Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
File: mfL0sCJG5gTiN_N5RaOCv62hJ38.mft (raw, json)
Hash identifier: dIUyrWrErzDtY7kjp0brRr8Q821U4DtyZ+qC42/pCdg=
Subject key identifier: 1A:39:3F:B4:92:B3:E6:9A:EA:46:FC:F6:A1:6A:FA:5B:3D:2B:F4:74
Authority key identifier: 99:F2:F4:B0:22:46:E6:04:E2:37:F3:79:45:A3:82:BF:AD:A1:27:7F
Certificate issuer: /CN=99f2f4b02246e604e237f37945a382bfada1277f
Certificate serial: 019921E7BA2FE4C83D8560B7B9E311A9C777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
Manifest number: 075B
Signing time: Sun 07 Sep 2025 02:00:58 +0000
Manifest this update: Sun 07 Sep 2025 02:00:58 +0000
Manifest next update: Mon 08 Sep 2025 02:00:58 +0000
Files and hashes: 1: mfL0sCJG5gTiN_N5RaOCv62hJ38.crl (hash: b4uJc5Hm/UVT87wq2KCF+zuMc+S657+hWX6aj4VuClY=)
2: tD16yJgx6FslawER1Evjktr90DU.roa (hash: IgaqAI1HCcxs2x01fN4KAw3fM/ZJo5SCnC5NuJ1Z+9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:ba:2f:e4:c8:3d:85:60:b7:b9:e3:11:a9:c7:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f2f4b02246e604e237f37945a382bfada1277f
Validity
Not Before: Sep 7 02:00:58 2025 GMT
Not After : Sep 8 02:00:58 2025 GMT
Subject: CN=1a393fb492b3e69aea46fcf6a16afa5b3d2bf474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d0:b3:0d:c2:69:0e:f7:5e:3d:0f:9a:00:68:
53:da:20:21:48:80:6f:30:d2:9d:60:8e:3a:1a:c3:
6e:0f:43:97:6c:59:0a:91:0b:7f:80:4b:32:3a:7c:
41:ad:f5:ee:e5:bb:b0:b8:46:dd:bf:8d:f0:b8:63:
90:41:70:2d:73:5a:9f:3c:d7:e4:ef:c2:41:31:82:
1d:0b:6e:35:f8:88:34:e8:cf:ea:32:a3:d7:c3:57:
bd:70:a1:9a:fb:8b:eb:a9:bc:a9:3c:25:77:19:5e:
ce:94:e1:92:95:0e:35:16:73:83:3e:d6:72:a0:a6:
98:a5:07:63:76:05:06:c6:b3:a1:83:c9:91:58:20:
76:6b:9f:cc:e1:f8:ce:7f:5c:f4:05:83:33:2f:5f:
30:fb:b3:7a:a5:69:cb:c9:ee:9a:0d:9a:0a:f4:f9:
d2:91:0b:df:34:01:0c:19:29:54:5c:f9:31:25:12:
a4:36:49:06:2f:2d:63:0a:1d:82:d2:eb:94:bd:c1:
2c:05:73:4c:03:57:76:f3:9d:d5:0c:77:af:88:63:
9b:d1:ed:ed:f3:7e:0a:67:2d:0c:b7:c8:29:88:e0:
b4:66:bd:2d:3d:a3:15:82:b5:3a:b8:0c:87:ba:a6:
b4:0e:75:f9:be:d3:0e:52:7e:8b:82:a4:89:9a:05:
c3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:39:3F:B4:92:B3:E6:9A:EA:46:FC:F6:A1:6A:FA:5B:3D:2B:F4:74
X509v3 Authority Key Identifier:
keyid:99:F2:F4:B0:22:46:E6:04:E2:37:F3:79:45:A3:82:BF:AD:A1:27:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:c8:54:32:40:0c:70:2b:8b:06:1a:59:ef:5a:39:78:76:8d:
5f:ae:34:ec:f1:81:06:8f:54:1e:a7:5a:17:9d:86:e6:15:e7:
49:22:b6:19:49:97:80:14:db:be:bd:e0:ad:d7:f7:ad:68:44:
b7:1e:c9:c1:74:8b:a6:57:83:15:85:2c:50:e3:12:ec:c9:a0:
71:6b:4f:f1:3d:9e:5b:5b:10:3c:0d:51:25:24:83:63:c4:53:
74:7c:fe:c5:8c:1f:ad:e6:28:00:0f:05:af:6c:49:bd:68:ff:
5a:9e:60:4c:66:16:fd:29:d7:da:f8:76:96:8f:27:e2:61:5d:
5d:f8:60:6f:b9:29:95:eb:29:72:01:6b:9e:d4:1e:36:73:fa:
66:77:c0:2e:5a:c0:04:1d:de:72:c9:60:b7:3c:dd:dd:a1:77:
5a:db:1b:73:23:30:4a:9c:50:b0:81:a9:b1:3a:7c:70:33:e5:
a2:f0:39:12:69:fa:e0:03:44:3e:07:c9:45:52:1e:93:17:56:
f0:96:34:db:81:05:24:31:44:8e:f7:e1:f6:be:fb:d3:be:5e:
d3:81:5c:d1:1f:2d:b3:43:1d:c2:10:e2:28:eb:b8:79:5c:41:
18:aa:10:59:75:a6:fa:85:11:09:46:10:b3:67:5c:a2:77:f7:
70:48:f1:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:34:30 2025 by rpki-client