Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.mft
File: mfseX91w4MDmCIWjBYH-DAJBDX0.mft (raw, json)
Hash identifier: 1NCahkCS1iB8hnZDVZFfQ+mjJ5H+e/p0OzvZCUpDhSU=
Subject key identifier: 70:99:53:8A:3B:81:FD:AA:79:15:C5:AD:F0:F9:40:3F:64:8C:69:64
Authority key identifier: 99:FB:1E:5F:DD:70:E0:C0:E6:08:85:A3:05:81:FE:0C:02:41:0D:7D
Certificate issuer: /CN=99fb1e5fdd70e0c0e60885a30581fe0c02410d7d
Certificate serial: 0199180AC01853A0D46169ABDAF60547BC94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfseX91w4MDmCIWjBYH-DAJBDX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.mft
Manifest number: 1668
Signing time: Fri 05 Sep 2025 04:03:01 +0000
Manifest this update: Fri 05 Sep 2025 04:03:01 +0000
Manifest next update: Sat 06 Sep 2025 04:03:01 +0000
Files and hashes: 1: mfseX91w4MDmCIWjBYH-DAJBDX0.crl (hash: W55XsgGavxHf46xtL8pyVoO6pMCNVfOe9dgMUJw3Trk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfseX91w4MDmCIWjBYH-DAJBDX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:0a:c0:18:53:a0:d4:61:69:ab:da:f6:05:47:bc:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fb1e5fdd70e0c0e60885a30581fe0c02410d7d
Validity
Not Before: Sep 5 04:03:01 2025 GMT
Not After : Sep 6 04:03:01 2025 GMT
Subject: CN=7099538a3b81fdaa7915c5adf0f9403f648c6964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:16:04:c6:64:20:52:b4:be:59:ff:2a:44:07:
a3:02:43:d4:d8:62:18:bc:4f:d2:44:20:44:b8:4a:
ed:17:06:e1:3c:71:47:00:35:7e:d3:3b:ae:7f:0f:
99:c8:13:bf:6a:e9:1c:c6:a5:6f:e0:67:61:9b:04:
59:4e:33:3e:ff:57:48:cf:5c:2d:a5:47:ec:8b:d4:
05:12:0d:21:5f:e4:62:d5:a6:f5:40:6e:2a:ea:5f:
71:10:46:d2:40:92:40:3f:0d:e6:90:40:8d:6e:01:
83:fe:e3:07:2d:65:47:05:52:9a:1b:bd:dd:5d:81:
fd:31:b1:16:8a:1a:73:df:a7:d9:a4:ca:75:dc:31:
67:c3:ca:3f:54:79:4f:62:20:ba:9c:56:71:29:56:
c9:44:63:59:e1:cf:ba:dc:50:18:3c:7b:29:43:5c:
26:bf:96:c0:29:e8:c3:ac:95:36:5b:3c:d3:00:a7:
d6:0b:ae:14:f6:0f:c3:7d:53:d0:90:9a:ab:cb:7a:
2a:8b:05:34:ab:79:27:ff:52:5a:21:67:9a:cc:5e:
e4:fc:43:81:42:78:d0:cb:23:28:db:7d:47:bd:f6:
65:9c:08:ce:64:8f:82:24:43:88:16:4a:9e:60:0b:
38:27:7f:fe:1e:d4:d9:05:8f:bb:55:ae:97:c9:2d:
21:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:99:53:8A:3B:81:FD:AA:79:15:C5:AD:F0:F9:40:3F:64:8C:69:64
X509v3 Authority Key Identifier:
keyid:99:FB:1E:5F:DD:70:E0:C0:E6:08:85:A3:05:81:FE:0C:02:41:0D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfseX91w4MDmCIWjBYH-DAJBDX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:48:83:4d:57:03:94:19:b0:55:2e:9a:5e:43:7d:1a:68:a4:
a4:69:37:d2:0e:05:98:43:bf:04:17:a1:6b:bc:20:80:5a:33:
cb:44:04:3c:be:53:04:b4:ca:75:26:a2:ee:6e:15:22:af:d0:
0b:a7:13:43:d3:4d:58:93:37:59:f3:0e:23:45:e3:04:dc:6f:
4f:89:f5:3c:21:42:c7:bc:b2:af:e4:dd:e9:b6:30:09:b8:e5:
e2:fb:da:0c:bd:40:e6:67:19:f0:26:3a:e5:d1:8a:a7:bd:4b:
01:e7:38:28:b2:0b:b6:2f:12:75:27:b7:79:90:e9:8d:15:a6:
dd:43:07:72:1a:a3:a2:7c:ac:df:01:75:d5:a4:d9:52:4c:f9:
a0:d2:96:7e:be:9e:9f:13:2c:65:e7:cc:9b:98:40:1c:71:e3:
af:6d:43:21:41:1a:97:93:6d:0a:ba:a7:76:1f:a1:ff:56:c3:
8f:77:d6:1e:2f:a3:ac:7e:70:11:3d:9d:43:d8:92:2a:8a:67:
ba:e3:fd:e4:ed:1d:b6:0f:34:38:bd:44:89:4a:e2:41:54:79:
af:99:b4:c9:3a:4e:d7:a4:9c:4b:7b:d7:1d:f1:cc:21:8a:3b:
32:2c:9e:bb:f1:ad:18:30:01:0f:32:6c:70:de:df:9e:d4:81:
42:31:b4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:20:21 2025 by rpki-client