Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0c8008-8a52-4176-b693-c40544281eb0/1/98_k1DTTh2RAV9JB6sb2nT7oHBI.mft
File: 98_k1DTTh2RAV9JB6sb2nT7oHBI.mft (raw, json)
Hash identifier: 5odofTFhnlWtlcA1jnRRTskWXhuWWEgO2T8vSborcdY=
Subject key identifier: 82:E5:9B:A7:B9:C3:D0:95:79:6D:33:49:FA:2E:F9:26:23:82:97:B8
Authority key identifier: F7:CF:E4:D4:34:D3:87:64:40:57:D2:41:EA:C6:F6:9D:3E:E8:1C:12
Certificate issuer: /CN=f7cfe4d434d387644057d241eac6f69d3ee81c12
Certificate serial: 01988DD899559B60F5C7183F00E8B7B9D405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/98_k1DTTh2RAV9JB6sb2nT7oHBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/0c8008-8a52-4176-b693-c40544281eb0/1/98_k1DTTh2RAV9JB6sb2nT7oHBI.mft
Manifest number: 084A
Signing time: Sat 09 Aug 2025 08:00:39 +0000
Manifest this update: Sat 09 Aug 2025 08:00:39 +0000
Manifest next update: Sun 10 Aug 2025 08:00:39 +0000
Files and hashes: 1: 98_k1DTTh2RAV9JB6sb2nT7oHBI.crl (hash: hozy1JcQYLYPOR6WsSLEHkkXQ5gW2GpgE6zymJ0YLJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/0c8008-8a52-4176-b693-c40544281eb0/1/98_k1DTTh2RAV9JB6sb2nT7oHBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/0c8008-8a52-4176-b693-c40544281eb0/1/98_k1DTTh2RAV9JB6sb2nT7oHBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/98_k1DTTh2RAV9JB6sb2nT7oHBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:d8:99:55:9b:60:f5:c7:18:3f:00:e8:b7:b9:d4:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7cfe4d434d387644057d241eac6f69d3ee81c12
Validity
Not Before: Aug 9 08:00:39 2025 GMT
Not After : Aug 10 08:00:39 2025 GMT
Subject: CN=82e59ba7b9c3d095796d3349fa2ef926238297b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9d:fa:1b:aa:e5:20:58:87:53:e9:cf:e2:f9:
b0:0c:5f:d9:97:93:c5:0f:e0:4b:37:25:1d:81:5c:
fc:7b:4c:2a:70:17:45:6d:26:e4:d7:d8:33:40:16:
41:b5:5e:51:2c:83:95:8a:4d:2b:5c:24:d4:6c:83:
97:65:b5:1d:dc:70:8c:53:7f:80:f9:58:a3:5c:46:
03:3e:70:53:d2:0a:3d:a4:56:fb:37:8d:91:e8:bb:
68:0c:58:6f:d2:98:b9:51:ed:b6:36:b6:b9:68:a8:
84:ae:4c:81:72:f9:0d:b6:32:9a:6d:7f:ed:20:62:
1c:65:ac:3a:1d:3a:e9:00:02:d2:1b:33:52:1c:5c:
ef:33:0b:6c:76:9d:da:0a:31:d7:bc:09:4e:ea:bd:
2f:4c:a2:b8:73:c3:a4:4e:8e:64:4c:55:67:c5:0e:
ee:07:8a:a6:a4:20:f5:4c:5a:ea:59:1d:82:04:f7:
6f:51:5f:88:28:db:9f:53:8d:4e:d6:be:55:9b:e1:
fa:3f:8c:87:4b:15:d4:02:e6:f5:a3:9c:3e:c0:19:
c1:7a:ef:b1:b1:3a:c1:0b:ea:1f:da:89:3e:0e:91:
ce:7e:ee:a6:40:d5:b2:e1:53:bd:7c:cc:d5:61:3a:
79:e3:3b:db:73:52:51:0b:8f:52:71:23:e3:e2:ef:
72:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E5:9B:A7:B9:C3:D0:95:79:6D:33:49:FA:2E:F9:26:23:82:97:B8
X509v3 Authority Key Identifier:
