Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
File: X99RbJXdbrLR2d1ODgMobBkR9uE.mft (raw, json)
Hash identifier: pmibi6BIzg/5E47CjatgkSsnt9Jk6GwR8MopLXzo11k=
Subject key identifier: BE:77:FB:BD:3F:4E:D9:EB:19:84:AE:67:26:4A:D6:72:06:9F:B1:4C
Authority key identifier: 5F:DF:51:6C:95:DD:6E:B2:D1:D9:DD:4E:0E:03:28:6C:19:11:F6:E1
Certificate issuer: /CN=5fdf516c95dd6eb2d1d9dd4e0e03286c1911f6e1
Certificate serial: 019922FA8BBECE452F532608E7AFF1742D65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 07:01:09 +0000
Manifest this update: Sun 07 Sep 2025 07:01:09 +0000
Manifest next update: Mon 08 Sep 2025 07:01:09 +0000
Files and hashes: 1: X99RbJXdbrLR2d1ODgMobBkR9uE.crl (hash: SSR1TCIh6I7xIeKSf5Jo1vUIhoFtUY+8H9+B13wOwYs=)
2: gDWNTfdushTYGvH0YYGiHbmkEao.roa (hash: bmF6UCiNLmG9+dRjmLyfBtuEdv4BCZD7226wgKqq0bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:8b:be:ce:45:2f:53:26:08:e7:af:f1:74:2d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fdf516c95dd6eb2d1d9dd4e0e03286c1911f6e1
Validity
Not Before: Sep 7 07:01:09 2025 GMT
Not After : Sep 8 07:01:09 2025 GMT
Subject: CN=be77fbbd3f4ed9eb1984ae67264ad672069fb14c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:fe:71:e4:09:79:dc:e5:1e:f5:67:5d:17:a5:
7b:9b:ea:ed:de:d3:55:c3:d6:c7:33:a4:11:f9:4f:
d0:98:19:15:e1:70:c7:27:77:03:21:21:cf:55:53:
74:37:f3:d4:8c:78:f4:a8:eb:d8:8d:e9:8f:51:74:
a0:46:a4:3a:b3:34:41:cd:1f:96:63:02:57:4d:f9:
5b:b7:af:26:58:bb:3c:3b:3b:6e:55:5b:39:e8:78:
ea:03:98:47:97:e1:87:82:f9:fc:f4:bc:91:25:72:
a6:ce:09:c2:f3:97:7d:f1:40:5e:b5:d6:dc:71:95:
f3:d2:02:03:89:8c:9b:57:8d:a8:6b:05:36:3b:84:
b9:47:51:3d:05:8d:57:05:ef:38:a0:ca:7a:e2:fd:
92:74:cc:70:f4:23:3c:75:57:1f:e1:49:da:c6:9e:
fb:57:d2:8e:0a:cd:0b:80:92:9f:ed:60:f3:a8:a9:
22:fa:58:4e:45:5c:72:88:6b:da:c9:91:c3:cc:d1:
8a:a6:3a:31:de:f1:17:60:88:84:53:1b:79:7d:9c:
29:e8:ec:e3:48:73:e8:a0:b1:ab:eb:4e:29:bf:3a:
f4:96:b1:e0:09:eb:1d:06:4c:ba:cb:ec:5e:eb:98:
f8:90:c2:45:76:33:9f:3f:c3:89:85:11:27:73:57:
33:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:77:FB:BD:3F:4E:D9:EB:19:84:AE:67:26:4A:D6:72:06:9F:B1:4C
X509v3 Authority Key Identifier:
keyid:5F:DF:51:6C:95:DD:6E:B2:D1:D9:DD:4E:0E:03:28:6C:19:11:F6:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:21:a4:32:1a:1e:a5:48:24:e5:63:ef:2c:91:db:76:1f:c1:
c6:e5:49:36:fd:76:e4:7e:df:66:4e:75:92:5e:4f:be:78:c4:
c5:89:74:c4:b0:87:81:ef:4a:e9:68:a3:f7:87:62:2b:28:21:
fa:d6:3e:aa:8e:07:24:46:1e:45:42:61:e5:91:75:bb:ed:6b:
be:10:fe:81:dc:a6:63:24:16:75:4e:c7:c7:96:f4:3e:5f:85:
ec:94:b0:6a:da:d6:27:2b:ea:00:a4:2a:18:50:a8:c2:c2:6c:
c9:ad:06:ab:e7:ba:69:fb:74:41:89:f0:bb:73:a1:eb:cb:93:
c2:d1:50:f3:ba:f6:25:93:8b:cd:7b:a8:42:58:11:04:2b:b5:
50:eb:94:cb:a9:13:d0:10:6b:80:41:15:22:74:ed:6d:03:b0:
3b:5e:2f:63:53:b8:b6:77:e5:85:81:34:14:c1:ca:be:1d:38:
54:a4:ef:92:90:25:25:e0:f1:a2:8f:5a:f6:1d:5b:cc:6f:dd:
de:67:de:4d:47:8c:4a:98:ff:50:03:73:0b:65:34:38:4f:5e:
46:cc:0a:f7:90:8b:ee:bb:af:8b:6d:91:2a:d9:56:de:4c:c9:
78:0c:c5:ee:1c:61:7e:cd:7e:3e:02:2e:a6:52:e6:ba:2a:14:
1d:89:d8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:00:38 2025 by rpki-client