Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft
File: mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft (raw, json)
Hash identifier: L/cRVOsyMUXLiHla89yqPZ7FJfoNMWnjJSp6jKGDj0U=
Subject key identifier: A7:9A:96:9F:11:40:3A:5D:52:03:47:85:D1:0A:44:40:C9:6C:B6:94
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Certificate issuer: /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial: 01991688A1F3BA7AE855FC8589662312779E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft
Manifest number: 16CA
Signing time: Thu 04 Sep 2025 21:01:16 +0000
Manifest this update: Thu 04 Sep 2025 21:01:16 +0000
Manifest next update: Fri 05 Sep 2025 21:01:16 +0000
Files and hashes: 1: 3RCDJt1deifEOXm02dSal3fDja4.roa (hash: g0j28bx4768J7FBy17Gxo6hVJEp8aaXWdKKvas8FlM4=)
2: 6cG7apJZWTaCYJhEQ2AxuGdOU6Y.roa (hash: JJCXT/6UNi9mEIWqA8v8nCsjcSMSSRjcc/zrEHMqmj0=)
3: 8SwD2syCQhmofhgov7byX9Itmmw.roa (hash: cUvCnHiFH7D4J+0OEABbyLy6H+sXz0JcuvR63cJNE18=)
4: 99na7wV0wOq68_7vIbCrL9gfxjs.roa (hash: 42LNXKEAxEwEc7Szkj0BiLf8pgpR4M/aL88CA0G+dmY=)
5: 9pMjaJdgappxiU1Tk0UMIRy3SNc.roa (hash: KKwO3btWZ5ddNVsSe6VCRqppaOicRKCDauf9ToA7uzQ=)
6: JHPfdmZ9_Y7nWvY0D-d0lDb96Vg.roa (hash: gf2XByKnGE8jJhVC4HR5cPA59ppt1RRzDD6FJs3YMQ0=)
7: epU58EjYpMtSgrUzd3xlkI9EhKU.roa (hash: d2WOVeDIsDjpX00onNi7gIPb75WWaXv2cOi5GanZkh8=)
8: mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl (hash: nQJ06IcvBGW3z3uoWw0NaynNSG1PDfuMwdrWSwWrHhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 16:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:88:a1:f3:ba:7a:e8:55:fc:85:89:66:23:12:77:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Validity
Not Before: Sep 4 21:01:16 2025 GMT
Not After : Sep 5 21:01:16 2025 GMT
Subject: CN=a79a969f11403a5d52034785d10a4440c96cb694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3e:43:09:29:a0:cf:aa:a5:9c:ba:07:50:31:
76:44:d2:ff:f1:2e:40:6d:14:db:e3:98:b3:dc:88:
4b:ad:09:d2:39:f8:8d:0d:e4:e9:4e:ad:9c:3a:68:
4c:bf:ff:bf:ee:1c:50:43:56:37:21:81:22:52:ba:
ec:c9:8e:87:25:66:d7:f7:b4:6b:92:bd:b3:b7:76:
70:23:7a:f7:db:80:27:f1:3e:3e:41:08:e3:1f:8e:
95:9d:44:34:31:0b:c9:0f:ad:e2:f1:b5:cc:f3:d5:
5f:40:0a:96:4b:db:95:11:ff:ee:cc:a9:7e:87:cd:
c3:6c:5f:b8:37:da:b7:2a:e2:a8:47:1d:29:b3:2e:
f8:1c:ce:6e:52:b2:21:22:66:f5:19:be:5a:01:7f:
ef:01:8f:9d:0d:00:85:cc:11:7c:e3:fb:b9:73:35:
86:f5:44:ee:b1:a4:0b:3d:e5:05:8c:fa:11:ce:e3:
f6:05:9c:72:88:38:dd:8a:69:d9:85:c9:98:0a:c9:
be:0a:19:d4:3e:30:0d:a2:1e:34:e0:86:f6:20:00:
e3:56:1f:fe:12:c2:92:36:25:95:be:94:02:4a:cc:
64:3d:80:e3:57:54:76:01:b6:19:5f:bc:43:db:96:
8d:8b:28:01:31:79:c9:48:a0:e4:38:37:2e:65:44:
bf:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:9A:96:9F:11:40:3A:5D:52:03:47:85:D1:0A:44:40:C9:6C:B6:94
X509v3 Authority Key Identifier:
keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:86:99:54:d0:c2:63:1a:39:e4:19:92:d9:51:6c:0c:4d:20:
47:97:34:fa:a6:63:09:56:78:27:83:2e:a0:3e:6d:d1:8f:ad:
94:21:3f:42:8b:4b:ff:56:e6:1f:af:ff:e3:02:3f:4c:d0:44:
43:1b:8b:de:b2:e2:af:6d:59:5f:1a:f9:a4:ad:d0:f7:5e:72:
bb:5a:f2:1f:9d:b3:25:c3:ec:a9:70:ff:98:42:5f:b7:01:0d:
74:05:c5:b4:b7:76:1d:0c:df:e3:21:43:70:16:cc:d1:1d:a9:
82:14:0d:1a:44:5d:53:ac:85:c4:7c:79:5f:97:d2:d6:ff:c0:
39:dd:08:a9:cd:f1:70:68:f5:af:db:66:11:db:f5:17:ff:a7:
d0:c4:b3:0b:93:6a:94:24:a7:d2:13:ac:81:2f:a6:8e:3e:aa:
d6:89:d3:02:21:67:d2:35:f2:6a:42:27:33:06:ef:87:4b:cd:
5b:c0:35:64:91:b8:d3:0e:c1:a9:bf:bd:ee:d3:85:58:2e:b7:
0b:81:c9:40:6e:b2:c7:61:8f:2a:e4:b0:f3:f5:52:70:99:0e:
fc:ac:e4:88:b1:2f:0a:00:9c:f6:9e:fa:c1:f2:88:22:25:69:
03:32:fe:f7:d7:ec:d7:b4:d7:a7:90:66:2a:64:a4:5a:13:6f:
08:15:c4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 01:08:02 2025 by rpki-client