Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
File: mdNWGe0hC-CsKdFwortc10VWk7w.mft (raw, json)
Hash identifier: Oh1kxpzg3WEB7thnxrwW+Hz1lUCfgAavn/ZnYHAiido=
Subject key identifier: 47:02:D2:4E:8E:51:49:89:05:63:10:53:90:0A:15:1E:0C:AE:28:44
Authority key identifier: 99:D3:56:19:ED:21:0B:E0:AC:29:D1:70:A2:BB:5C:D7:45:56:93:BC
Certificate issuer: /CN=99d35619ed210be0ac29d170a2bb5cd7455693bc
Certificate serial: 01992D46A37D27B78DD29F7734A7CCC27E13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
Manifest number: 15A5
Signing time: Tue 09 Sep 2025 07:00:28 +0000
Manifest this update: Tue 09 Sep 2025 07:00:28 +0000
Manifest next update: Wed 10 Sep 2025 07:00:28 +0000
Files and hashes: 1: eUC78a5iIDA3NnkTRgfvxwNqxjg.roa (hash: gOCTr9qoGQ7aucr1ozDn80KAKdoZpLb4iX/BnNIbZIY=)
2: mdNWGe0hC-CsKdFwortc10VWk7w.crl (hash: ays1gPBUBGV5XoystDeJ1YX79Gj8oEKeBxUuUfsop3I=)
3: qtSiJdqBkG0uo9WVYHWv-Gpf4SI.roa (hash: tDTpVD4J8FxzW7VK20T8qWOQjmWt3jizwnkYWluPqRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:46:a3:7d:27:b7:8d:d2:9f:77:34:a7:cc:c2:7e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d35619ed210be0ac29d170a2bb5cd7455693bc
Validity
Not Before: Sep 9 07:00:28 2025 GMT
Not After : Sep 10 07:00:28 2025 GMT
Subject: CN=4702d24e8e51498905631053900a151e0cae2844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:69:9f:95:40:b3:1c:5a:97:e6:0d:05:83:5a:
67:30:9d:86:73:82:79:62:c5:5d:12:59:d2:5c:fa:
81:25:85:a8:50:b5:ca:e1:8c:1b:b1:c6:d4:44:61:
27:32:f2:7f:85:85:30:f1:48:0d:1b:6e:33:03:3a:
33:78:a9:ba:62:f0:9d:bf:d1:cb:cd:b4:b5:98:b9:
3f:a4:b1:15:93:43:e1:03:bf:99:f6:bc:ff:3f:c4:
82:f3:94:fc:80:e1:85:3c:d7:97:d0:8b:27:c3:c8:
1f:14:30:ca:55:5d:e4:04:60:a3:f6:7a:9a:0b:66:
d4:65:90:0f:07:18:a8:ad:76:15:32:95:f7:32:65:
30:9b:3d:ef:72:e7:05:b3:86:e3:d5:70:9d:f7:5c:
9a:f5:4c:53:0f:bc:0a:b0:c2:81:7e:e4:5b:2e:8d:
d1:fe:bf:16:29:90:9c:d8:83:e3:31:02:0e:55:ed:
7d:7a:3e:6c:ba:3c:07:79:17:58:9a:a4:36:b6:85:
70:98:6e:59:98:0e:1e:c6:fc:88:2f:10:5f:89:07:
60:73:ac:26:d6:f4:43:e0:53:60:a6:3b:b6:d4:fc:
e8:ee:30:bc:0d:53:11:80:90:e2:77:e8:ff:7a:ba:
9f:65:b6:8a:f1:ac:e4:63:89:36:60:b8:4b:e6:8f:
20:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:02:D2:4E:8E:51:49:89:05:63:10:53:90:0A:15:1E:0C:AE:28:44
X509v3 Authority Key Identifier:
keyid:99:D3:56:19:ED:21:0B:E0:AC:29:D1:70:A2:BB:5C:D7:45:56:93:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:3e:fc:b0:2d:c2:d6:43:d1:c7:51:51:a2:dc:36:05:b1:5e:
2e:a4:07:58:88:99:54:04:2f:ab:f9:bd:4b:17:13:6f:79:7b:
65:ee:17:9a:fd:a0:01:aa:34:70:a8:f7:5c:97:1c:af:4d:04:
bf:c2:e7:e7:0b:62:ac:a1:a5:f0:27:2a:89:6f:ae:c2:37:43:
1b:c1:e5:0a:98:ff:c0:d2:c5:1c:c2:54:e7:dd:02:97:38:f2:
ce:ee:b9:44:b9:7a:4c:b0:57:49:af:9e:30:ad:7b:05:db:c2:
5d:cb:30:54:d6:14:b3:0b:ec:44:b3:42:22:51:9c:29:e8:f0:
c7:7e:c6:be:bb:f6:5e:8a:2a:b4:40:b6:bd:fa:9a:72:bb:33:
f6:2f:ad:2b:7e:70:c4:85:a6:81:b0:04:7b:ab:c8:84:eb:ac:
72:ab:e0:14:c4:8a:aa:1d:e3:23:a4:78:d3:61:47:7c:20:55:
eb:4f:a1:f4:cc:df:be:2a:fa:2f:bf:45:d1:20:eb:68:d6:d9:
ad:ff:22:ff:12:82:a9:2f:ff:63:93:ff:58:a6:45:cc:e8:ee:
02:ae:4a:f4:26:d3:46:e9:be:e1:74:af:04:4c:05:e1:fe:ef:
c9:ba:2b:9e:41:07:9d:94:06:9a:c5:55:39:f8:1a:32:dc:9d:
cd:ac:61:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:13:54 2025 by rpki-client