Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.mft
File: mP1EDLuwS5abkrtrOcC7tBY0zRI.mft (raw, json)
Hash identifier: XuoAeLcEsGpbC7agqOeZelZ16uIH2CEzFQ9bM51t8DU=
Subject key identifier: C1:7E:39:3E:70:76:E4:14:FE:D4:61:19:7B:A6:8E:66:A8:F7:E0:FD
Authority key identifier: 98:FD:44:0C:BB:B0:4B:96:9B:92:BB:6B:39:C0:BB:B4:16:34:CD:12
Certificate issuer: /CN=98fd440cbbb04b969b92bb6b39c0bbb41634cd12
Certificate serial: 01996390D618AB6B957F849441AA5A26C828
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mP1EDLuwS5abkrtrOcC7tBY0zRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.mft
Manifest number: 1697
Signing time: Fri 19 Sep 2025 20:01:00 +0000
Manifest this update: Fri 19 Sep 2025 20:01:00 +0000
Manifest next update: Sat 20 Sep 2025 20:01:00 +0000
Files and hashes: 1: LftCOxJQ1oI6hFFXrfR0Ib7DvgM.roa (hash: cJ8bZtPB0/69tGKrzdUG2h5XVvEuA3yRLVGrsJgKFnE=)
2: fiJWC8ddg3-RMvnLmmNHKEtDpC4.roa (hash: +jcPkN0cWNwP620eirlv12vXP4bDJPvRMmAHlZSYorg=)
3: mP1EDLuwS5abkrtrOcC7tBY0zRI.crl (hash: sZBg15Sssb5zFVfUMZTpNPgBeOG+4m/MuTozjsrx0eM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mP1EDLuwS5abkrtrOcC7tBY0zRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 16:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:63:90:d6:18:ab:6b:95:7f:84:94:41:aa:5a:26:c8:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98fd440cbbb04b969b92bb6b39c0bbb41634cd12
Validity
Not Before: Sep 19 20:01:00 2025 GMT
Not After : Sep 20 20:01:00 2025 GMT
Subject: CN=c17e393e7076e414fed461197ba68e66a8f7e0fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ec:0c:bf:57:e8:9f:d4:dc:1d:b2:99:5c:d2:
1d:df:b8:88:0f:3a:c9:e4:b5:ad:95:bc:8f:74:82:
2a:2e:77:1d:4e:40:cd:d7:6c:2f:e7:e7:c9:61:89:
e1:74:98:ac:09:3b:aa:ac:ac:a6:85:34:ab:65:c1:
39:28:71:0c:cc:bf:0c:ef:1f:61:0e:25:ea:34:83:
9c:d4:63:ba:2a:f2:e0:7e:94:02:24:b9:87:bc:be:
f8:15:75:85:3d:58:1f:30:a6:55:54:c5:29:e8:74:
a7:44:1c:17:6b:9e:68:f8:ae:56:aa:37:32:39:61:
6c:43:f9:7d:00:ce:c5:c7:dc:67:6d:92:2a:f8:0e:
15:b5:57:73:83:35:b0:a0:4f:f7:7f:aa:54:04:5e:
76:57:3a:4c:f2:4e:5f:29:9b:fe:1b:36:11:f0:86:
97:48:93:3a:10:5d:2a:5d:00:d2:57:ff:e9:0d:04:
86:50:30:98:a3:e7:e8:41:6d:cb:c5:f2:a1:7e:ac:
5d:80:c7:37:f6:09:f8:d3:75:35:36:c0:3d:55:6e:
ab:7a:0c:86:43:d2:cb:8b:80:11:03:60:4a:ea:8c:
a2:df:d7:ee:3c:54:0a:44:9b:72:b1:60:c9:71:b6:
97:aa:a2:5a:84:51:28:00:65:f5:e8:c1:06:a2:78:
fe:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:7E:39:3E:70:76:E4:14:FE:D4:61:19:7B:A6:8E:66:A8:F7:E0:FD
X509v3 Authority Key Identifier:
keyid:98:FD:44:0C:BB:B0:4B:96:9B:92:BB:6B:39:C0:BB:B4:16:34:CD:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mP1EDLuwS5abkrtrOcC7tBY0zRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:62:1b:05:08:06:3f:ba:d6:f9:1d:a0:ea:70:c1:10:d9:74:
85:43:63:05:a6:f7:6d:3c:3c:bc:93:02:8d:02:e4:31:1d:1d:
54:b4:9a:27:16:f7:ca:33:a5:ef:a3:5f:ac:69:96:08:35:d5:
f4:d6:d5:4b:09:32:3a:83:11:4e:e5:9a:b6:b8:22:35:b9:fb:
be:09:cd:66:ef:c7:da:9d:21:8f:6e:03:cc:56:5b:ba:54:73:
0b:df:52:76:6c:3a:2c:1e:b1:29:4b:79:f3:b1:05:59:95:f9:
8a:1e:2e:cd:e2:e6:50:7c:9b:cc:5b:c6:75:89:52:8b:f3:a6:
97:41:a0:61:96:f0:03:98:d9:12:2c:85:d7:a7:66:8a:2d:4a:
e1:34:01:10:0f:56:20:ea:4f:7d:fd:b7:09:7b:31:2e:ed:8c:
91:dd:93:4a:3f:8e:b2:d2:0f:92:c4:04:b8:50:39:a5:89:10:
59:74:f2:61:d2:53:1f:2e:e6:fc:17:24:04:63:7e:2a:87:3d:
e1:4f:f0:42:d3:e9:ae:e6:aa:5c:f1:a3:b1:27:b5:f8:60:09:
69:13:65:b2:81:23:d9:18:fc:c9:7b:71:6b:9b:3e:55:82:4b:
15:2d:a1:2c:ff:e0:5e:4b:18:12:37:b4:ad:c8:ad:d1:ba:94:
fb:4f:58:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 22:47:34 2025 by rpki-client