Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.mft
File: 98JWIDjwgdGNhSaUBxMcmEAD5XU.mft (raw, json)
Hash identifier: sRVqLBELghHe2glS1xqht0xjS99XQLHdbBE5sQdormI=
Subject key identifier: 93:D5:AD:F8:2D:CE:7C:1B:CB:60:AE:B8:0A:13:3F:F8:91:74:E2:AD
Authority key identifier: F7:C2:56:20:38:F0:81:D1:8D:85:26:94:07:13:1C:98:40:03:E5:75
Certificate issuer: /CN=f7c2562038f081d18d85269407131c984003e575
Certificate serial: 0199FB0F4462DDD8B40F950F5133F415183C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/98JWIDjwgdGNhSaUBxMcmEAD5XU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.mft
Manifest number: A2
Signing time: Sun 19 Oct 2025 06:01:45 +0000
Manifest this update: Sun 19 Oct 2025 06:01:45 +0000
Manifest next update: Mon 20 Oct 2025 06:01:45 +0000
Files and hashes: 1: 98JWIDjwgdGNhSaUBxMcmEAD5XU.crl (hash: ZKcotW85bHOAr6Vld87DG1n6KsWRTuNojyeIbWyVTQ0=)
2: Q22mPslur8WPngA2rLljsndPcGU.roa (hash: o/1rl6NTC00BQMt8kFlnIsok6oHP3+Vsj+2hKoZrxAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.mft
rsync://rpki.ripe.net/repository/DEFAULT/98JWIDjwgdGNhSaUBxMcmEAD5XU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:44:62:dd:d8:b4:0f:95:0f:51:33:f4:15:18:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7c2562038f081d18d85269407131c984003e575
Validity
Not Before: Oct 19 06:01:45 2025 GMT
Not After : Oct 20 06:01:45 2025 GMT
Subject: CN=93d5adf82dce7c1bcb60aeb80a133ff89174e2ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ef:f3:d8:27:9b:58:81:23:62:73:04:ca:7f:
68:e1:71:89:5e:b6:75:d0:85:75:8b:90:80:87:aa:
47:51:06:09:47:57:4e:c8:06:03:4c:d8:79:9d:0e:
d7:b0:d3:77:e6:d5:21:5b:75:07:99:ab:2e:f6:a8:
af:04:b5:9f:f6:cd:46:9a:d8:a4:2b:76:41:71:6c:
25:e3:5c:65:46:8a:85:0f:de:04:eb:11:c8:c2:29:
6c:44:b1:77:52:7a:b3:8e:93:5e:a5:95:b9:7b:8c:
06:d6:f0:40:2f:82:17:48:54:cb:af:83:f0:3a:f1:
a5:54:fc:13:f2:da:86:b8:52:d9:c9:3c:5d:f8:9d:
e9:ae:c6:25:73:50:3d:20:ac:52:50:c8:65:0e:73:
2e:19:d3:73:be:61:44:15:75:6d:b4:d5:e5:56:64:
64:93:de:fc:4b:3f:dd:d0:a1:b2:2c:e3:f7:88:af:
49:11:19:24:41:d9:38:14:4d:bc:3e:0b:7e:cd:50:
3f:0d:e9:68:e4:07:47:f0:2b:9f:3a:17:66:0e:10:
d8:fb:99:fb:87:1c:0f:7c:e8:f9:38:55:5c:34:d2:
b0:5a:4e:18:c6:aa:29:03:92:de:1d:6e:03:2e:fc:
52:5e:2d:bf:1f:be:30:98:2d:4e:46:b9:30:1b:d4:
83:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D5:AD:F8:2D:CE:7C:1B:CB:60:AE:B8:0A:13:3F:F8:91:74:E2:AD
X509v3 Authority Key Identifier:
keyid:F7:C2:56:20:38:F0:81:D1:8D:85:26:94:07:13:1C:98:40:03:E5:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98JWIDjwgdGNhSaUBxMcmEAD5XU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:de:c7:8e:07:0d:1e:15:bb:18:fe:a9:86:ce:79:e3:79:c6:
