Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.mft
File: 98Dr2f99xugfjDVIx8LozceWfW8.mft (raw, json)
Hash identifier: eFXFA9ctCDEZMphtwFhEjR+jgf7RN2P/10iCxFdQ7Uc=
Subject key identifier: 86:84:43:29:C6:0D:33:15:DD:D1:25:D7:C6:F8:D9:18:76:0B:30:1D
Authority key identifier: F7:C0:EB:D9:FF:7D:C6:E8:1F:8C:35:48:C7:C2:E8:CD:C7:96:7D:6F
Certificate issuer: /CN=f7c0ebd9ff7dc6e81f8c3548c7c2e8cdc7967d6f
Certificate serial: 0196CD98B73900A482213317F385EDB06A9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/98Dr2f99xugfjDVIx8LozceWfW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.mft
Manifest number: 0D12
Signing time: Wed 14 May 2025 07:00:59 +0000
Manifest this update: Wed 14 May 2025 07:00:59 +0000
Manifest next update: Thu 15 May 2025 07:00:59 +0000
Files and hashes: 1: 98Dr2f99xugfjDVIx8LozceWfW8.crl (hash: kuWRPtp5KLcRuQ4vl1OypA2kwHCYc2vuy3jkeUtKpGg=)
2: xGM69jz3lBB1TpIDVJ5nLe6CA9c.roa (hash: SYU2Je8e6GjpcEI+Nr3BgTNyIlBoXqCEqRNdDn2ooEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/98Dr2f99xugfjDVIx8LozceWfW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:98:b7:39:00:a4:82:21:33:17:f3:85:ed:b0:6a:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7c0ebd9ff7dc6e81f8c3548c7c2e8cdc7967d6f
Validity
Not Before: May 14 07:00:59 2025 GMT
Not After : May 15 07:00:59 2025 GMT
Subject: CN=86844329c60d3315ddd125d7c6f8d918760b301d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:85:9a:fb:d3:d1:1a:13:09:f5:b6:32:cb:0b:
33:61:a4:23:e7:1e:02:fc:09:6a:87:a6:d0:cf:cd:
21:32:c5:c8:bb:c8:f1:f9:6a:96:8e:a8:37:62:3b:
20:27:59:89:84:ae:72:91:6f:14:1f:f9:3b:54:fd:
3d:37:a7:c4:25:7e:32:e5:05:90:42:13:ef:de:bc:
05:da:96:95:c3:22:07:29:69:9a:58:48:47:3c:25:
a8:06:6f:3b:35:2e:3f:1d:8c:72:12:15:62:f5:eb:
c4:3e:bc:dc:16:aa:25:3b:73:4c:8f:6f:86:7e:bc:
3a:65:3d:ee:2f:3e:dd:4a:d3:8b:43:14:33:ae:4c:
e9:d9:65:39:ed:45:8d:aa:fc:5a:25:0b:be:88:3c:
e3:1f:b0:63:85:56:ca:8f:9c:48:9a:99:80:54:8e:
09:18:53:5e:54:ce:30:83:e3:18:ec:d8:94:70:5e:
de:02:67:39:ea:95:d1:69:16:9d:df:b5:c7:09:15:
3b:cf:8e:45:33:7c:ce:a6:47:91:55:4d:2c:22:fd:
4b:a4:ca:87:6b:f9:d6:d7:72:d0:d2:f7:47:d0:87:
9c:f4:a3:f7:ed:d9:ce:3b:79:65:34:4a:34:e6:9a:
e1:7a:f5:98:4e:c9:ee:64:23:46:a1:37:be:d9:36:
11:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:84:43:29:C6:0D:33:15:DD:D1:25:D7:C6:F8:D9:18:76:0B:30:1D
X509v3 Authority Key Identifier:
keyid:F7:C0:EB:D9:FF:7D:C6:E8:1F:8C:35:48:C7:C2:E8:CD:C7:96:7D:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98Dr2f99xugfjDVIx8LozceWfW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:c6:57:37:d4:a4:69:a0:12:df:19:02:43:0f:d9:cf:56:7f:
89:c9:7e:e2:e4:01:a1:3b:9d:7c:70:f8:2f:4e:60:a6:2b:89:
c7:71:dd:8e:ab:dc:bf:a3:cd:0a:8d:60:17:9c:cb:ad:e8:56:
46:c7:f7:c3:fe:ee:50:62:b8:38:7b:be:e2:02:04:6c:0b:89:
98:9d:b2:3e:c9:14:fe:22:b5:31:98:15:ea:ec:11:7d:e3:49:
e2:f2:9f:87:e4:77:42:0b:7d:38:fd:3e:c9:6d:bc:50:63:da:
4b:38:04:ae:b2:c7:f3:55:6c:9b:5e:7d:f8:22:83:a8:2f:4f:
85:46:63:95:8c:66:dc:09:19:d7:a6:5f:e1:3e:b2:a8:c6:a3:
23:8c:7b:a9:46:14:61:6b:93:1a:1f:6f:83:3a:fd:5e:ba:fc:
1b:54:af:58:5c:65:98:b3:c1:34:f9:88:52:81:38:17:9f:81:
96:4c:ac:c3:6b:a0:4d:0f:69:5d:ef:47:11:42:07:de:d2:89:
40:4f:1f:ef:84:06:d9:01:d2:6e:d5:61:70:7b:97:5f:6a:74:
96:96:8e:4e:c1:a2:fb:59:0a:6f:3e:64:a4:93:cd:e8:cd:26:
b0:71:b1:6f:39:3c:1b:9f:d0:4c:bd:01:a4:12:51:1f:f3:70:
0a:e3:6d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 09:16:22 2025 by rpki-client