Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft
File: 99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft (raw, json)
Hash identifier: gETxnR1iOvqoPOKQ2ESwarV3eYg29n+mrVCWh0Xd2Wo=
Subject key identifier: 5E:E6:D3:AD:A7:84:4F:BB:D2:EE:54:68:65:AD:6F:C3:C1:4D:9B:D0
Authority key identifier: F7:D5:35:08:3F:B1:40:DD:AB:45:3A:BF:82:1F:5D:B3:A6:F4:61:A4
Certificate issuer: /CN=f7d535083fb140ddab453abf821f5db3a6f461a4
Certificate serial: 019A71B83A6A82B9C47CA591F39F7C558651
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/99U1CD-xQN2rRTq_gh9ds6b0YaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft
Manifest number: 0E67
Signing time: Tue 11 Nov 2025 07:01:30 +0000
Manifest this update: Tue 11 Nov 2025 07:01:30 +0000
Manifest next update: Wed 12 Nov 2025 07:01:30 +0000
Files and hashes: 1: 99U1CD-xQN2rRTq_gh9ds6b0YaQ.crl (hash: u3SVyBtKYbrlQuN/5ci1TiQqifYH6xch/T1vxJmzzrU=)
2: LSE36n14OlFyT2JPffWytn2VECM.roa (hash: aCXHANC+PKr6N/DP0npU9YHvABAfrys/iPm1LqbDFCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/99U1CD-xQN2rRTq_gh9ds6b0YaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:3a:6a:82:b9:c4:7c:a5:91:f3:9f:7c:55:86:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7d535083fb140ddab453abf821f5db3a6f461a4
Validity
Not Before: Nov 11 07:01:30 2025 GMT
Not After : Nov 12 07:01:30 2025 GMT
Subject: CN=5ee6d3ada7844fbbd2ee546865ad6fc3c14d9bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ee:ab:0d:e2:17:54:97:6e:14:42:29:eb:13:
64:39:4e:bc:f2:17:0e:c8:87:1c:94:d5:a9:16:0b:
fc:4d:e5:2b:90:92:5c:87:e3:0e:33:fe:02:85:48:
f2:1b:7f:f9:a9:3b:cc:e0:cc:6c:a9:90:b1:1c:5a:
0b:46:19:aa:88:56:2a:77:7b:48:26:4a:8a:e3:2a:
37:5b:19:c8:2a:4e:9a:86:8d:6a:ab:d4:70:3d:36:
a0:16:60:d6:3b:f4:d3:f9:f1:78:28:5f:5f:19:ea:
1e:12:fc:4c:c1:44:f8:e6:0e:32:ed:91:6b:0a:e2:
91:d4:60:c0:4e:7d:3c:94:0b:7e:a8:00:9c:7b:5a:
87:a1:78:cd:33:cb:ae:d3:ae:34:6c:39:8c:d1:40:
d6:43:70:0f:0c:09:fe:c3:83:03:69:64:64:ab:e1:
81:10:84:94:42:29:90:76:60:ee:0e:25:40:08:c9:
18:9b:59:c9:a7:59:17:d5:f8:e1:fa:3e:d2:84:50:
56:e5:c6:4f:39:3b:73:18:e1:24:25:0d:51:76:c6:
b0:c1:2a:b2:7e:12:e7:22:14:3f:89:9d:36:97:d3:
a5:6f:c4:70:9d:24:52:a1:44:de:7d:75:cb:e4:09:
94:ba:fb:00:5d:ab:da:89:23:f7:45:12:bd:b7:b6:
05:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E6:D3:AD:A7:84:4F:BB:D2:EE:54:68:65:AD:6F:C3:C1:4D:9B:D0
X509v3 Authority Key Identifier:
keyid:F7:D5:35:08:3F:B1:40:DD:AB:45:3A:BF:82:1F:5D:B3:A6:F4:61:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/99U1CD-xQN2rRTq_gh9ds6b0YaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:20:86:4b:0b:63:21:6a:51:64:fb:8c:c6:b7:1e:4f:df:71:
f2:97:e8:48:1c:2a:08:6b:c5:0e:fa:d1:00:ab:31:7f:4d:dd:
e5:39:2d:2b:2e:23:a7:dc:ae:8d:41:2c:94:80:9c:b5:ce:8e:
f0:9e:75:52:12:de:85:14:26:4e:5c:78:9b:0b:85:5e:45:d3:
7e:a4:2e:89:2d:c1:31:15:64:a2:67:a1:0f:14:c2:77:75:e3:
4c:66:ce:ad:53:84:4a:e8:d0:31:0d:9b:13:04:86:28:3f:cf:
f9:73:04:ee:64:6b:b4:10:44:47:70:75:0a:47:af:f4:9c:64:
57:4d:a5:e7:1d:79:62:c0:4c:e5:5d:ff:47:39:db:1c:18:76:
04:bd:91:16:96:09:c3:2d:d6:7f:45:0c:cb:1d:af:b3:9c:c9:
8c:fb:97:b9:48:d1:4a:b9:58:47:39:c0:c6:d4:77:7c:37:08:
88:e5:c2:68:f9:8f:d2:88:74:a3:e7:ec:32:f4:2b:52:a4:10:
f6:6a:11:ba:15:f9:45:3c:18:8e:9f:c2:38:b7:11:a5:0a:f5:
e1:55:c5:b2:30:e7:bf:2a:34:93:8b:76:e5:51:a8:69:1e:f2:
58:bd:4d:49:80:35:da:1e:dd:81:1c:d7:6d:d3:03:ad:67:b7:
03:12:1c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:47 2025 by rpki-client