05:1f:35:16:c3:f4:0c:81:04:eb:fa:6c:
cc:f6:56:54:ac:89:92:b8:c1:93:90:01:2f:4b:50:31:b8:60:
c0:7d:78:28:ec:0a:5d:8b:97:f1:08:00:a3:42:c6:3c:51:12:
ed:5c:11:42:79:a2:a2:c7:89:68:92:e3:d7:4f:71:52:9f:b2:
39:dc:64:6a:7f:e7:45:68:46:19:f7:9e:03:93:1e:43:0a:3b:
f6:3a:53:a1:0f:57:33:3c:29:8d:f4:95:d9:e5:09:d6:6e:ad:
da:ed:69:93:2b:64:ac:92:48:d7:ec:37:97:e6:ac:b8:c1:87:
04:2f:51:20:78:a5:3d:31:6e:3b:96:f8:28:1c:33:62:f4:51:
c2:ff:f9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:40:41 2025 by rpki-client