Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
File: mc5399kWUTuEkUhJlQ_kP1VpT9o.mft (raw, json)
Hash identifier: S9V2f7jvmeOp2PoAZ3bYSADSZsSdlKtQ5UcXUP65cls=
Subject key identifier: 57:23:9D:6B:41:28:86:BE:BD:2F:50:09:A3:D3:06:96:D0:02:C5:39
Authority key identifier: 99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA
Certificate issuer: /CN=99ce77f7d916513b84914849950fe43f55694fda
Certificate serial: 0199239F02E9BC7CFC98B82AFF4383AC03A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
Manifest number: 136F
Signing time: Sun 07 Sep 2025 10:00:47 +0000
Manifest this update: Sun 07 Sep 2025 10:00:47 +0000
Manifest next update: Mon 08 Sep 2025 10:00:47 +0000
Files and hashes: 1: 04wvXQkxp_kIl5uRKr8ghukmhJI.roa (hash: GTtfMqk+jPWwguQx9YNOstJCSt+yXJTuSCt2I8sH22g=)
2: IxqqTicMk9q6G8gR9tJlENOjFRc.roa (hash: h/X3uGRGZNAQKipVXG0k+pt4jygDWjzWErh2sc4FvuM=)
3: MCU3b2xVwihTn4iMijHbh_JRyVI.roa (hash: f9gCgn5IGlkOz+OwQwChagJxpgUSziKJVT9IFUTeJPA=)
4: kPBy-28puZ8CFn-NDbUpDdz83-A.roa (hash: nQSxZr6dgfBylfZhJymFAU87J/QWTR7NQw9BEBikIEc=)
5: mc5399kWUTuEkUhJlQ_kP1VpT9o.crl (hash: oaRLi0hGVSNWlaQJRSNZOhhCNDtzlCU6X/pYXiafbwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:02:e9:bc:7c:fc:98:b8:2a:ff:43:83:ac:03:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce77f7d916513b84914849950fe43f55694fda
Validity
Not Before: Sep 7 10:00:47 2025 GMT
Not After : Sep 8 10:00:47 2025 GMT
Subject: CN=57239d6b412886bebd2f5009a3d30696d002c539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:af:43:0f:46:7e:75:7c:ba:b6:ac:ea:09:5a:
b6:3e:ac:0e:f6:5a:96:4f:f1:84:3f:fd:32:57:3b:
3c:e2:54:48:5f:6f:28:ce:dd:b1:44:30:0b:6a:12:
39:66:9e:40:53:10:2e:3c:7a:7b:36:fd:8f:35:b7:
4a:55:88:d9:a3:e4:1b:7d:62:f8:2b:1e:75:f7:b8:
a9:31:5c:1a:17:35:30:ac:72:32:9d:76:62:4b:b2:
e8:dd:fc:4f:cb:ef:ba:21:0e:45:8b:4f:c0:99:7c:
ea:1c:65:77:60:5f:54:0f:e4:d1:a8:89:6b:3f:d9:
dc:79:e7:db:ac:e3:94:c3:f1:fd:9f:f1:39:7c:5e:
b7:a1:aa:4d:6a:4f:a3:6c:e6:df:34:c9:f1:80:b0:
af:cb:8b:b6:ae:da:7e:b4:1e:a1:88:11:98:c4:b1:
aa:e6:84:96:42:b7:45:ae:b4:07:61:1e:07:35:1c:
aa:cf:41:46:69:9b:44:5f:13:b2:0d:9a:de:ee:c5:
ed:a8:4d:d8:be:69:d2:6c:e3:fd:a5:52:5b:fa:f4:
05:4e:61:57:3b:b0:bb:fa:a1:b6:74:b1:ab:68:38:
d0:57:66:84:8a:f7:19:8a:5c:ce:c0:74:a0:d1:b9:
b9:84:e4:33:14:2d:c6:6d:dd:4f:7b:4d:22:3e:be:
87:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:23:9D:6B:41:28:86:BE:BD:2F:50:09:A3:D3:06:96:D0:02:C5:39
X509v3 Authority Key Identifier:
keyid:99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:03:26:d6:51:e0:73:4c:1a:c7:06:e8:45:19:86:41:c5:ec:
fa:45:5d:af:c1:17:6b:e8:75:eb:a9:c6:1c:91:7f:9b:26:c7:
84:76:ca:54:3f:f9:45:8c:b4:b8:fd:34:32:9f:83:74:80:dd:
07:de:53:cc:cf:2d:c2:d8:41:7d:8f:a1:54:9f:b6:a8:1e:81:
04:a6:72:44:74:26:88:9e:25:80:8a:09:65:ba:61:c4:d3:fb:
a3:6d:19:ea:6a:9e:72:11:fb:20:1f:a9:68:00:1c:0d:f2:57:
5f:5e:16:ac:85:59:8e:9c:b3:e6:4d:53:7b:e1:20:23:25:b8:
8a:4c:3d:d6:6d:30:9d:e9:5d:6e:eb:b4:17:b1:35:f7:16:2b:
87:54:36:d5:28:bc:4c:6f:45:a0:25:f2:09:50:4b:f1:7c:af:
30:9c:41:d8:2e:b8:72:3a:7a:a6:14:64:fe:c8:a1:88:59:9d:
09:65:ed:e2:b2:43:a0:78:b8:8f:17:1a:27:8f:f7:a5:a9:4a:
05:72:38:a7:2b:f4:94:e3:64:21:f4:52:88:22:3d:52:5c:47:
9f:72:94:1a:db:59:d3:8d:eb:e3:e1:81:6a:7d:63:43:14:38:
df:d4:83:fd:83:9c:99:58:74:09:cd:a4:7b:07:db:88:1e:e9:
94:dd:68:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:47:26 2025 by rpki-client