Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
File: 98ci2uJwhooZg4p81JnVnCZ52JE.mft (raw, json)
Hash identifier: kWEVLUqm0LonRRI4Ow3Mh+unBeabOFpxUkPv8UDYbcQ=
Subject key identifier: 9A:7C:8B:41:39:69:F6:33:06:B7:21:F5:4F:21:7D:33:3B:E9:82:9D
Authority key identifier: F7:C7:22:DA:E2:70:86:8A:19:83:8A:7C:D4:99:D5:9C:26:79:D8:91
Certificate issuer: /CN=f7c722dae270868a19838a7cd499d59c2679d891
Certificate serial: 019A7225E234C22C3B709422AE212E4A9A90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
Manifest number: 060D
Signing time: Tue 11 Nov 2025 09:01:16 +0000
Manifest this update: Tue 11 Nov 2025 09:01:16 +0000
Manifest next update: Wed 12 Nov 2025 09:01:16 +0000
Files and hashes: 1: 2GvGxW56EwiXdY8WsCKuvBnzEmE.roa (hash: W3DnYzHP+CF6agGgHp9PqPmuvt/s/L6YaUF7RJiXgPQ=)
2: 98ci2uJwhooZg4p81JnVnCZ52JE.crl (hash: s+XqHhr04Mc4fnz6Ld5lqo7xRPlW0q+vuT9Xx0kAmZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:e2:34:c2:2c:3b:70:94:22:ae:21:2e:4a:9a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7c722dae270868a19838a7cd499d59c2679d891
Validity
Not Before: Nov 11 09:01:16 2025 GMT
Not After : Nov 12 09:01:16 2025 GMT
Subject: CN=9a7c8b413969f63306b721f54f217d333be9829d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:aa:65:48:79:4c:e8:ca:91:aa:2b:c4:36:fa:
eb:fa:52:3d:3a:8c:7f:31:4b:57:2e:72:e9:b5:ad:
b7:4b:f6:7e:e9:0f:3a:2d:bb:96:2e:b7:20:a1:fe:
0b:d1:ac:5c:ef:4d:5e:fc:91:d2:79:de:38:c1:51:
30:50:ad:66:e4:01:b6:34:37:ff:ea:f1:d1:3f:7c:
9e:22:6c:7c:d3:3a:81:a7:37:4e:d7:cf:6a:6c:65:
b1:46:1b:92:03:52:b5:a7:38:52:84:9e:b6:8a:7f:
02:cb:18:e5:f5:9a:a8:a6:72:b6:91:1a:e6:8b:99:
af:f1:f7:1d:89:f3:ce:81:cf:56:f2:a9:a3:87:1b:
49:4b:06:5b:07:b2:eb:82:d4:77:38:3d:8d:07:34:
3c:98:4e:0b:81:4a:ec:b9:23:1c:61:f5:6b:0d:ac:
9a:ca:13:37:74:e3:f7:b3:e4:1e:4b:b2:e0:7b:de:
d1:f5:01:d7:75:a9:01:c7:3c:54:0c:e1:dc:d4:65:
c7:e7:84:25:ac:0e:01:23:38:79:9f:f9:14:09:3d:
c6:98:d6:f6:d7:c3:38:24:de:33:df:1b:b3:24:76:
18:86:20:8e:98:f9:45:ef:05:41:f0:61:40:ad:65:
f4:0d:71:a5:af:c2:61:4e:a9:40:ff:40:72:2b:35:
cc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7C:8B:41:39:69:F6:33:06:B7:21:F5:4F:21:7D:33:3B:E9:82:9D
X509v3 Authority Key Identifier:
keyid:F7:C7:22:DA:E2:70:86:8A:19:83:8A:7C:D4:99:D5:9C:26:79:D8:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:bb:2c:98:32:ef:57:55:07:d7:b1:e5:8c:d9:01:b9:4c:09:
a3:9e:bc:23:22:fa:b7:f3:54:0d:71:2f:9c:33:41:fd:e9:fa:
9d:43:15:dd:35:aa:55:05:56:a8:f5:09:47:a9:26:94:02:16:
90:1c:e0:7d:4d:c8:90:7e:18:9a:8e:67:f9:d7:2f:36:75:78:
9d:ca:c8:9a:94:e1:d2:5e:80:95:1e:a8:36:bc:ae:11:f2:be:
5f:86:7c:4a:1a:f0:10:85:fc:80:5e:d7:7e:9d:dd:22:da:b4:
18:6e:e6:f1:48:18:4e:65:4d:a0:1d:d0:2a:52:62:bd:00:39:
46:a1:0c:08:74:a9:67:61:f3:b5:d0:80:72:69:1a:70:03:4e:
5d:da:c7:6c:77:f8:25:97:aa:db:4a:50:98:a7:9c:ea:2a:06:
2a:22:82:6f:ef:a2:be:5d:03:ec:76:f5:68:2e:38:c7:10:a5:
4f:f7:eb:e1:b9:14:51:ae:21:97:b8:45:71:23:6e:fd:1e:02:
e3:26:4e:a0:eb:26:53:95:9d:b6:3c:99:89:85:bb:8d:da:6e:
44:3e:92:6f:55:39:b5:a2:01:6d:05:a1:e5:92:66:9d:2d:00:
3b:12:a9:c1:05:48:2c:5a:67:28:e7:22:b4:da:d3:79:dd:52:
b0:d4:2f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:01:31 2025 by rpki-client