Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.mft
File: 98Dr2f99xugfjDVIx8LozceWfW8.mft (raw, json)
Hash identifier: /O1XtA2g9793WMeoVLSLHn5Rh0SPxoUD3FCGu0wWwiU=
Subject key identifier: 34:F2:22:C2:0C:31:12:7B:E1:DC:7B:8D:FA:97:EF:79:05:31:81:85
Authority key identifier: F7:C0:EB:D9:FF:7D:C6:E8:1F:8C:35:48:C7:C2:E8:CD:C7:96:7D:6F
Certificate issuer: /CN=f7c0ebd9ff7dc6e81f8c3548c7c2e8cdc7967d6f
Certificate serial: 0197493181B9D620BF6DAEAAD9C00A728D10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/98Dr2f99xugfjDVIx8LozceWfW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.mft
Manifest number: 0D52
Signing time: Sat 07 Jun 2025 07:01:10 +0000
Manifest this update: Sat 07 Jun 2025 07:01:10 +0000
Manifest next update: Sun 08 Jun 2025 07:01:10 +0000
Files and hashes: 1: 98Dr2f99xugfjDVIx8LozceWfW8.crl (hash: gWhiihdzeAgiFVxoFZC4KoSBKypfDLa/QZ/H6+Is9V0=)
2: xGM69jz3lBB1TpIDVJ5nLe6CA9c.roa (hash: SYU2Je8e6GjpcEI+Nr3BgTNyIlBoXqCEqRNdDn2ooEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/98Dr2f99xugfjDVIx8LozceWfW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:81:b9:d6:20:bf:6d:ae:aa:d9:c0:0a:72:8d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7c0ebd9ff7dc6e81f8c3548c7c2e8cdc7967d6f
Validity
Not Before: Jun 7 07:01:10 2025 GMT
Not After : Jun 8 07:01:10 2025 GMT
Subject: CN=34f222c20c31127be1dc7b8dfa97ef7905318185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:54:33:a2:26:23:75:fc:65:59:72:b7:54:e4:
36:ff:d4:54:78:27:c3:03:9f:5b:f0:2a:d4:63:d8:
06:ad:c8:fb:21:77:f1:4e:f7:19:22:14:d1:85:ad:
e7:08:9a:f0:25:13:fa:68:46:8e:71:b9:11:1b:e4:
9b:66:f9:f9:d0:04:46:0c:a4:c6:0c:53:68:20:17:
b1:e7:d4:43:32:ff:1a:79:20:3f:33:91:52:b9:c3:
bd:71:b7:41:97:0a:f2:61:8b:eb:df:f5:66:29:92:
02:5c:fe:0a:05:92:93:c6:7d:6e:89:de:8b:90:0f:
d9:97:db:f7:2b:2b:1b:c4:b7:cd:44:1e:1e:95:94:
0e:d5:33:09:b8:10:2c:61:21:69:4d:1e:8f:7c:7e:
a7:b1:6f:65:33:50:58:48:22:63:00:d6:36:e2:e8:
7e:63:47:87:58:cd:08:bf:f6:a9:9e:71:d1:0d:ac:
ac:5a:3d:2a:a4:97:31:87:66:4f:d1:22:f9:2f:5f:
1c:1d:55:5e:a5:cf:85:fb:b3:3f:52:b3:97:ba:1c:
d6:24:db:c1:aa:6b:e8:54:19:29:c7:18:58:d3:f7:
1b:12:b2:2d:0c:6f:72:bd:38:ad:fe:84:17:c8:97:
9d:da:f7:18:fb:af:3e:26:15:88:9a:0f:4b:19:22:
8d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F2:22:C2:0C:31:12:7B:E1:DC:7B:8D:FA:97:EF:79:05:31:81:85
X509v3 Authority Key Identifier:
keyid:F7:C0:EB:D9:FF:7D:C6:E8:1F:8C:35:48:C7:C2:E8:CD:C7:96:7D:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98Dr2f99xugfjDVIx8LozceWfW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:49:b7:53:ab:5a:a3:ef:50:2b:ed:85:a1:c2:35:dc:f5:f9:
