Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
File: mdNWGe0hC-CsKdFwortc10VWk7w.mft (raw, json)
Hash identifier: he98O1HUFnkxZNjZ7w+WyMaYrobJdLxoxOieRw6h8is=
Subject key identifier: 2B:EC:C4:D5:54:BA:8E:82:EF:4F:ED:1F:F0:4F:36:11:B8:22:71:BD
Authority key identifier: 99:D3:56:19:ED:21:0B:E0:AC:29:D1:70:A2:BB:5C:D7:45:56:93:BC
Certificate issuer: /CN=99d35619ed210be0ac29d170a2bb5cd7455693bc
Certificate serial: 019A1CBF3998AE408138CFE0EEB0CFDC8F40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
Manifest number: 1621
Signing time: Sat 25 Oct 2025 19:01:25 +0000
Manifest this update: Sat 25 Oct 2025 19:01:25 +0000
Manifest next update: Sun 26 Oct 2025 19:01:25 +0000
Files and hashes: 1: eUC78a5iIDA3NnkTRgfvxwNqxjg.roa (hash: gOCTr9qoGQ7aucr1ozDn80KAKdoZpLb4iX/BnNIbZIY=)
2: mdNWGe0hC-CsKdFwortc10VWk7w.crl (hash: ews+As69NSFR8ISkzB9zd5as8XO+tSr/owA//TFb00Y=)
3: qtSiJdqBkG0uo9WVYHWv-Gpf4SI.roa (hash: tDTpVD4J8FxzW7VK20T8qWOQjmWt3jizwnkYWluPqRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:bf:39:98:ae:40:81:38:cf:e0:ee:b0:cf:dc:8f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d35619ed210be0ac29d170a2bb5cd7455693bc
Validity
Not Before: Oct 25 19:01:25 2025 GMT
Not After : Oct 26 19:01:25 2025 GMT
Subject: CN=2becc4d554ba8e82ef4fed1ff04f3611b82271bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5d:6d:c8:3b:4d:16:88:7c:bb:e6:66:9a:e8:
18:03:8b:41:6c:bb:b0:92:5e:1c:e8:11:5e:95:57:
2f:bd:4e:0d:26:8d:6d:4f:5f:b3:80:cd:0d:e3:5d:
0b:ec:da:94:2c:4d:07:75:20:79:36:dc:be:ad:99:
86:cf:de:9b:ab:31:6e:69:9e:4e:61:23:fe:cc:12:
f9:13:70:ac:e7:ec:b1:13:20:4c:c0:7f:07:99:fe:
04:97:dd:44:27:ad:5f:c9:83:19:a0:be:f2:98:c9:
7d:54:12:6a:24:dd:82:4c:ff:b3:59:39:72:82:74:
c0:d3:bd:35:88:46:57:64:4f:d5:4d:0b:0f:69:a7:
9f:d7:a1:2a:17:f3:0c:c2:ca:ec:84:f2:e8:20:b6:
94:07:ae:77:fb:d6:a0:66:d6:38:3e:65:a6:9d:48:
3e:40:60:e0:be:cf:dc:52:ed:26:4b:ea:db:85:1a:
04:39:89:dc:40:3f:4c:36:d7:71:ae:8d:2d:d7:f1:
c2:08:6b:7f:a9:cb:45:65:fa:70:e3:1b:11:57:54:
b2:d5:65:1b:86:38:c1:db:cf:ee:af:44:7d:0f:d8:
71:96:ff:aa:b2:77:30:d3:47:7c:37:60:a9:67:39:
13:93:d6:96:ff:1e:7e:c2:e6:34:0a:9a:41:71:1e:
3a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:EC:C4:D5:54:BA:8E:82:EF:4F:ED:1F:F0:4F:36:11:B8:22:71:BD
X509v3 Authority Key Identifier:
keyid:99:D3:56:19:ED:21:0B:E0:AC:29:D1:70:A2:BB:5C:D7:45:56:93:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:0d:e5:ce:93:76:f0:d4:a9:08:98:66:ac:94:a0:ec:68:04:
a3:38:a8:f4:73:d0:1b:53:75:15:05:6b:c1:22:b4:26:91:c8:
bf:ee:95:ed:4c:a4:d3:d7:3d:59:c9:62:ee:03:75:70:af:77:
fb:af:fa:12:01:c0:23:4e:e3:11:0e:08:ec:a4:f4:4a:52:67:
7b:5a:49:ca:8f:f9:70:54:e1:73:aa:d0:dc:41:59:30:67:ec:
f6:5b:ed:fc:0a:2d:c7:55:a8:d8:34:0d:67:2b:05:6a:70:a2:
d3:54:9a:05:56:71:30:b8:7b:92:8f:15:9d:22:4f:53:03:c9:
d0:49:81:87:e0:68:95:b1:2a:cb:38:36:ec:3b:a6:82:6c:d0:
b8:a3:9f:61:8f:f5:32:ff:d0:40:e0:69:8a:84:e3:77:3f:e1:
fd:9d:15:0d:52:27:8f:7f:30:e7:10:57:85:ca:05:21:73:44:
0b:fb:12:0f:f1:0a:4e:fb:66:b9:16:8a:80:82:99:1b:c8:c0:
07:6e:88:76:62:d5:9d:4e:b8:4b:1b:d3:3e:63:86:72:8f:d4:
1a:2c:0b:ae:e5:af:3b:59:9a:47:1f:0b:13:de:60:23:52:6b:
7b:94:90:a0:b1:1a:2b:99:66:f8:1f:cd:b4:fd:8b:28:b1:3c:
0a:68:71:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 02:35:45 2025 by rpki-client