Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0c8008-8a52-4176-b693-c40544281eb0/1/98_k1DTTh2RAV9JB6sb2nT7oHBI.mft
File: 98_k1DTTh2RAV9JB6sb2nT7oHBI.mft (raw, json)
Hash identifier: h6yqe5R5yYo+IDJexhC+b4HCBA84PNn0ZAgpXbjTpGw=
Subject key identifier: 72:C1:A9:80:4E:E8:D2:A7:77:76:54:99:D2:3D:2F:9C:96:2D:48:98
Authority key identifier: F7:CF:E4:D4:34:D3:87:64:40:57:D2:41:EA:C6:F6:9D:3E:E8:1C:12
Certificate issuer: /CN=f7cfe4d434d387644057d241eac6f69d3ee81c12
Certificate serial: 0199FCC64984C5098CBA6DDE6DCFF523EDCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/98_k1DTTh2RAV9JB6sb2nT7oHBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/0c8008-8a52-4176-b693-c40544281eb0/1/98_k1DTTh2RAV9JB6sb2nT7oHBI.mft
Manifest number: 0908
Signing time: Sun 19 Oct 2025 14:01:17 +0000
Manifest this update: Sun 19 Oct 2025 14:01:17 +0000
Manifest next update: Mon 20 Oct 2025 14:01:17 +0000
Files and hashes: 1: 98_k1DTTh2RAV9JB6sb2nT7oHBI.crl (hash: t8EOEmZrWyaHoEsN+9xOhyskrqamY+BlfCi5wAND/zI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/0c8008-8a52-4176-b693-c40544281eb0/1/98_k1DTTh2RAV9JB6sb2nT7oHBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/0c8008-8a52-4176-b693-c40544281eb0/1/98_k1DTTh2RAV9JB6sb2nT7oHBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/98_k1DTTh2RAV9JB6sb2nT7oHBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:49:84:c5:09:8c:ba:6d:de:6d:cf:f5:23:ed:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7cfe4d434d387644057d241eac6f69d3ee81c12
Validity
Not Before: Oct 19 14:01:17 2025 GMT
Not After : Oct 20 14:01:17 2025 GMT
Subject: CN=72c1a9804ee8d2a777765499d23d2f9c962d4898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6e:a4:3d:ee:fd:7b:34:2b:4b:f0:24:c7:57:
02:90:a3:58:d9:d8:16:b5:40:a9:2f:c9:6f:2e:bf:
23:54:aa:1f:62:b9:8d:fe:f6:91:07:1e:04:ec:3e:
d6:34:37:8a:e3:2e:61:9b:2f:6d:c4:21:00:54:e8:
55:85:48:21:e5:2f:d1:04:46:52:26:1d:ed:8d:db:
9e:5f:4d:2b:39:56:be:41:13:fe:ff:99:3f:45:0a:
36:74:8a:9c:db:eb:9e:5f:94:75:24:1c:4c:48:bd:
d6:eb:1e:8d:d0:96:5c:ad:8e:7d:20:09:5b:ed:5e:
b1:eb:1f:5f:3f:4e:4e:b3:49:53:79:6c:5f:47:c5:
f4:97:42:3b:73:ec:e3:e6:6f:78:f7:5e:aa:4d:7f:
da:f2:e7:2d:b6:67:a6:47:4d:47:8a:8c:6e:25:92:
c3:ae:e3:cb:e0:dc:6b:f6:e2:76:1c:8b:88:f1:5f:
3f:74:4f:bc:ec:03:41:49:72:f8:77:45:1d:88:17:
2d:09:34:48:22:5b:1a:53:8b:4c:0e:a7:ca:85:3b:
7a:aa:3c:08:e3:39:bc:c5:cd:26:f5:2f:23:95:02:
8d:81:67:b3:47:18:b2:ad:bb:ef:d1:f5:19:36:f2:
fc:b6:b9:37:64:5b:b1:ad:85:4c:f2:25:f6:ea:ae:
e5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C1:A9:80:4E:E8:D2:A7:77:76:54:99:D2:3D:2F:9C:96:2D:48:98
X509v3 Authority Key Identifier:
keyid:F7:CF:E4:D4:34:D3:87:64:40:57:D2:41:EA:C6:F6:9D:3E:E8:1C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98_k1DTTh2RAV9JB6sb2nT7oHBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0c8008-8a52-4176-b693-c40544281eb0/1/98_k1DTTh2RAV9JB6sb2nT7oHBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0c8008-8a52-4176-b693-c40544281eb0/1/98_k1DTTh2RAV9JB6sb2nT7oHBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:72:fa:a6:73:34:c8:41:d4:e9:d5:0e:a6:9c:5f:9a:07:97:
e1:4c:d3:5e:14:c5:c8:0a:8b:7f:16:82:80:a4:50:26:28:44:
8d:bf:34:56:f6:38:26:bc:eb:47:a2:93:d1:2e:57:1a:2c:4d:
bc:bb:37:d8:aa:18:00:93:2b:a9:6c:d7:e1:d6:a6:0a:d1:ac:
54:aa:31:ea:b0:f0:42:da:87:ef:c9:dd:3b:89:b7:81:8e:ab:
cf:76:fd:9a:8b:45:b4:b2:41:e8:1b:36:bf:58:07:ee:3e:d3:
cf:24:9a:fb:41:44:9b:73:2b:1f:4c:9a:e2:8e:3c:b1:5b:49:
e6:68:36:65:4f:79:67:df:e6:5c:87:1e:c7:0f:dc:4e:74:92:
b3:57:8e:2a:b3:e6:40:ad:84:6f:6e:b5:16:84:c1:0e:16:7e:
97:e0:cc:fa:8f:a9:74:c2:d9:20:65:7d:6b:ab:41:c8:4a:ce:
07:81:0b:0f:49:e8:78:b7:09:d0:9e:8e:be:77:eb:17:4d:1d:
bd:8b:5b:cc:90:2f:95:7f:96:af:12:2e:09:f2:b1:9b:2f:cb:
6b:0b:62:79:92:b1:18:7a:69:1f:3b:38:d0:f7:33:92:a0:e5:
44:c2:75:16:ad:46:a9:a8:fa:e4:ed:8e:23:64:35:54:1c:51:
92:e8:b0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:44 2025 by rpki-client