80:9b:35:43:ad:e2:78:23:78:53:26:d2:82:f0:3f:ae:c4:d1:
81:58:8f:37:6f:1d:4e:1b:82:35:c6:e1:7c:51:72:4c:02:4f:
aa:69:dd:40:5c:61:ca:ca:fc:2e:a7:b8:b0:1b:2b:97:7f:f8:
c9:e6:f0:a6:ae:48:92:60:6a:82:2c:a2:4f:fb:b2:9f:ad:38:
08:a2:36:03:73:97:4d:0c:73:f0:ca:1c:b5:56:cd:7e:8e:11:
15:88:8a:d1:99:16:d5:b1:9f:bb:76:dd:e7:e9:58:95:c4:20:
88:85:b2:fd:d1:11:36:73:46:f6:42:8c:20:a7:33:6f:69:e0:
65:78:12:79:10:d4:85:42:a3:5d:23:40:c0:34:1f:c0:85:02:
63:54:b1:f3:98:6f:63:54:8d:e8:b7:1f:52:9b:7c:93:8f:58:
54:c4:5a:ae:ba:58:f2:47:2f:ee:66:2b:93:dc:79:aa:52:5c:
17:00:53:fb:32:8c:53:1f:bf:e9:77:b7:cf:9a:9a:d4:ae:d4:
bd:c0:f2:6b:f6:6f:0b:73:82:63:19:e0:0f:13:57:d7:bd:9f:
b5:60:7d:0e:55:47:7b:67:38:89:3a:aa:df:3d:57:58:7e:b9:
10:98:54:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJMYG51iC/ba6q2cAKco0QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3YzBlYmQ5ZmY3ZGM2ZTgxZjhjMzU0OGM3YzJlOGNkYzc5
NjdkNmYwHhcNMjUwNjA3MDcwMTEwWhcNMjUwNjA4MDcwMTEwWjAzMTEwLwYDVQQD
EygzNGYyMjJjMjBjMzExMjdiZTFkYzdiOGRmYTk3ZWY3OTA1MzE4MTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVQzoiYjdfxlWXK3VOQ2/9RUeCfD
A59b8CrUY9gGrcj7IXfxTvcZIhTRha3nCJrwJRP6aEaOcbkRG+SbZvn50ARGDKTG
DFNoIBex59RDMv8aeSA/M5FSucO9cbdBlwryYYvr3/VmKZICXP4KBZKTxn1uid6L
kA/Zl9v3KysbxLfNRB4elZQO1TMJuBAsYSFpTR6PfH6nsW9lM1BYSCJjANY24uh+
Y0eHWM0Iv/apnnHRDaysWj0qpJcxh2ZP0SL5L18cHVVepc+F+7M/UrOXuhzWJNvB
qmvoVBkpxxhY0/cbErItDG9yvTit/oQXyJed2vcY+68+JhWImg9LGSKNJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDTyIsIMMRJ74dx7jfqX73kFMYGFMB8GA1UdIwQY
MBaAFPfA69n/fcboH4w1SMfC6M3Hln1vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOThEcjJmOTl4dWdmakRWSXg4TG96Y2VXZlc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9kMzY4NGEtNDUyNS00NzZmLThjNDgt
NjlkNzFiZjJkMzUzLzEvOThEcjJmOTl4dWdmakRWSXg4TG96Y2VXZlc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9kMzY4NGEtNDUyNS00NzZmLThjNDgtNjlkNzFiZjJkMzUz
LzEvOThEcjJmOTl4dWdmakRWSXg4TG96Y2VXZlc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQkm3U6ta
o+9QK+2FocI13PX5gJs1Q63ieCN4UybSgvA/rsTRgViPN28dThuCNcbhfFFyTAJP
qmndQFxhysr8Lqe4sBsrl3/4yebwpq5IkmBqgiyiT/uyn604CKI2A3OXTQxz8Moc
tVbNfo4RFYiK0ZkW1bGfu3bd5+lYlcQgiIWy/dERNnNG9kKMIKczb2ngZXgSeRDU
hUKjXSNAwDQfwIUCY1Sx85hvY1SN6LcfUpt8k49YVMRarrpY8kcv7mYrk9x5qlJc
FwBT+zKMUx+/6Xe3z5qa1K7UvcDya/ZvC3OCYxngDxNX172ftWB9DlVHe2c4iTqq
3z1XWH65EJhUvA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 08:29:53 2025 by rpki-client