Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.mft
File: 98JWIDjwgdGNhSaUBxMcmEAD5XU.mft (raw, json)
Hash identifier: juyhMOcF6BEHbCVL+mE9+hFK5QmuFM7tAu70mpsoV54=
Subject key identifier: FC:38:CB:24:EE:F2:B5:E4:6C:56:AF:C8:55:BF:98:72:34:E6:77:E0
Authority key identifier: F7:C2:56:20:38:F0:81:D1:8D:85:26:94:07:13:1C:98:40:03:E5:75
Certificate issuer: /CN=f7c2562038f081d18d85269407131c984003e575
Certificate serial: 019922C3ACC8B0627BD03098814CEE14FE4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/98JWIDjwgdGNhSaUBxMcmEAD5XU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.mft
Manifest number: 32
Signing time: Sun 07 Sep 2025 06:01:13 +0000
Manifest this update: Sun 07 Sep 2025 06:01:13 +0000
Manifest next update: Mon 08 Sep 2025 06:01:13 +0000
Files and hashes: 1: 98JWIDjwgdGNhSaUBxMcmEAD5XU.crl (hash: 2xOkXaewGqCkPoOzmG8pbpY8bE94UOs7I0YIFBW5wCk=)
2: Q22mPslur8WPngA2rLljsndPcGU.roa (hash: o/1rl6NTC00BQMt8kFlnIsok6oHP3+Vsj+2hKoZrxAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.mft
rsync://rpki.ripe.net/repository/DEFAULT/98JWIDjwgdGNhSaUBxMcmEAD5XU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:ac:c8:b0:62:7b:d0:30:98:81:4c:ee:14:fe:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7c2562038f081d18d85269407131c984003e575
Validity
Not Before: Sep 7 06:01:13 2025 GMT
Not After : Sep 8 06:01:13 2025 GMT
Subject: CN=fc38cb24eef2b5e46c56afc855bf987234e677e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fa:a5:e8:34:3d:ef:c0:be:4d:bd:c1:d9:4d:
87:a2:ca:03:6d:b1:16:6a:75:3b:f5:66:f4:0e:1b:
ea:48:22:e8:01:15:95:7d:9a:9f:36:3c:ae:a5:66:
6b:36:24:b6:bf:7b:24:72:87:bf:a4:bf:a5:a2:ae:
c4:d4:25:92:7d:bd:d4:b7:55:a4:a1:28:e5:bc:9e:
a1:d8:9c:8f:48:40:04:ad:b7:de:8b:11:61:f3:d0:
01:60:c1:b0:07:1b:8e:b8:67:03:07:95:f5:b3:bc:
e7:75:a4:40:9f:ab:59:84:69:35:22:2e:0c:cf:b3:
25:c6:8a:fb:00:8a:11:be:f4:cb:4e:f8:8b:a1:84:
58:ec:28:b1:a8:76:ed:38:58:cb:2a:95:f1:7f:01:
78:33:32:03:93:cb:a2:b9:37:34:59:8b:57:e0:e6:
0e:12:a5:b3:94:94:76:91:ae:65:79:f8:de:70:a5:
5b:2b:a0:f2:f0:d5:d4:72:c3:81:de:dd:f8:ed:3b:
cd:53:59:d4:fa:5d:8c:f5:51:72:b1:1d:0b:42:0b:
b9:20:77:a1:98:f9:cc:cf:88:68:0f:1b:e6:61:0a:
dc:5c:6b:c9:9b:9e:83:be:f9:95:50:dd:0f:15:63:
3a:c4:b3:06:8a:28:9c:8d:2a:94:a9:0f:19:e7:e5:
a1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:38:CB:24:EE:F2:B5:E4:6C:56:AF:C8:55:BF:98:72:34:E6:77:E0
X509v3 Authority Key Identifier:
keyid:F7:C2:56:20:38:F0:81:D1:8D:85:26:94:07:13:1C:98:40:03:E5:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98JWIDjwgdGNhSaUBxMcmEAD5XU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5229b3-b873-4808-b9d2-ad094b314e0f/1/98JWIDjwgdGNhSaUBxMcmEAD5XU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:6a:46:35:6f:f2:58:8e:48:99:c9:d3:8b:44:c1:c5:e1:e7:
6f:29:a8:2a:ff:5b:b0:dd:79:a0:67:8c:20:4d:bd:f8:29:82:
7d:4d:cd:d5:be:e2:49:5b:31:22:eb:71:e2:7a:af:ce:25:4c:
6c:8b:11:3b:7e:32:dd:05:a5:5a:13:80:2d:8e:ff:5c:97:a5:
1a:73:f5:c4:3b:77:17:2e:21:f3:3d:5c:39:48:69:82:b4:31:
14:a8:42:64:48:d4:ed:7f:50:ba:97:43:71:fb:6f:8f:bf:21:
55:a7:81:1a:b4:4c:b1:b7:95:ea:e2:b4:b9:a3:df:ea:06:5a:
39:41:20:d7:64:7f:e4:d4:b8:7c:e9:2e:38:60:e2:8f:d5:51:
5c:d3:ef:cd:a4:7a:d4:84:3e:5e:3e:1f:5c:63:e9:7f:12:b2:
d4:cf:8d:80:50:d3:51:8f:54:50:a6:20:35:f2:a4:0a:dc:0c:
c5:99:ac:2b:c4:30:be:3b:8e:57:09:75:5d:80:98:2a:9d:de:
51:80:e4:d0:99:c8:39:19:1d:75:c4:4f:36:e7:e1:8a:38:40:
0a:04:2d:cd:c8:84:a5:d9:48:39:29:d8:20:ef:e1:fa:6f:f3:
9f:15:f0:7b:80:b0:80:be:7c:df:7d:a7:0a:38:8a:9e:c6:d6:
d6:de:d0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:47 2025 by rpki-client