Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
File: 98ci2uJwhooZg4p81JnVnCZ52JE.mft (raw, json)
Hash identifier: 4DI4tmfne/QSpBfrZJlNrZ3gdpgwRRuJXmfN+Go722k=
Subject key identifier: 97:A6:F8:C8:E0:62:09:F6:D6:C0:A3:34:69:45:41:94:E2:B0:AE:A5
Authority key identifier: F7:C7:22:DA:E2:70:86:8A:19:83:8A:7C:D4:99:D5:9C:26:79:D8:91
Certificate issuer: /CN=f7c722dae270868a19838a7cd499d59c2679d891
Certificate serial: 01975C4A01D0C78A3E6019CF7F03502E0676
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
Manifest number: 0474
Signing time: Wed 11 Jun 2025 00:00:43 +0000
Manifest this update: Wed 11 Jun 2025 00:00:43 +0000
Manifest next update: Thu 12 Jun 2025 00:00:43 +0000
Files and hashes: 1: 2GvGxW56EwiXdY8WsCKuvBnzEmE.roa (hash: W3DnYzHP+CF6agGgHp9PqPmuvt/s/L6YaUF7RJiXgPQ=)
2: 98ci2uJwhooZg4p81JnVnCZ52JE.crl (hash: 3E4HknkSJSJr5Uu80N68I7OxYDz+x2XMu0hKb022/+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:4a:01:d0:c7:8a:3e:60:19:cf:7f:03:50:2e:06:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7c722dae270868a19838a7cd499d59c2679d891
Validity
Not Before: Jun 11 00:00:43 2025 GMT
Not After : Jun 12 00:00:43 2025 GMT
Subject: CN=97a6f8c8e06209f6d6c0a33469454194e2b0aea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:59:22:ed:90:0b:90:42:93:74:be:cb:08:0d:
6b:a1:ca:95:a6:65:a6:74:43:2a:8b:7b:ee:0c:5f:
7a:02:d5:72:44:12:7e:53:cc:40:86:54:2b:ea:d4:
0e:42:41:83:6a:df:6d:11:2e:02:ea:ba:2e:d3:b3:
70:93:77:48:bc:53:1b:90:dc:fc:21:56:89:d1:47:
86:d0:4b:cd:c9:22:1a:f8:6b:b0:29:e2:46:1b:35:
ea:b7:62:81:16:b4:f0:4c:94:93:12:93:1f:62:b5:
ff:91:cc:b2:33:09:3d:09:1a:b7:96:4f:82:f8:51:
d2:ef:ba:25:2e:11:29:0e:ad:f0:9f:00:d4:a0:5e:
67:d7:0c:d9:7d:10:fb:31:3d:f0:af:be:a9:7a:1d:
3f:99:56:25:dc:2a:e6:15:40:fd:84:34:10:5e:b4:
69:d8:fa:ac:3a:c5:c3:99:98:e7:b5:d2:3c:be:f0:
95:08:64:0a:3a:10:b8:16:c4:5f:48:4b:9c:12:dd:
d4:09:af:08:c0:35:83:6d:23:6e:81:ca:27:a9:3d:
e8:e6:de:57:54:f9:05:01:36:95:75:91:23:4d:21:
e3:75:38:77:1c:6e:fd:19:23:9e:9c:3e:95:58:f8:
20:f1:2f:e4:50:59:01:a7:bd:48:25:b8:fd:a6:45:
ad:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A6:F8:C8:E0:62:09:F6:D6:C0:A3:34:69:45:41:94:E2:B0:AE:A5
X509v3 Authority Key Identifier:
keyid:F7:C7:22:DA:E2:70:86:8A:19:83:8A:7C:D4:99:D5:9C:26:79:D8:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:c8:30:89:e8:dc:e0:10:02:e8:29:7b:21:26:1f:5a:aa:10:
3e:69:7e:11:ec:0b:95:02:a1:68:17:f3:09:30:75:e0:6b:c7:
8d:dc:a7:8d:4d:d1:6a:64:e3:5a:96:e1:d6:09:99:37:e7:b9:
07:ed:e2:92:0c:ca:9b:e6:7f:1f:2b:23:7f:b3:d9:11:9d:54:
28:47:67:a1:ef:68:4c:44:09:e8:29:70:51:84:e2:ff:e8:ff:
4f:b9:fb:62:e6:e8:68:88:11:e8:36:0a:42:40:c8:0d:d8:03:
6a:4c:6c:e4:86:95:05:9c:2f:7c:37:81:09:19:11:37:43:89:
e2:db:e3:f9:2a:c3:ce:8b:01:d7:13:b1:45:3c:42:0d:d4:fa:
10:20:d7:1e:78:c5:51:5a:4b:1c:6d:2c:39:74:89:f6:b7:29:
25:a6:2b:f5:5a:0c:cf:5f:b8:6c:ca:ed:1d:6a:be:c8:ee:8b:
c6:56:09:a6:52:67:31:1d:e0:cf:c7:a6:ea:31:db:29:4d:5e:
86:01:ac:f0:67:4a:36:31:1a:92:69:83:fa:70:f8:c0:10:c9:
24:f2:c6:50:90:f9:bb:61:ee:ae:f2:1f:32:81:24:00:92:05:
33:ac:03:40:e8:13:40:47:68:8a:e0:cd:68:51:44:84:23:2e:
8a:c0:1e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 04:22:53 2025 by rpki-client