Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0c8008-8a52-4176-b693-c40544281eb0/1/98_k1DTTh2RAV9JB6sb2nT7oHBI.mft
File: 98_k1DTTh2RAV9JB6sb2nT7oHBI.mft (raw, json)
Hash identifier: jqchIlOcFQ9LQvpDN5MaiNz/ZzwO0AqJDjy4gC3aHpM=
Subject key identifier: E6:0E:41:85:60:05:21:A2:DF:B7:18:05:21:88:18:17:86:38:45:D7
Authority key identifier: F7:CF:E4:D4:34:D3:87:64:40:57:D2:41:EA:C6:F6:9D:3E:E8:1C:12
Certificate issuer: /CN=f7cfe4d434d387644057d241eac6f69d3ee81c12
Certificate serial: 019A4DE154DBCDF60709A3F642CF3BA5ED12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/98_k1DTTh2RAV9JB6sb2nT7oHBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/0c8008-8a52-4176-b693-c40544281eb0/1/98_k1DTTh2RAV9JB6sb2nT7oHBI.mft
Manifest number: 0932
Signing time: Tue 04 Nov 2025 08:00:04 +0000
Manifest this update: Tue 04 Nov 2025 08:00:04 +0000
Manifest next update: Wed 05 Nov 2025 08:00:04 +0000
Files and hashes: 1: 98_k1DTTh2RAV9JB6sb2nT7oHBI.crl (hash: ZR3TI8F31RfBeweqOk4WbAQCaENGvaWyCyfNpSVeBQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/0c8008-8a52-4176-b693-c40544281eb0/1/98_k1DTTh2RAV9JB6sb2nT7oHBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/0c8008-8a52-4176-b693-c40544281eb0/1/98_k1DTTh2RAV9JB6sb2nT7oHBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/98_k1DTTh2RAV9JB6sb2nT7oHBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:54:db:cd:f6:07:09:a3:f6:42:cf:3b:a5:ed:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7cfe4d434d387644057d241eac6f69d3ee81c12
Validity
Not Before: Nov 4 08:00:04 2025 GMT
Not After : Nov 5 08:00:04 2025 GMT
Subject: CN=e60e4185600521a2dfb7180521881817863845d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ee:8b:e3:ec:73:d9:f8:de:b4:a9:eb:91:fd:
ad:5a:75:ac:a8:6b:40:a6:39:4f:13:95:e3:e3:7d:
e0:68:b5:60:95:5a:a3:1b:93:c9:f5:5b:bd:cd:33:
5e:a2:25:03:4f:ce:73:8c:3e:bb:84:f9:01:4d:80:
cc:89:db:9e:0f:33:23:be:54:53:16:37:94:f8:fd:
65:12:d1:e9:84:a3:68:54:34:93:d2:43:57:29:21:
32:e8:87:cd:4f:f8:03:28:82:09:44:66:df:9d:ba:
5a:e3:49:22:68:a6:38:89:de:f1:0e:ec:5b:36:e2:
2a:60:0f:9d:60:6a:48:46:c2:53:4f:2f:02:e9:d4:
87:27:15:76:43:8d:8e:63:f4:94:73:b3:77:0d:6c:
b6:2d:9d:d1:6a:29:af:7b:77:59:b7:c5:24:77:80:
63:37:a0:05:d7:a7:d0:ae:28:41:b3:f9:0e:57:de:
d5:05:98:d3:f4:8b:d2:71:11:42:e2:aa:67:0a:8e:
c7:0a:c2:49:8d:04:5d:af:f0:50:64:71:2e:b9:75:
71:02:a9:54:97:2a:9e:83:1b:15:a8:b2:9b:a8:36:
52:d8:a8:c2:98:97:36:bd:e7:7a:ef:de:7f:eb:9d:
05:29:bb:5c:b8:c5:e9:81:a1:46:d3:91:0d:c1:d8:
ea:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:0E:41:85:60:05:21:A2:DF:B7:18:05:21:88:18:17:86:38:45:D7
X509v3 Authority Key Identifier:
keyid:F7:CF:E4:D4:34:D3:87:64:40:57:D2:41:EA:C6:F6:9D:3E:E8:1C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98_k1DTTh2RAV9JB6sb2nT7oHBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0c8008-8a52-4176-b693-c40544281eb0/1/98_k1DTTh2RAV9JB6sb2nT7oHBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0c8008-8a52-4176-b693-c40544281eb0/1/98_k1DTTh2RAV9JB6sb2nT7oHBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:99:60:e5:31:76:c6:f9:18:cd:c7:19:5f:c2:67:c3:59:63:
08:ec:93:f2:eb:b2:c4:2b:d2:38:34:64:ca:3e:73:1d:23:f9:
47:bb:a6:83:59:33:c3:76:08:6e:b8:01:25:d9:36:ae:20:34:
64:66:a9:d0:60:08:ef:85:58:0b:20:ad:9b:7e:6a:3f:fc:8e:
e7:c3:64:f0:46:c3:fe:05:b1:ca:37:1a:3c:2d:fd:c5:ed:17:
48:31:f4:0b:b4:a4:6e:ec:51:33:45:b5:05:3a:90:c8:60:66:
b0:73:5b:2a:71:5a:be:09:be:2f:8f:37:49:a9:0c:d9:e7:04:
98:9f:2c:4f:54:0a:5d:4b:fb:71:6a:c9:fc:88:84:fe:e7:52:
04:e2:f6:41:4f:8b:c5:71:c3:b0:87:46:a4:54:4f:d4:6c:76:
95:f2:40:40:05:d2:71:a5:e7:d5:19:61:44:ef:24:fa:0d:49:
74:4c:6b:be:0b:43:8b:af:d3:48:14:4c:a4:3f:94:9d:d8:8f:
fe:96:07:9b:97:98:28:1a:ca:a9:cc:6a:4b:e5:53:61:c6:a2:
82:b0:22:fc:2c:a8:b1:f0:d8:01:ba:2b:bd:e0:12:65:12:39:
f9:b4:1b:df:b8:87:69:8b:61:01:64:73:80:aa:72:47:0a:ed:
ca:c2:76:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:37 2025 by rpki-client