Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
File: s-98dqs-aXHY-HMC3fksxgmISeo.mft (raw, json)
Hash identifier: MeeGKAEej52NCvJtEqyCnYPGK8E+itDXaInHvSRmn8Y=
Subject key identifier: 4F:03:4F:68:48:E0:9E:94:7B:74:6F:84:2F:AC:D0:98:C4:C2:F0:22
Authority key identifier: B3:EF:7C:76:AB:3E:69:71:D8:F8:73:02:DD:F9:2C:C6:09:88:49:EA
Certificate issuer: /CN=b3ef7c76ab3e6971d8f87302ddf92cc6098849ea
Certificate serial: 0198D5839218174F85386786872D772FDA42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 06:00:26 +0000
Manifest this update: Sat 23 Aug 2025 06:00:26 +0000
Manifest next update: Sun 24 Aug 2025 06:00:26 +0000
Files and hashes: 1: s-98dqs-aXHY-HMC3fksxgmISeo.crl (hash: /O8tSns66YUjyhf6hM3Xu5hFo3g2Z5D61++UcSlvkGI=)
2: uvesjoVgl9NM-m1BIFM5Yl9dGPo.roa (hash: BDyqIMMKzj8ksjoDvptTiXpxyPNIyT6fdfz8Vi/kBoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:92:18:17:4f:85:38:67:86:87:2d:77:2f:da:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3ef7c76ab3e6971d8f87302ddf92cc6098849ea
Validity
Not Before: Aug 23 06:00:26 2025 GMT
Not After : Aug 24 06:00:26 2025 GMT
Subject: CN=4f034f6848e09e947b746f842facd098c4c2f022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bb:84:95:6a:36:a8:42:8e:fc:01:47:0a:d3:
5f:c9:61:43:06:e9:8d:4c:db:b3:b5:6f:8b:d3:04:
4f:31:12:47:d9:bd:15:bf:01:ac:b2:65:0b:fb:01:
e8:38:e8:87:62:a2:93:33:da:55:2a:2e:2d:e8:bd:
15:86:c7:f9:51:27:f3:5b:6e:36:b8:71:70:dd:2d:
37:6d:13:17:d1:ff:e5:e7:55:25:af:00:a5:68:e5:
f3:e4:d8:bc:23:a0:a7:88:63:b6:24:ef:f3:d7:64:
b5:ec:89:42:8d:f5:02:68:78:04:a0:a8:9f:20:f0:
91:67:6e:22:c8:fa:86:98:25:91:3f:35:15:87:c0:
07:2f:c1:b7:2e:12:0a:66:bb:fd:49:4b:d7:da:3c:
cb:d1:45:89:aa:16:2b:cd:ca:e5:ee:0a:1d:30:40:
5c:59:83:5d:45:06:dc:e6:33:ca:d4:cd:35:35:ba:
d3:e8:51:99:dc:13:90:84:aa:1d:02:fd:94:63:98:
e0:46:28:6c:07:ef:91:ad:fd:0d:10:5c:bb:5d:08:
33:c0:3d:b5:6a:64:2a:59:d3:e7:97:7d:4c:e5:8a:
6a:2b:fe:91:6a:37:1d:f1:5e:71:93:fc:b9:8a:7a:
da:2c:b0:83:2b:88:f2:f3:c3:36:4f:63:7c:62:ed:
f8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:03:4F:68:48:E0:9E:94:7B:74:6F:84:2F:AC:D0:98:C4:C2:F0:22
X509v3 Authority Key Identifier:
keyid:B3:EF:7C:76:AB:3E:69:71:D8:F8:73:02:DD:F9:2C:C6:09:88:49:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:2c:b2:8f:4e:63:cd:97:fb:de:03:54:4b:bf:d1:bf:fb:46:
3a:6d:4d:e0:97:c6:c3:2f:ab:e4:0f:b0:b6:bd:d1:05:67:ad:
64:e4:29:27:7f:1f:aa:cc:06:2d:81:94:56:81:d9:78:c9:c1:
f6:84:e2:22:e0:08:09:8f:c3:6e:a0:4e:73:b5:7b:0e:df:db:
87:3d:14:85:27:cb:ca:88:0b:65:a4:6d:0d:bc:43:c9:b8:a2:
09:c6:7a:b0:ff:d8:a2:9e:5b:b4:fd:09:00:f7:67:a4:d4:cb:
44:28:b0:66:d1:e1:81:17:c0:cb:d6:38:05:e3:30:b7:4c:59:
96:19:e9:5f:ab:fe:3b:72:dd:60:9b:e8:0f:07:50:f6:9e:04:
c1:5f:4b:3d:18:f2:4f:ac:66:27:7f:90:83:b0:1e:69:3c:60:
3a:7d:9b:0a:7d:dc:1f:6c:ec:47:6e:ca:56:ba:ce:be:38:fc:
a8:8f:2b:76:97:4a:b7:61:3c:91:53:b1:14:dc:77:1a:db:81:
a4:bc:fc:a3:57:21:d2:0b:52:fd:d4:b5:5d:25:6e:a7:ba:3b:
4b:36:c2:45:be:1b:2d:a7:02:51:70:d6:a7:bc:46:63:03:f8:
9d:1e:9a:b8:39:6f:99:64:d3:81:3c:de:87:3c:1b:d2:e7:33:
75:4d:ad:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:55 2025 by rpki-client