Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.mft
File: g98MrLn9UOG-ffvz0KyFS-7Xhr4.mft (raw, json)
Hash identifier: P6N77yo2DatH4CchyVakqmLmtqJwxthmJvwGFherDOY=
Subject key identifier: 7C:64:05:CB:8D:4A:30:36:20:F4:A2:11:33:F7:50:0A:B5:F9:E7:98
Authority key identifier: 83:DF:0C:AC:B9:FD:50:E1:BE:7D:FB:F3:D0:AC:85:4B:EE:D7:86:BE
Certificate issuer: /CN=83df0cacb9fd50e1be7dfbf3d0ac854beed786be
Certificate serial: 0198D66118C6DBD2A016032E27C1DF531359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g98MrLn9UOG-ffvz0KyFS-7Xhr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.mft
Manifest number: 0121
Signing time: Sat 23 Aug 2025 10:02:24 +0000
Manifest this update: Sat 23 Aug 2025 10:02:24 +0000
Manifest next update: Sun 24 Aug 2025 10:02:24 +0000
Files and hashes: 1: g98MrLn9UOG-ffvz0KyFS-7Xhr4.crl (hash: q3JM55glgJ8N3ALedSWsSB4hE7BY4ytF/hp0KeHgKHg=)
2: msDEeS6sASlV5Nrug60HOmxHAjw.roa (hash: td9s2j9cTMVJ/N4A25CfBZ5lbq+TNEGFP43f11ycPe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/g98MrLn9UOG-ffvz0KyFS-7Xhr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:18:c6:db:d2:a0:16:03:2e:27:c1:df:53:13:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83df0cacb9fd50e1be7dfbf3d0ac854beed786be
Validity
Not Before: Aug 23 10:02:24 2025 GMT
Not After : Aug 24 10:02:24 2025 GMT
Subject: CN=7c6405cb8d4a303620f4a21133f7500ab5f9e798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4f:35:34:5a:02:00:bd:aa:bc:0c:46:5f:76:
5b:cd:9f:50:6f:55:df:f0:66:86:75:4a:cb:dd:97:
4e:be:42:39:95:93:96:29:e9:13:0e:9b:ea:03:4d:
42:57:1e:9d:fb:19:ce:5b:10:81:5a:97:af:ed:02:
fa:27:ef:ff:94:4e:1d:cd:e4:df:01:57:e3:f8:ef:
99:b3:d9:a4:37:7c:69:2e:28:b7:e6:fc:1f:7f:3b:
33:1c:45:d0:1f:31:6d:58:98:3a:81:55:f7:7a:cc:
12:50:cb:46:09:55:2b:d0:59:f5:fe:77:3e:53:71:
05:0a:9a:f2:bf:1c:04:ee:7e:12:c7:91:60:ab:8e:
83:b4:fa:d8:09:7d:85:16:e6:e3:3d:e3:b3:b5:32:
65:6c:75:c7:05:2e:96:1a:26:09:54:be:19:ab:fe:
bd:60:95:4e:4e:80:d8:57:ac:bf:60:89:fd:1e:bf:
bd:95:9e:34:df:18:5e:b8:7a:eb:66:64:4f:4b:ae:
58:3f:a2:13:5f:ed:f3:9c:32:1b:77:c6:af:0d:44:
70:e9:36:58:47:0d:8c:b7:13:4f:51:60:c2:21:c8:
9c:a0:e0:06:ed:7b:f4:c1:17:b3:a5:ba:62:f5:40:
0a:cf:4a:5b:af:26:20:fd:3c:2e:1f:ca:ab:7a:5e:
63:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:64:05:CB:8D:4A:30:36:20:F4:A2:11:33:F7:50:0A:B5:F9:E7:98
X509v3 Authority Key Identifier:
keyid:83:DF:0C:AC:B9:FD:50:E1:BE:7D:FB:F3:D0:AC:85:4B:EE:D7:86:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g98MrLn9UOG-ffvz0KyFS-7Xhr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:36:d0:e3:03:f4:78:a3:2b:9a:a9:4e:56:ec:81:91:51:76:
e0:99:aa:80:80:7a:b8:4d:85:e9:72:00:2d:d8:cf:06:0a:fb:
bc:5c:e5:c6:d8:8a:22:b0:5a:a7:e5:cf:55:41:ea:59:87:b2:
f6:32:d7:8a:c6:24:93:7a:95:69:15:e9:26:58:1c:6c:c3:43:
c2:be:ff:6b:c8:9c:45:64:c8:05:cf:03:28:42:db:19:f8:27:
67:56:61:1c:ce:04:24:73:3d:a0:27:53:8f:a8:e5:4d:41:fe:
58:66:c6:cf:3d:e9:a5:4d:bc:34:48:8c:65:94:af:47:72:8d:
99:c6:72:06:51:1c:41:54:ec:13:2c:0a:9f:02:d4:63:7b:d2:
2a:a2:54:b7:f1:b1:99:61:88:53:4b:1f:67:53:c2:c3:34:b2:
81:f5:41:84:57:12:6c:dd:f9:80:f3:d7:d7:dd:2f:d8:61:ae:
b1:57:6d:4a:bc:cf:fe:f6:21:76:ee:c3:48:67:6a:26:d3:63:
a0:8d:3c:2b:a8:48:e1:a9:42:9e:39:55:e1:7c:d3:f3:d9:91:
b0:8e:62:79:c2:d2:8a:bf:f5:57:f0:bf:26:1b:30:61:e9:b9:
ec:63:80:b2:91:82:5d:8b:5e:43:e3:eb:a3:f2:6d:12:a8:05:
06:4c:8c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:33:38 2025 by rpki-client