Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
File: 98ci2uJwhooZg4p81JnVnCZ52JE.mft (raw, json)
Hash identifier: 8V2WJtNp/luFBXWrFLQzZAEmaW9kD1lMz6diBHrqTI0=
Subject key identifier: 4D:68:2E:F0:EF:47:5B:F5:06:D0:E1:93:69:69:90:BC:0D:A2:1D:FC
Authority key identifier: F7:C7:22:DA:E2:70:86:8A:19:83:8A:7C:D4:99:D5:9C:26:79:D8:91
Certificate issuer: /CN=f7c722dae270868a19838a7cd499d59c2679d891
Certificate serial: 0197B70F292DB70BE3CF2E442ED9A90A74DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
Manifest number: 04A3
Signing time: Sat 28 Jun 2025 15:01:53 +0000
Manifest this update: Sat 28 Jun 2025 15:01:53 +0000
Manifest next update: Sun 29 Jun 2025 15:01:53 +0000
Files and hashes: 1: 2GvGxW56EwiXdY8WsCKuvBnzEmE.roa (hash: W3DnYzHP+CF6agGgHp9PqPmuvt/s/L6YaUF7RJiXgPQ=)
2: 98ci2uJwhooZg4p81JnVnCZ52JE.crl (hash: w0piCnWgslH+GIaszTzBCVfvkqNdjxDALZIsoSKIalQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:29:2d:b7:0b:e3:cf:2e:44:2e:d9:a9:0a:74:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7c722dae270868a19838a7cd499d59c2679d891
Validity
Not Before: Jun 28 15:01:53 2025 GMT
Not After : Jun 29 15:01:53 2025 GMT
Subject: CN=4d682ef0ef475bf506d0e193696990bc0da21dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:03:39:ed:08:be:98:d7:c1:d5:35:05:9a:b9:
be:31:02:f3:5a:f2:df:f6:6e:c5:ee:42:f9:70:ae:
48:04:d3:f8:9d:9a:57:03:60:c7:d5:16:91:01:e2:
f4:4a:c2:ee:83:7f:d5:fe:c2:ea:44:9f:28:31:37:
93:bf:f2:36:27:42:ee:9f:e5:86:38:a5:6c:4f:ec:
99:8f:e1:41:c8:e5:13:9a:e9:43:ef:6f:84:3a:e6:
36:27:9d:df:60:8c:3c:3e:a1:7e:87:bf:1b:79:d7:
e4:37:5e:ca:23:9a:3e:47:84:0b:6d:ee:5b:c8:f8:
03:c4:dc:82:b5:67:b2:0f:d8:06:49:39:43:67:56:
40:07:c5:44:54:b1:b2:85:0c:21:a1:de:39:a2:12:
d0:ce:c3:17:1f:2a:80:6f:72:d0:0f:f0:e6:5f:c9:
f6:00:91:28:e5:01:b6:56:4d:71:36:2f:6e:bd:c6:
15:d9:fc:4e:b0:2c:4e:c9:52:2d:62:3e:28:3b:47:
6b:27:1b:20:5e:09:80:f4:71:4f:72:39:d6:10:9f:
25:21:fd:9f:39:ff:1b:9c:5c:5f:d3:45:be:b5:15:
10:69:07:f1:78:ce:17:85:fc:4d:78:b5:33:01:3a:
13:a0:32:51:65:ca:7e:a8:9d:7f:e1:f6:89:80:6b:
c7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:68:2E:F0:EF:47:5B:F5:06:D0:E1:93:69:69:90:BC:0D:A2:1D:FC
X509v3 Authority Key Identifier:
keyid:F7:C7:22:DA:E2:70:86:8A:19:83:8A:7C:D4:99:D5:9C:26:79:D8:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:da:a6:20:d2:e4:25:0f:01:3d:61:b4:4b:93:49:4f:ca:4b:
fb:b4:41:a9:50:fe:d9:49:71:36:97:19:e7:35:50:fa:e4:d0:
a7:b0:2e:89:e4:ce:5a:e8:d7:e6:50:a3:a0:2f:2e:fa:9c:9b:
fe:a4:69:93:dc:65:70:08:18:b9:3a:eb:f1:80:7a:6a:da:05:
12:9c:58:86:fe:82:5f:7e:7b:91:4c:75:01:4d:9f:ed:c1:45:
98:42:90:d3:10:50:8c:8e:eb:d7:84:82:f7:a8:ee:de:a5:59:
c4:56:55:60:86:eb:1b:b3:95:ea:f7:03:15:5d:30:83:f6:b3:
a6:44:f6:7b:75:aa:1b:80:fb:58:04:90:2b:58:9b:3d:48:42:
81:91:f0:9f:98:b2:0a:41:56:52:2d:98:be:1d:b3:b2:82:be:
58:7f:84:e9:dc:f1:c5:92:96:17:21:4e:8c:53:2b:12:4c:36:
71:64:9f:46:11:95:62:77:52:ff:02:1b:6f:17:d8:61:85:f7:
0f:d0:ff:ce:b0:15:33:3c:f7:a2:24:da:ef:0e:f9:76:a8:81:
17:35:71:ff:91:5f:af:b0:53:ac:0f:ba:85:e4:2a:ad:97:2d:
86:b5:89:8e:58:76:4c:e4:88:ae:fd:95:b5:3b:aa:c9:4f:3d:
96:b0:0d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:41:46 2025 by rpki-client