Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.mft
File: g98MrLn9UOG-ffvz0KyFS-7Xhr4.mft (raw, json)
Hash identifier: IZlGMqGD5Dfr1TYrdpFxyx1uFm0IGzgAbaNkgqWtac4=
Subject key identifier: 5A:FE:64:15:54:76:9A:48:F7:8D:9C:CA:27:7A:38:BF:8E:10:58:9A
Authority key identifier: 83:DF:0C:AC:B9:FD:50:E1:BE:7D:FB:F3:D0:AC:85:4B:EE:D7:86:BE
Certificate issuer: /CN=83df0cacb9fd50e1be7dfbf3d0ac854beed786be
Certificate serial: 019921B0EDDF3CD56AF999CA1B58566F1974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g98MrLn9UOG-ffvz0KyFS-7Xhr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.mft
Manifest number: 0148
Signing time: Sun 07 Sep 2025 01:01:07 +0000
Manifest this update: Sun 07 Sep 2025 01:01:07 +0000
Manifest next update: Mon 08 Sep 2025 01:01:07 +0000
Files and hashes: 1: g98MrLn9UOG-ffvz0KyFS-7Xhr4.crl (hash: Y5p+ZLDaPyVjGsAyT7nHh/1gMeR3yLh+Lfeq0Jw5MYI=)
2: msDEeS6sASlV5Nrug60HOmxHAjw.roa (hash: td9s2j9cTMVJ/N4A25CfBZ5lbq+TNEGFP43f11ycPe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/g98MrLn9UOG-ffvz0KyFS-7Xhr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:ed:df:3c:d5:6a:f9:99:ca:1b:58:56:6f:19:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83df0cacb9fd50e1be7dfbf3d0ac854beed786be
Validity
Not Before: Sep 7 01:01:07 2025 GMT
Not After : Sep 8 01:01:07 2025 GMT
Subject: CN=5afe641554769a48f78d9cca277a38bf8e10589a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:29:32:13:c5:06:f1:2f:29:32:26:59:ca:45:
45:09:79:2c:56:5e:c8:45:64:ea:4f:c1:79:00:50:
60:92:57:50:0d:d0:76:18:15:d6:40:2f:97:18:d1:
c9:ff:f7:44:4b:54:63:be:9f:2c:e5:26:ef:c9:cc:
68:7b:43:99:27:ab:88:43:39:e7:f7:f7:70:6f:ef:
bf:2a:57:da:02:67:54:93:09:65:f8:20:20:51:1f:
8b:b5:3b:b8:b4:64:5f:df:bd:c4:2d:48:ee:be:5d:
82:43:0f:c1:9a:3a:fc:0c:f5:6b:79:fc:20:19:0a:
da:15:e6:6b:a3:60:40:1c:2f:6e:04:54:fa:23:1c:
b2:e3:1b:0c:34:0c:9f:22:96:68:8f:1f:91:7a:ec:
01:67:92:68:50:56:df:16:fa:42:23:1f:14:f2:49:
89:e6:3d:65:72:cc:e1:1f:82:ae:1e:bb:da:5d:c4:
16:7e:07:44:79:33:a4:4f:3b:57:a7:41:18:5d:de:
88:59:78:7c:38:df:cc:1c:80:9a:72:d0:54:05:08:
ba:e1:a3:3a:f0:97:ee:fd:49:bd:f5:9c:79:98:66:
f4:fe:98:36:4c:bc:6d:82:c8:b1:70:68:d8:8d:6c:
48:ad:b0:50:cd:df:b0:ca:99:94:dc:5e:09:eb:1c:
60:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:FE:64:15:54:76:9A:48:F7:8D:9C:CA:27:7A:38:BF:8E:10:58:9A
X509v3 Authority Key Identifier:
keyid:83:DF:0C:AC:B9:FD:50:E1:BE:7D:FB:F3:D0:AC:85:4B:EE:D7:86:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g98MrLn9UOG-ffvz0KyFS-7Xhr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:d4:d7:2b:ed:40:d0:f2:44:91:ea:49:6c:7a:46:79:3c:57:
c1:07:01:fb:b6:de:c2:a3:38:e4:ec:72:26:a0:25:a3:7c:e0:
7d:63:1c:4f:3b:39:23:5f:dd:57:90:b6:6b:37:c8:9e:d8:5b:
b2:50:a2:7f:fe:c2:90:64:a5:80:66:cd:3c:20:b3:2c:ac:11:
b9:66:86:0a:bf:ca:35:d8:8f:8f:4e:5d:b5:99:64:ab:18:a4:
12:e5:16:af:e4:6c:0d:65:08:74:e0:d8:1e:d4:a3:fa:fe:43:
c6:9e:6f:2e:5c:d0:72:c9:f3:cf:e2:72:1f:65:e1:40:60:35:
31:22:a6:74:82:e6:d4:c7:a1:c1:22:e5:96:39:e6:8d:3e:2a:
38:31:0f:d1:f2:e5:df:d5:f6:d5:18:79:16:b5:6f:3b:74:30:
b9:49:3b:75:cd:5e:d7:53:0c:ef:ca:df:98:67:00:68:3a:e5:
51:31:38:69:9b:da:7a:8d:b9:d8:f3:f2:ee:b8:5d:b8:64:f2:
06:74:2d:f7:c4:95:9c:ee:45:1a:1d:f7:fa:02:a4:58:27:cb:
2d:00:1a:52:c9:b5:92:92:8c:4b:c9:78:18:3c:46:39:32:53:
b3:4b:de:93:df:80:54:e0:77:a9:2e:56:1d:87:50:df:91:21:
15:cc:d4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:09 2025 by rpki-client