Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
File: s-98dqs-aXHY-HMC3fksxgmISeo.mft (raw, json)
Hash identifier: iA5VA5UiAk/H6fNNfTSc+XSH9t9YZ6mvPFmTwD2m+ik=
Subject key identifier: 42:F8:27:6A:38:52:F7:5C:0C:A3:E4:87:B5:40:6C:6D:73:20:EB:59
Authority key identifier: B3:EF:7C:76:AB:3E:69:71:D8:F8:73:02:DD:F9:2C:C6:09:88:49:EA
Certificate issuer: /CN=b3ef7c76ab3e6971d8f87302ddf92cc6098849ea
Certificate serial: 0197B7B311531F8C6A27158EF1B47F1E1FEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 18:00:55 +0000
Manifest this update: Sat 28 Jun 2025 18:00:55 +0000
Manifest next update: Sun 29 Jun 2025 18:00:55 +0000
Files and hashes: 1: s-98dqs-aXHY-HMC3fksxgmISeo.crl (hash: 0a7lXlWDVMWltPRzRbL8L0aBO4TqcPvCCjpYaUvHc1M=)
2: uvesjoVgl9NM-m1BIFM5Yl9dGPo.roa (hash: BDyqIMMKzj8ksjoDvptTiXpxyPNIyT6fdfz8Vi/kBoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 18:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:11:53:1f:8c:6a:27:15:8e:f1:b4:7f:1e:1f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3ef7c76ab3e6971d8f87302ddf92cc6098849ea
Validity
Not Before: Jun 28 18:00:55 2025 GMT
Not After : Jun 29 18:00:55 2025 GMT
Subject: CN=42f8276a3852f75c0ca3e487b5406c6d7320eb59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:80:be:49:34:cf:3c:15:08:bc:70:67:30:33:
d5:8d:d2:42:83:30:90:48:d8:e3:ab:b5:7c:2b:68:
21:8d:cb:70:04:7f:8c:a2:d6:3c:30:32:6c:34:bb:
44:73:02:65:5b:3c:c5:bd:89:ba:06:3c:57:8d:41:
38:ae:5a:3c:84:0e:10:3e:a6:a1:f6:de:f2:f5:19:
d1:1c:e3:b8:c5:51:bb:a3:75:79:50:02:30:e0:ba:
2a:cb:f2:d4:e6:d2:51:3a:26:81:7d:e6:5f:f9:57:
de:08:cf:55:f9:0c:79:46:56:7d:14:25:51:97:16:
47:3d:f5:a2:74:b6:0d:bd:8f:1e:bf:bd:19:bb:fb:
4d:5f:f5:29:3b:19:50:e7:28:76:8a:f6:53:8d:d7:
94:2a:95:b2:ea:67:c1:fd:d5:76:7b:01:28:69:0c:
f5:d8:54:af:42:06:de:a9:09:bf:c3:45:ea:54:aa:
d5:50:2e:16:cb:bc:11:44:42:18:96:eb:a5:be:71:
e1:4f:8a:21:9c:72:1c:2e:40:9a:2c:2e:5c:46:46:
e9:a8:66:5f:65:3f:45:07:6b:a6:d6:65:d1:58:a3:
43:39:66:18:5d:0b:91:96:d5:b9:e6:5f:a0:79:a5:
5d:8f:a5:84:45:d7:c5:6b:d9:8a:43:f2:7f:fc:6f:
f7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F8:27:6A:38:52:F7:5C:0C:A3:E4:87:B5:40:6C:6D:73:20:EB:59
X509v3 Authority Key Identifier:
keyid:B3:EF:7C:76:AB:3E:69:71:D8:F8:73:02:DD:F9:2C:C6:09:88:49:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:28:03:b4:00:47:93:d3:f0:29:c7:12:ff:b9:ad:35:b1:8f:
93:6e:d1:ca:1d:6c:b5:20:26:92:9e:07:5d:f5:60:1f:e6:23:
00:25:9f:56:c2:28:3f:69:9b:8b:89:18:41:73:82:34:e3:af:
ba:9a:79:c5:af:ed:a7:b8:d6:9a:76:75:ed:66:c3:2f:f1:10:
6c:f9:b3:72:15:5e:4a:1a:8f:b5:47:d2:e4:7c:bb:44:f3:64:
04:a7:89:6e:d7:2d:38:16:d8:70:65:ff:05:65:bb:50:15:6a:
b0:d4:32:26:bc:21:22:a5:18:c0:b9:e1:23:94:e4:05:a4:20:
04:d4:fe:62:6b:22:e3:79:7f:fd:b2:7b:3b:10:ba:af:e6:97:
3c:bc:57:90:24:a3:99:26:33:56:bc:e0:e7:9b:67:b2:9e:03:
c9:18:5d:d1:8f:3d:aa:0f:27:b8:d9:50:f8:fe:4d:dc:0d:74:
21:4b:c2:1f:c0:23:73:99:16:ae:24:4c:2c:bb:c4:92:49:34:
3c:e7:5a:c7:98:26:e5:22:0f:37:fb:7c:e7:e3:e9:45:6b:23:
78:cc:31:35:01:64:47:6a:6c:94:99:e5:dc:39:2d:88:70:4c:
e5:76:02:da:a2:1e:62:8c:7c:37:4f:c3:70:a7:2f:2f:91:36:
7e:e6:be:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:22:05 2025 by rpki-client