Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
File: mfyNwqfBufMroZV_9JLcC6TyYP8.mft (raw, json)
Hash identifier: iUTVIEhYu97dZ/G/Yy4T58xiN7DhImRHeJsBOAYPg/g=
Subject key identifier: 12:50:67:08:1E:C6:2A:B0:E7:D5:9F:19:6D:5A:A4:82:DB:FB:C1:40
Authority key identifier: 99:FC:8D:C2:A7:C1:B9:F3:2B:A1:95:7F:F4:92:DC:0B:A4:F2:60:FF
Certificate issuer: /CN=99fc8dc2a7c1b9f32ba1957ff492dc0ba4f260ff
Certificate serial: 019829DAB48B9E218B81EAEFE363FC4CEC68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
Manifest number: 59
Signing time: Sun 20 Jul 2025 22:00:55 +0000
Manifest this update: Sun 20 Jul 2025 22:00:55 +0000
Manifest next update: Mon 21 Jul 2025 22:00:55 +0000
Files and hashes: 1: bwcXy3FYmHBMxUWqGbTAjvoGjVE.roa (hash: i13BZ7NJZZP7VgcQkDsp+e+5aBIM+z4sday3aP/ehUI=)
2: mfyNwqfBufMroZV_9JLcC6TyYP8.crl (hash: PeLwnRvNRLO4czsRfFvPg64HGnsOrel5ijXNhEFkgro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:29:da:b4:8b:9e:21:8b:81:ea:ef:e3:63:fc:4c:ec:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fc8dc2a7c1b9f32ba1957ff492dc0ba4f260ff
Validity
Not Before: Jul 20 22:00:55 2025 GMT
Not After : Jul 21 22:00:55 2025 GMT
Subject: CN=125067081ec62ab0e7d59f196d5aa482dbfbc140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b9:ab:6c:48:ac:a4:30:e7:a6:5c:c3:ec:c1:
4d:81:25:5c:f7:ab:69:a0:a4:dd:4f:03:45:42:7e:
24:13:ec:a6:0b:5f:f8:25:86:b7:f5:ce:42:6b:0d:
93:3f:c1:2c:4a:49:3e:fd:96:2d:78:04:db:08:3c:
3e:64:17:ec:fe:39:1d:fc:b5:5b:6e:4c:45:af:1d:
40:82:64:6c:7b:79:20:cf:c7:4a:09:5f:81:2f:df:
a5:fa:76:d4:1f:82:44:7c:07:a2:cc:af:6b:50:0b:
05:a6:d6:66:43:37:16:72:d1:dc:7b:c1:d5:4d:13:
74:7b:3b:11:7b:38:8f:f3:c5:1e:1e:6b:7e:70:20:
ab:0f:09:17:a3:19:2d:4f:d5:48:1d:4c:a5:a8:03:
ad:76:a3:62:a4:1f:13:d5:28:f5:a3:6d:93:c0:b8:
2c:fd:8c:fc:d8:16:b5:ea:84:97:45:12:73:67:e2:
c2:fd:bd:1a:40:43:b7:77:cd:a0:ec:a0:65:92:9a:
60:5b:b7:c8:1c:30:6a:81:6b:91:45:e2:0c:f9:82:
98:83:31:db:47:aa:ae:d2:cf:8f:fc:ea:9a:54:97:
32:c2:ad:a6:d2:1b:f8:ff:df:df:5f:74:a7:ff:6b:
71:72:1f:40:ba:c7:4e:89:0a:4e:6c:3a:c7:1b:8b:
38:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:50:67:08:1E:C6:2A:B0:E7:D5:9F:19:6D:5A:A4:82:DB:FB:C1:40
X509v3 Authority Key Identifier:
keyid:99:FC:8D:C2:A7:C1:B9:F3:2B:A1:95:7F:F4:92:DC:0B:A4:F2:60:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d9:89:7c:75:e6:c3:83:5a:e3:d5:75:76:c6:27:59:f2:4a:
9d:64:c8:86:52:fb:88:a8:c7:80:b3:13:80:6f:7d:ff:b2:07:
b9:32:dd:88:d8:94:b5:5f:34:c0:c2:38:52:7c:da:41:f3:08:
cc:ff:77:6f:ff:79:88:f0:05:43:bd:e5:25:f3:e1:ae:1b:45:
2b:6d:9d:79:87:fb:87:c4:85:0c:16:8d:70:65:bd:03:29:98:
6b:bc:52:6c:41:71:14:a2:22:7e:dd:36:a1:7d:c4:11:82:24:
93:af:00:16:e1:12:46:29:c7:9b:a3:4f:9a:ac:76:ba:c4:9a:
d9:84:24:3b:93:0e:f6:40:3e:46:67:89:65:79:27:fd:6c:78:
cb:07:be:d8:86:7a:9e:57:ad:20:8a:f8:73:2e:16:64:c1:59:
6b:51:1c:34:15:5b:88:66:58:05:96:24:a4:7a:fb:95:68:5c:
f0:c3:45:d0:5d:26:ff:be:cf:8e:34:f2:1e:03:b3:f8:f0:14:
24:f7:cf:28:ab:f6:76:97:90:29:96:47:d8:5b:21:c4:d4:34:
03:20:70:e7:b7:00:c2:84:30:2e:fc:af:68:2a:fc:b3:1e:41:
e5:42:19:a0:1a:13:99:f5:43:9a:9f:a8:3f:ab:d0:65:4b:aa:
d5:b3:33:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:40:44 2025 by rpki-client