Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
File: 98ci2uJwhooZg4p81JnVnCZ52JE.mft (raw, json)
Hash identifier: 0nPFzjyuSQGM4OczWk/IeA7pDNopwioVvbFhKO/U5Sk=
Subject key identifier: A2:33:53:52:3C:69:71:C9:FC:B5:09:A5:1C:31:B6:9C:3E:1D:B6:3E
Authority key identifier: F7:C7:22:DA:E2:70:86:8A:19:83:8A:7C:D4:99:D5:9C:26:79:D8:91
Certificate issuer: /CN=f7c722dae270868a19838a7cd499d59c2679d891
Certificate serial: 0199FC58EA1959DF3B477E12689447BDDB6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
Manifest number: 05D0
Signing time: Sun 19 Oct 2025 12:01:49 +0000
Manifest this update: Sun 19 Oct 2025 12:01:49 +0000
Manifest next update: Mon 20 Oct 2025 12:01:49 +0000
Files and hashes: 1: 2GvGxW56EwiXdY8WsCKuvBnzEmE.roa (hash: W3DnYzHP+CF6agGgHp9PqPmuvt/s/L6YaUF7RJiXgPQ=)
2: 98ci2uJwhooZg4p81JnVnCZ52JE.crl (hash: OuDD3UY8o8aI6NC6VD8DpaqeRpFSTzFpFpHdilWMOvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:ea:19:59:df:3b:47:7e:12:68:94:47:bd:db:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7c722dae270868a19838a7cd499d59c2679d891
Validity
Not Before: Oct 19 12:01:49 2025 GMT
Not After : Oct 20 12:01:49 2025 GMT
Subject: CN=a23353523c6971c9fcb509a51c31b69c3e1db63e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:15:84:f3:29:c9:73:b6:07:ca:dc:96:e9:9b:
bb:58:05:ff:41:7e:f4:ff:be:fc:41:5b:bb:64:e9:
05:79:ac:c7:2d:66:24:7a:40:b9:45:61:e0:7c:e6:
77:15:ff:3b:64:89:ee:0a:6a:2c:09:1d:25:06:e7:
27:2f:f0:a4:8c:fc:55:36:64:d6:91:9a:89:e1:cd:
2e:ea:54:f8:c0:a3:ee:08:18:8e:2d:93:11:57:7c:
68:3f:35:7b:ce:8b:96:17:75:8a:88:62:92:1b:22:
3f:fc:82:3c:16:8e:79:9b:63:19:64:98:90:bc:57:
37:c4:b5:cf:c6:fb:da:9a:92:98:d5:cf:0b:73:77:
f5:12:7e:31:95:02:6b:91:04:08:aa:7b:4f:19:17:
a3:8b:72:0f:5b:8f:8c:46:9f:12:33:32:6d:88:cb:
d7:8f:2f:64:5a:af:de:b5:61:8b:3e:1e:ee:73:e0:
48:e6:65:f4:2f:e2:f3:f2:ba:17:00:df:6a:b3:7d:
22:44:9b:8b:25:52:ad:57:eb:aa:0e:6d:a7:b7:1c:
42:f0:f6:f4:e6:6a:d5:8e:cd:d5:d7:93:13:f6:42:
ab:a1:13:3d:6b:8f:e6:62:69:32:8e:d0:63:6a:58:
f8:f8:9f:b0:28:90:41:32:07:5c:34:49:ec:a3:af:
34:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:33:53:52:3C:69:71:C9:FC:B5:09:A5:1C:31:B6:9C:3E:1D:B6:3E
X509v3 Authority Key Identifier:
keyid:F7:C7:22:DA:E2:70:86:8A:19:83:8A:7C:D4:99:D5:9C:26:79:D8:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:e8:22:92:8b:2e:26:bd:e2:9b:b3:a9:52:b0:2a:ee:fe:6a:
36:dc:58:94:92:26:b7:15:d8:3a:37:0c:8c:61:fa:c4:c3:26:
6f:e0:ab:cf:7d:3b:20:19:ad:87:fe:44:a0:34:30:95:b6:08:
75:a0:1b:0a:31:56:4f:89:ed:3f:17:79:70:0d:97:33:45:8b:
b2:f5:2e:99:ce:99:ed:31:df:ff:65:e4:8c:38:55:d4:ca:54:
5d:26:3e:1f:77:58:e1:aa:9a:c6:80:5b:55:84:ce:c7:c2:1d:
84:a1:86:40:d6:21:d4:58:dd:92:08:c6:be:ae:e5:71:98:76:
1e:75:7a:45:12:bf:df:2b:ea:11:17:cb:a9:a7:51:54:50:bd:
96:ff:1f:4f:4a:66:46:13:13:13:93:4b:5b:2f:f1:cb:97:1e:
f4:99:6e:68:ea:dd:0b:b6:9c:74:67:02:26:cc:57:fc:e2:38:
49:e7:1a:be:b1:ac:af:b1:ac:e8:63:5c:24:19:b0:8e:18:1b:
c9:57:c7:67:ec:1e:28:98:1a:02:f6:31:38:06:4b:b3:f4:ad:
b0:88:a1:6c:18:bf:fc:06:42:64:85:e2:bd:69:a8:3d:25:28:
c9:ab:07:e0:75:f9:9d:58:dd:38:22:f6:a3:26:6c:c0:df:62:
8f:f0:ab:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:05:26 2025 by rpki-client