Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.mft
File: 98Dr2f99xugfjDVIx8LozceWfW8.mft (raw, json)
Hash identifier: JsMYzmixlKl7ws5B0ifi6aw9tS72csyon3worenWAIs=
Subject key identifier: 29:5D:7F:98:F8:9A:6D:E6:E5:69:5A:82:53:F9:23:60:E2:0F:36:6C
Authority key identifier: F7:C0:EB:D9:FF:7D:C6:E8:1F:8C:35:48:C7:C2:E8:CD:C7:96:7D:6F
Certificate issuer: /CN=f7c0ebd9ff7dc6e81f8c3548c7c2e8cdc7967d6f
Certificate serial: 019A725C9F4B3F5C963F838815489587CF89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/98Dr2f99xugfjDVIx8LozceWfW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.mft
Manifest number: 0EF5
Signing time: Tue 11 Nov 2025 10:01:04 +0000
Manifest this update: Tue 11 Nov 2025 10:01:04 +0000
Manifest next update: Wed 12 Nov 2025 10:01:04 +0000
Files and hashes: 1: 98Dr2f99xugfjDVIx8LozceWfW8.crl (hash: LjAU38Gmd1YJHBJDnsFIR/gF2gYB/tG6Gc2pPeQ55Mo=)
2: xGM69jz3lBB1TpIDVJ5nLe6CA9c.roa (hash: SYU2Je8e6GjpcEI+Nr3BgTNyIlBoXqCEqRNdDn2ooEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/98Dr2f99xugfjDVIx8LozceWfW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:9f:4b:3f:5c:96:3f:83:88:15:48:95:87:cf:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7c0ebd9ff7dc6e81f8c3548c7c2e8cdc7967d6f
Validity
Not Before: Nov 11 10:01:04 2025 GMT
Not After : Nov 12 10:01:04 2025 GMT
Subject: CN=295d7f98f89a6de6e5695a8253f92360e20f366c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:51:ed:ff:b0:00:fd:32:61:6f:59:be:4b:1e:
87:8e:f9:b6:10:ec:95:80:f0:73:fd:21:a9:79:fd:
c7:43:06:1f:8d:3b:15:6b:e0:86:28:a3:c5:65:39:
75:4f:6d:4f:3e:87:12:a5:96:c7:0f:0a:3e:4c:bb:
b2:09:13:46:80:96:4c:c0:34:c9:2f:50:22:46:2b:
02:ae:f2:85:e4:41:1b:03:cd:44:79:16:65:82:63:
b8:45:82:c9:bc:a2:07:db:6d:4f:3a:76:35:8c:63:
7e:a6:1c:dc:f0:b9:73:be:d5:26:54:b3:78:89:d8:
74:81:3d:38:8e:42:eb:4a:61:2a:c5:d8:e0:24:76:
00:ab:2c:2d:5f:7d:15:94:47:19:6e:27:39:93:0b:
74:46:85:99:34:8f:b2:d4:c4:ba:5b:07:d7:29:a2:
8f:87:e9:ba:48:1c:75:aa:2e:f3:bd:9f:6c:24:04:
0d:f9:dd:ad:56:e0:04:52:ae:57:b1:db:40:75:f0:
78:99:43:b5:f1:22:95:8f:16:93:ec:c8:c7:88:12:
1b:b0:fe:00:0e:09:1a:ce:7d:27:dc:65:87:9f:ee:
a2:ba:d5:60:39:7a:ad:09:3b:2a:1a:41:4b:63:72:
c4:50:47:89:84:0c:ef:8b:09:e1:7d:89:86:ee:87:
37:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:5D:7F:98:F8:9A:6D:E6:E5:69:5A:82:53:F9:23:60:E2:0F:36:6C
X509v3 Authority Key Identifier:
keyid:F7:C0:EB:D9:FF:7D:C6:E8:1F:8C:35:48:C7:C2:E8:CD:C7:96:7D:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98Dr2f99xugfjDVIx8LozceWfW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:7c:44:b9:77:bb:fa:c6:ec:46:d5:3c:e5:5b:c4:6b:bf:c4:
27:3e:a0:22:b9:63:27:f1:d6:f6:05:67:44:62:e1:d3:87:f5:
7d:cd:1f:70:7d:12:78:ab:e2:4c:a0:a1:8d:c2:0b:59:06:f2:
8f:6e:7f:df:ea:65:7b:e9:ce:04:43:52:cc:a3:62:f3:44:84:
39:dc:c6:ec:48:b2:8f:18:a2:31:3c:83:77:8b:d0:6e:ed:fb:
75:36:f6:3c:fc:ad:2a:24:82:e7:59:f7:48:fa:b8:34:0a:04:
16:0f:d0:08:86:9a:ea:96:45:75:4d:57:67:9d:77:2f:ae:0d:
ed:47:95:1a:15:a4:d1:88:47:a7:59:de:e9:54:e6:0d:62:8b:
e8:cb:9c:c4:8b:0a:eb:c2:dc:71:91:d7:ee:b9:9e:c9:26:22:
6c:5b:c9:b0:94:fa:b7:ef:0c:81:fd:3c:31:1e:ff:d3:7b:29:
fe:30:b1:65:2e:b7:f6:12:3e:bd:c8:ea:9e:a5:21:78:42:b8:
89:9d:d2:8b:72:a2:09:e7:a4:c3:ba:ce:f4:4c:c3:94:f8:9a:
ed:b2:c3:c9:2a:df:0e:99:36:1d:7d:c6:d5:90:fb:a7:85:6c:
0b:86:c5:87:d4:47:c4:a0:94:9b:f3:57:2f:27:f9:d0:d7:27:
42:1f:d7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:48:29 2025 by rpki-client