keyid:F7:CF:E4:D4:34:D3:87:64:40:57:D2:41:EA:C6:F6:9D:3E:E8:1C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98_k1DTTh2RAV9JB6sb2nT7oHBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0c8008-8a52-4176-b693-c40544281eb0/1/98_k1DTTh2RAV9JB6sb2nT7oHBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0c8008-8a52-4176-b693-c40544281eb0/1/98_k1DTTh2RAV9JB6sb2nT7oHBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:78:87:74:c7:69:0b:ae:11:7a:00:b1:f4:f0:04:57:2b:e1:
59:a8:3e:8c:d6:c3:3a:eb:4d:6d:6a:64:df:9a:c3:b2:5b:51:
3f:ba:54:23:db:d4:be:39:d8:86:58:35:13:ba:d1:0e:72:66:
56:aa:40:93:2a:ca:b9:59:cd:30:aa:16:1e:a9:0c:d3:6c:6c:
cc:3d:8e:9f:a7:72:7d:31:91:e1:85:ee:eb:0f:c3:a9:7b:2c:
9c:f8:35:b5:4d:07:63:ce:01:0a:44:98:ed:3a:70:5f:10:72:
25:1f:ff:c2:6d:36:9c:b0:0f:6c:44:f6:7f:de:71:41:dc:b0:
65:2b:c6:7e:72:17:c2:e2:2a:fa:a7:f8:b0:38:42:48:06:e3:
81:57:0e:97:51:b6:9d:f2:4c:e7:9d:f5:14:86:11:fc:bb:91:
20:ad:30:38:20:bb:b2:35:19:6d:d9:0d:ec:4c:ac:f8:2f:75:
51:28:08:ca:a6:66:05:b7:ef:69:16:06:b4:14:97:4c:ac:94:
ad:63:b9:0d:ba:5b:1b:79:04:76:c6:62:9b:20:ff:86:3b:c4:
17:21:75:a6:3f:f4:00:c0:d2:70:b9:d3:ad:60:18:da:c3:c4:
58:a8:64:9d:76:36:b9:e1:d3:2e:66:4e:3e:c6:b4:60:d9:c2:
fa:d3:45:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiN2JlVm2D1xxg/AOi3udQFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3Y2ZlNGQ0MzRkMzg3NjQ0MDU3ZDI0MWVhYzZmNjlkM2Vl
ODFjMTIwHhcNMjUwODA5MDgwMDM5WhcNMjUwODEwMDgwMDM5WjAzMTEwLwYDVQQD
Eyg4MmU1OWJhN2I5YzNkMDk1Nzk2ZDMzNDlmYTJlZjkyNjIzODI5N2I4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsp36G6rlIFiHU+nP4vmwDF/Zl5PF
D+BLNyUdgVz8e0wqcBdFbSbk19gzQBZBtV5RLIOVik0rXCTUbIOXZbUd3HCMU3+A
+VijXEYDPnBT0go9pFb7N42R6LtoDFhv0pi5Ue22Nra5aKiErkyBcvkNtjKabX/t
IGIcZaw6HTrpAALSGzNSHFzvMwtsdp3aCjHXvAlO6r0vTKK4c8OkTo5kTFVnxQ7u
B4qmpCD1TFrqWR2CBPdvUV+IKNufU41O1r5Vm+H6P4yHSxXUAub1o5w+wBnBeu+x
sTrBC+of2ok+DpHOfu6mQNWy4VO9fMzVYTp54zvbc1JRC49ScSPj4u9ySwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFILlm6e5w9CVeW0zSfou+SYjgpe4MB8GA1UdIwQY
MBaAFPfP5NQ004dkQFfSQerG9p0+6BwSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOThfazFEVFRoMlJBVjlKQjZzYjJuVDdvSEJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8wYzgwMDgtOGE1Mi00MTc2LWI2OTMt
YzQwNTQ0MjgxZWIwLzEvOThfazFEVFRoMlJBVjlKQjZzYjJuVDdvSEJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8wYzgwMDgtOGE1Mi00MTc2LWI2OTMtYzQwNTQ0MjgxZWIw
LzEvOThfazFEVFRoMlJBVjlKQjZzYjJuVDdvSEJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvHiHdMdp
C64RegCx9PAEVyvhWag+jNbDOutNbWpk35rDsltRP7pUI9vUvjnYhlg1E7rRDnJm
VqpAkyrKuVnNMKoWHqkM02xszD2On6dyfTGR4YXu6w/DqXssnPg1tU0HY84BCkSY
7TpwXxByJR//wm02nLAPbET2f95xQdywZSvGfnIXwuIq+qf4sDhCSAbjgVcOl1G2
nfJM5531FIYR/LuRIK0wOCC7sjUZbdkN7Eys+C91USgIyqZmBbfvaRYGtBSXTKyU
rWO5DbpbG3kEdsZimyD/hjvEFyF1pj/0AMDScLnTrWAY2sPEWKhknXY2ueHTLmZO
Psa0YNnC+tNFzQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 15:09:32 2025 by rpki-client