74:53:dd:a3:74:31:63:c7:cb:7a:7c:52:e0:14:eb:ce:35:ae:
c0:4a:cc:be:c9:f9:57:df:90:d2:6f:0f:e2:39:34:f7:75:c9:
f1:30:d4:16:20:56:83:d7:c8:1d:9b:71:a7:85:36:fb:aa:07:
49:61:d1:5a:93:47:db:89:a4:29:4a:e3:25:eb:59:58:0b:8f:
90:ae:1e:d0:1a:64:79:98:af:f2:cc:88:4e:0c:00:a3:76:77:
4f:22:94:97:d5:89:1a:cb:6b:a9:8c:1d:b3:12:59:3d:eb:e7:
3f:2d:b2:69:4a:76:49:a6:f2:45:b1:1e:05:3a:7e:13:75:b8:
fa:93:ae:25:0b:78:78:7f:db:90:c6:d5:b9:a4:6a:fa:0f:73:
a3:68:23:6b:63:5b:79:28:e1:75:0a:f0:eb:5a:cd:9f:bd:3c:
6e:95:c1:4a:6b:24:80:a3:94:fd:3f:e2:90:7d:0f:93:9d:67:
4f:d3:54:20:9e:91:31:84:26:df:cc:a1:bb:3e:86:21:99:0c:
97:9a:9d:11:4b:c3:e6:e9:b0:e1:dc:fd:a6:44:86:5f:11:73:
61:5a:a9:1d:b5:39:90:17:d6:11:ad:37:21:37:3c:d7:59:ed:
b3:a1:43:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7D0Ri3di0D5UPUTP0FRg8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3YzI1NjIwMzhmMDgxZDE4ZDg1MjY5NDA3MTMxYzk4NDAw
M2U1NzUwHhcNMjUxMDE5MDYwMTQ1WhcNMjUxMDIwMDYwMTQ1WjAzMTEwLwYDVQQD
Eyg5M2Q1YWRmODJkY2U3YzFiY2I2MGFlYjgwYTEzM2ZmODkxNzRlMmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+/z2CebWIEjYnMEyn9o4XGJXrZ1
0IV1i5CAh6pHUQYJR1dOyAYDTNh5nQ7XsNN35tUhW3UHmasu9qivBLWf9s1Gmtik
K3ZBcWwl41xlRoqFD94E6xHIwilsRLF3UnqzjpNepZW5e4wG1vBAL4IXSFTLr4Pw
OvGlVPwT8tqGuFLZyTxd+J3prsYlc1A9IKxSUMhlDnMuGdNzvmFEFXVttNXlVmRk
k978Sz/d0KGyLOP3iK9JERkkQdk4FE28Pgt+zVA/Delo5AdH8CufOhdmDhDY+5n7
hxwPfOj5OFVcNNKwWk4YxqopA5LeHW4DLvxSXi2/H74wmC1ORrkwG9SDaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJPVrfgtznwby2CuuAoTP/iRdOKtMB8GA1UdIwQY
MBaAFPfCViA48IHRjYUmlAcTHJhAA+V1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOThKV0lEandnZEdOaFNhVUJ4TWNtRUFENVhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi81MjI5YjMtYjg3My00ODA4LWI5ZDIt
YWQwOTRiMzE0ZTBmLzEvOThKV0lEandnZEdOaFNhVUJ4TWNtRUFENVhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi81MjI5YjMtYjg3My00ODA4LWI5ZDItYWQwOTRiMzE0ZTBm
LzEvOThKV0lEandnZEdOaFNhVUJ4TWNtRUFENVhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASd7HjgcN
HhW7GP6phs5543nGdFPdo3QxY8fLenxS4BTrzjWuwErMvsn5V9+Q0m8P4jk093XJ
8TDUFiBWg9fIHZtxp4U2+6oHSWHRWpNH24mkKUrjJetZWAuPkK4e0BpkeZiv8syI
TgwAo3Z3TyKUl9WJGstrqYwdsxJZPevnPy2yaUp2SabyRbEeBTp+E3W4+pOuJQt4
eH/bkMbVuaRq+g9zo2gja2NbeSjhdQrw61rNn708bpXBSmskgKOU/T/ikH0Pk51n
T9NUIJ6RMYQm38yhuz6GIZkMl5qdEUvD5umw4dz9pkSGXxFzYVqpHbU5kBfWEa03
ITc811nts6FDhQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:26 2025 by rpki-client