Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.mft
File: 99MudSlBh9Rujq4Pj-crX9er-IY.mft (raw, json)
Hash identifier: NgncNWxNmPUjh55QnxjkaB3yri1b4wYdXiI3f7d/FJc=
Subject key identifier: 4E:3B:45:C3:8F:02:D2:40:BC:6B:63:07:72:11:4A:90:DC:E3:A2:60
Authority key identifier: F7:D3:2E:75:29:41:87:D4:6E:8E:AE:0F:8F:E7:2B:5F:D7:AB:F8:86
Certificate issuer: /CN=f7d32e75294187d46e8eae0f8fe72b5fd7abf886
Certificate serial: 01984E1E2F8FC2DADB9761429B6818B0BC78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/99MudSlBh9Rujq4Pj-crX9er-IY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.mft
Manifest number: 160B
Signing time: Sun 27 Jul 2025 23:00:57 +0000
Manifest this update: Sun 27 Jul 2025 23:00:57 +0000
Manifest next update: Mon 28 Jul 2025 23:00:57 +0000
Files and hashes: 1: 99MudSlBh9Rujq4Pj-crX9er-IY.crl (hash: 1DdrWAgkdq4fGd4K2QYwNnH0Ps1wC3uaDMO9pbGDYag=)
2: FYg_psCFhdR_n5VNhP25gINYx6M.roa (hash: h+fjKLWgHVAllkPWeuz1NL6KyEoRyUzS/iNO+yf1JFI=)
3: ZhvVa7SGL0ihaaWqEDQl81ffNSw.roa (hash: ytKQDKvlQVK8AL0ByiBKUDRRuwN5/717YGo/cNpO++k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.mft
rsync://rpki.ripe.net/repository/DEFAULT/99MudSlBh9Rujq4Pj-crX9er-IY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 18:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4e:1e:2f:8f:c2:da:db:97:61:42:9b:68:18:b0:bc:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7d32e75294187d46e8eae0f8fe72b5fd7abf886
Validity
Not Before: Jul 27 23:00:57 2025 GMT
Not After : Jul 28 23:00:57 2025 GMT
Subject: CN=4e3b45c38f02d240bc6b630772114a90dce3a260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:48:d7:94:62:9a:eb:b6:2d:1a:81:26:4d:c6:
65:c3:f5:f8:9c:a5:72:cf:3f:ce:43:6d:b3:4d:d2:
57:fd:30:b4:73:1f:02:fc:d4:6d:b2:b0:a6:77:40:
c6:40:77:cb:a4:dc:a7:30:ce:63:ff:db:74:9a:da:
37:f1:5f:d7:b1:7f:0e:01:3a:05:34:d0:8c:fc:3c:
2b:d3:0a:80:f7:d0:df:c4:22:ef:98:57:71:16:e4:
ee:b1:f8:59:8e:0e:2d:e5:a7:c4:96:c4:72:86:be:
58:a4:4a:51:f5:89:fe:ba:27:13:bb:a0:49:d8:56:
07:bd:45:47:63:2f:6f:3d:0d:87:ac:74:52:57:e9:
ab:ac:3a:41:d8:82:fa:4e:74:95:b8:3c:63:12:bc:
f7:6d:ee:f5:f3:5e:1f:53:e4:f8:a6:6e:46:5b:d6:
4c:88:cd:76:d4:11:85:61:81:1f:3a:a4:e1:aa:f0:
b5:99:32:7b:79:ce:2f:0e:96:00:07:d3:36:38:cf:
26:0f:ed:a3:df:db:d5:f1:7c:8d:47:44:95:43:35:
0e:67:40:f7:3f:42:aa:93:00:bc:05:16:cb:f4:63:
9b:6f:25:dd:9e:c2:5d:ff:5d:ca:18:b6:7a:66:ec:
eb:80:11:6d:69:c2:98:a3:4c:42:a1:78:b3:3f:55:
cd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:3B:45:C3:8F:02:D2:40:BC:6B:63:07:72:11:4A:90:DC:E3:A2:60
X509v3 Authority Key Identifier:
keyid:F7:D3:2E:75:29:41:87:D4:6E:8E:AE:0F:8F:E7:2B:5F:D7:AB:F8:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/99MudSlBh9Rujq4Pj-crX9er-IY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:4e:2f:e1:99:79:33:0f:ce:60:43:8e:76:64:f2:3b:72:06:
16:9a:8c:fa:7c:19:ff:a6:d3:07:8b:07:52:fe:c0:dc:d1:3a:
d3:f0:bb:ec:96:f1:ca:3e:90:90:99:d1:dc:82:9c:03:27:72:
53:f9:62:0e:8e:48:4c:da:61:43:48:11:73:ad:b4:ee:5f:fa:
4d:63:2c:56:a5:6e:10:4c:d2:20:fb:15:0c:09:00:bc:6c:87:
d4:3d:1a:8e:1b:81:01:c2:27:e7:f8:17:0b:ce:74:42:ea:5c:
90:f6:34:c9:b0:01:bd:04:66:d0:8d:a8:08:b0:1c:f0:d4:c2:
e8:e1:7b:2c:6f:b2:ff:e5:e5:2c:8e:cb:92:be:59:d3:59:87:
43:d6:65:e6:c5:fe:f1:c0:9c:c1:6c:2c:af:22:17:9b:2d:60:
7e:93:0a:fd:cf:ad:de:cd:a0:9f:f9:dd:a6:b5:46:6b:ac:7c:
22:2d:30:37:89:25:b0:b6:c4:9d:db:2d:8e:1c:c2:30:22:34:
53:74:c6:2a:65:81:86:2f:9b:98:25:2c:c5:72:80:fb:e3:e1:
ee:61:d0:45:d9:44:ec:1c:ac:d0:58:00:e0:cd:ce:3d:8f:3e:
d2:c1:89:d4:a8:53:42:fb:4b:94:e5:f3:d5:c6:bd:17:a0:0c:
1b:97:3a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 01:04:13 2025 by rpki-client