Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft
File: _Z99xQlavbRF0YmFfTEBqK7info.mft (raw, json)
Hash identifier: +ZNwzhirN7Ww10kqL9jSsIMpT6JlkVFh9d2phOlFCZc=
Subject key identifier: 55:8F:6D:7D:DF:7A:57:B7:5A:37:10:AB:A6:71:12:39:0A:D8:D5:60
Authority key identifier: FD:9F:7D:C5:09:5A:BD:B4:45:D1:89:85:7D:31:01:A8:AE:E2:9D:FA
Certificate issuer: /CN=fd9f7dc5095abdb445d189857d3101a8aee29dfa
Certificate serial: 0199183FDA9B48287D39656AFAFBEA61B2A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Z99xQlavbRF0YmFfTEBqK7info.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft
Manifest number: 166B
Signing time: Fri 05 Sep 2025 05:01:01 +0000
Manifest this update: Fri 05 Sep 2025 05:01:01 +0000
Manifest next update: Sat 06 Sep 2025 05:01:01 +0000
Files and hashes: 1: _Z99xQlavbRF0YmFfTEBqK7info.crl (hash: nJdPIAmNu38l68kl/18uS4sUwtbTASxWtNKejDL3xds=)
2: hb6ryi0zlarGbicwA660cAdO1uU.roa (hash: npI6mlOfecW2btMEPci2EHiqJhnGF4s0rXnIs0wQ4wY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Z99xQlavbRF0YmFfTEBqK7info.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:3f:da:9b:48:28:7d:39:65:6a:fa:fb:ea:61:b2:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd9f7dc5095abdb445d189857d3101a8aee29dfa
Validity
Not Before: Sep 5 05:01:01 2025 GMT
Not After : Sep 6 05:01:01 2025 GMT
Subject: CN=558f6d7ddf7a57b75a3710aba67112390ad8d560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5e:47:a2:81:8a:cf:89:33:fe:d1:bd:66:2d:
54:ba:52:ca:54:4c:66:e4:90:9c:e4:2e:c5:6c:4c:
36:87:6e:14:e6:75:8f:b5:15:ed:b1:3d:2a:4c:a6:
0a:a0:a4:b2:51:7f:8a:2b:89:18:a1:9c:22:f3:8a:
8f:f6:f0:5e:8a:da:ae:91:9a:ad:af:f7:e4:b4:0e:
46:2e:fe:3d:99:55:b7:b5:4f:ae:37:67:8e:14:48:
f6:82:42:d6:75:8f:74:67:bd:76:5b:8a:17:fb:3c:
2d:90:66:9f:64:78:ff:9b:39:59:8d:dc:37:a8:b5:
d2:1a:40:9f:cd:06:30:a0:3c:e6:eb:7c:a1:9f:59:
99:b0:40:9a:bd:89:cd:da:f9:27:d4:dc:a6:3b:a8:
9d:6c:32:ea:bb:03:09:c8:cb:00:1b:e1:c3:22:a5:
5a:46:96:9b:4d:89:97:b8:fd:ff:fd:e7:73:74:37:
ed:97:41:3d:4d:cd:8e:ee:82:9d:af:90:ab:b7:f6:
b0:0b:a1:38:8b:1c:be:9a:5c:ec:e5:69:b2:ab:e2:
10:19:af:9c:98:16:ba:18:bf:39:3c:bc:38:93:b6:
2f:fc:3a:ae:ac:14:d9:94:de:b3:64:8d:54:d7:6f:
45:62:76:cf:50:74:13:f8:6c:97:54:6f:52:63:76:
bf:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:8F:6D:7D:DF:7A:57:B7:5A:37:10:AB:A6:71:12:39:0A:D8:D5:60
X509v3 Authority Key Identifier:
keyid:FD:9F:7D:C5:09:5A:BD:B4:45:D1:89:85:7D:31:01:A8:AE:E2:9D:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Z99xQlavbRF0YmFfTEBqK7info.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:3d:f2:ef:8a:4a:4b:2b:76:34:d9:ad:db:65:36:1a:b7:9e:
32:17:34:5c:fe:4e:7f:a2:ac:40:bd:04:f0:cc:59:b9:6a:90:
58:a8:91:a7:ee:ba:11:0d:5e:b2:0a:01:71:ce:fc:5e:7c:ae:
66:96:f1:f1:ce:4b:b6:29:93:e9:fc:52:d7:84:b2:65:d0:a7:
73:41:f0:cc:7d:62:26:5e:47:5c:69:8d:ed:df:22:6d:72:a6:
23:66:bf:20:58:b7:52:ce:e1:e8:9c:8e:ad:ac:8a:08:35:91:
ce:95:10:d9:b2:ab:ac:5e:c2:9e:b9:70:26:f3:5e:e2:d5:85:
54:89:84:72:94:bc:07:eb:4d:31:04:65:34:be:91:33:e7:05:
d2:70:85:06:29:f4:e0:9b:b6:65:75:e3:38:fd:53:c4:09:db:
74:33:bd:48:6d:86:82:a0:e3:d4:9b:85:e1:77:06:2e:6e:6f:
3a:d0:a4:65:41:89:8a:36:8c:62:dc:d2:05:7b:82:b6:5f:7d:
b3:67:96:e2:44:94:1d:6f:d8:3b:6e:c2:5d:28:c4:5b:bc:0f:
44:ca:c0:c1:9e:c1:ef:99:c6:2a:a1:b9:e9:a2:d6:97:51:5b:
72:65:7d:a3:3f:df:9e:79:9f:df:e4:24:59:df:fc:86:1a:7f:
08:0e:73:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:34:53 2025 by rpki-client