Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft
File: P98IRZEZlp1LnBf1qF6ScyxVF9E.mft (raw, json)
Hash identifier: CWgDYQBwkt1WCuxfpTM1FoMZ6SN9bjek6Fzob8en1uk=
Subject key identifier: 1D:19:3E:ED:6B:25:43:B0:17:3A:30:B3:98:97:38:2C:73:85:28:67
Authority key identifier: 3F:DF:08:45:91:19:96:9D:4B:9C:17:F5:A8:5E:92:73:2C:55:17:D1
Certificate issuer: /CN=3fdf08459119969d4b9c17f5a85e92732c5517d1
Certificate serial: 01984AE5B7D8DC7F09D587D5B9F00829AF8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft
Manifest number: 15E9
Signing time: Sun 27 Jul 2025 08:00:25 +0000
Manifest this update: Sun 27 Jul 2025 08:00:25 +0000
Manifest next update: Mon 28 Jul 2025 08:00:25 +0000
Files and hashes: 1: P98IRZEZlp1LnBf1qF6ScyxVF9E.crl (hash: EB3010K1TWhLtD4uqMdKc1k2Kx12ob09MwiX/7kdjFk=)
2: qHPsdBiuTYXVZwMEuexg2CV5_Rc.roa (hash: okNXh+NCN1SYoCMfp10oC5B+Is3b/qKgY4b94Oq45BU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:b7:d8:dc:7f:09:d5:87:d5:b9:f0:08:29:af:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fdf08459119969d4b9c17f5a85e92732c5517d1
Validity
Not Before: Jul 27 08:00:25 2025 GMT
Not After : Jul 28 08:00:25 2025 GMT
Subject: CN=1d193eed6b2543b0173a30b39897382c73852867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:94:1c:03:be:66:9c:bc:dd:46:47:0e:37:b4:
95:f5:5f:e1:05:79:15:4c:33:7b:56:16:2a:b0:38:
54:ff:bd:a3:75:a2:de:e4:9b:c9:95:f5:bd:e6:3a:
b3:01:7c:40:38:3e:e4:9c:bc:a7:45:19:39:f9:e6:
14:19:78:d0:05:ac:ee:ff:9c:08:a4:4a:5b:39:6b:
a6:95:3a:27:28:ac:c4:d8:3d:f5:2a:75:e5:39:db:
4d:fd:df:21:10:0a:f6:c9:7e:36:1d:7a:f0:0f:ea:
9e:2a:fb:55:ef:0e:e4:0a:c1:4c:9d:63:2a:aa:ae:
f8:d1:fd:f4:6f:76:8f:7a:dd:34:51:c2:c0:38:f4:
07:83:03:e3:45:76:7d:df:5d:1f:5e:de:67:05:2e:
17:e3:ee:17:1c:df:71:a1:df:26:37:1d:34:03:a5:
8d:b0:13:10:5a:2e:c1:45:9b:62:69:c1:bc:ad:78:
71:5d:f2:5e:46:f7:ec:b4:73:6a:09:05:61:2d:02:
5f:f6:99:a1:91:e2:9d:76:8c:cc:de:73:5e:e3:e9:
39:fd:4a:fd:33:01:a3:58:23:a9:46:b5:02:3d:a1:
23:cf:77:93:44:ab:9b:1d:b9:91:78:02:ea:e8:e9:
f7:b7:0d:90:46:b6:3f:93:b3:4f:f1:c1:f0:dd:99:
f6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:19:3E:ED:6B:25:43:B0:17:3A:30:B3:98:97:38:2C:73:85:28:67
X509v3 Authority Key Identifier:
keyid:3F:DF:08:45:91:19:96:9D:4B:9C:17:F5:A8:5E:92:73:2C:55:17:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:1c:ba:f9:08:47:22:6b:25:04:d6:20:fa:1a:77:c4:b2:17:
0f:93:ba:ea:d0:fc:01:97:36:54:62:bf:50:50:e0:8f:06:1a:
ad:8e:63:d4:b2:3a:63:40:4a:1a:57:49:48:6b:2d:8d:3c:df:
bb:7e:5c:e2:3e:31:b4:39:b8:77:97:98:c9:b8:11:d6:b5:55:
04:da:57:e0:01:fb:6a:04:b6:28:6a:cc:b1:bb:c2:c2:62:67:
c1:2d:fe:2f:5f:78:5d:14:cc:95:d9:52:cc:fa:05:ac:83:32:
07:4d:30:13:ea:43:cf:73:3e:78:77:93:c8:c8:7f:c7:2b:06:
ed:55:55:33:e6:4b:84:91:84:7e:d5:19:57:40:03:66:31:13:
19:45:a0:06:9b:30:fb:39:df:34:09:ab:fb:ac:b6:3e:b1:19:
83:d8:24:cb:3d:f1:a4:58:dc:9b:a5:ac:e9:bc:d2:d0:3b:3e:
e0:d4:e8:ed:04:df:e6:40:b5:5d:a9:63:83:57:7d:f5:a1:9f:
28:c2:eb:59:23:14:40:e3:4f:7c:e3:b2:85:1b:1a:af:06:34:
84:12:2b:43:d9:13:41:e3:34:9b:9c:d2:c2:b9:1b:f5:61:13:
14:72:0f:b3:cc:ed:cb:81:c0:59:b1:88:4a:f1:a2:93:6c:ad:
9d:e2:84:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:34:08 2025 by rpki-client