Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
File: 98ci2uJwhooZg4p81JnVnCZ52JE.mft (raw, json)
Hash identifier: OWeeS5JL5qLEzLf1wXa08/sXTMZ2lyB0vUgm0xbe2Qk=
Subject key identifier: 50:8F:A7:50:97:73:9F:2E:48:12:BC:46:71:AA:DA:24:1C:1E:6D:0D
Authority key identifier: F7:C7:22:DA:E2:70:86:8A:19:83:8A:7C:D4:99:D5:9C:26:79:D8:91
Certificate issuer: /CN=f7c722dae270868a19838a7cd499d59c2679d891
Certificate serial: 019A4D7447D346AC5269915A1F42B4EA3191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
Manifest number: 05FA
Signing time: Tue 04 Nov 2025 06:00:57 +0000
Manifest this update: Tue 04 Nov 2025 06:00:57 +0000
Manifest next update: Wed 05 Nov 2025 06:00:57 +0000
Files and hashes: 1: 2GvGxW56EwiXdY8WsCKuvBnzEmE.roa (hash: W3DnYzHP+CF6agGgHp9PqPmuvt/s/L6YaUF7RJiXgPQ=)
2: 98ci2uJwhooZg4p81JnVnCZ52JE.crl (hash: tozLU130G9RLMnBX8cB4N6QBzHSmsoCqF0pLmQr0J2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:47:d3:46:ac:52:69:91:5a:1f:42:b4:ea:31:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7c722dae270868a19838a7cd499d59c2679d891
Validity
Not Before: Nov 4 06:00:57 2025 GMT
Not After : Nov 5 06:00:57 2025 GMT
Subject: CN=508fa75097739f2e4812bc4671aada241c1e6d0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3e:56:25:fb:5e:1d:2e:45:0a:90:47:76:f6:
cd:10:16:22:5b:fb:b4:30:59:ef:95:97:ad:74:fb:
6f:bb:9e:63:18:36:3c:c1:3e:b2:5e:fb:0e:1c:91:
45:2e:55:03:89:74:e6:5f:7e:69:03:48:eb:6f:85:
e0:29:17:c4:a4:0a:c6:5c:d3:f6:a2:9f:6e:87:d2:
50:dc:18:a5:2a:c1:d6:8c:ec:17:b4:d1:4a:dc:7e:
68:8c:15:04:1e:47:82:b5:12:13:b6:e7:d4:1a:17:
75:c3:20:0e:8d:3f:bf:bb:5a:3f:94:08:7f:64:1b:
12:61:fa:7a:a5:7b:31:cd:0b:89:d5:7b:40:53:88:
6c:88:3a:a2:4c:d3:49:6e:5a:bf:8e:a4:7a:98:9c:
c7:4e:59:af:84:80:3c:08:fc:2f:2b:f3:26:49:de:
24:67:4d:a4:5c:fa:0d:23:ce:b4:81:3f:7a:49:f1:
ed:bb:dd:db:84:d5:11:d7:70:f2:3d:4c:d6:7f:2e:
60:ef:db:0b:e9:51:0e:96:54:35:b6:d8:61:e4:ac:
1b:6e:d3:cb:95:f1:4f:c8:ce:5a:f5:6c:be:36:35:
9f:d4:e8:42:e3:33:9d:73:e1:56:35:ad:9f:28:dd:
49:5e:97:d8:08:24:7e:41:85:ec:9e:c3:98:f1:e8:
63:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:8F:A7:50:97:73:9F:2E:48:12:BC:46:71:AA:DA:24:1C:1E:6D:0D
X509v3 Authority Key Identifier:
keyid:F7:C7:22:DA:E2:70:86:8A:19:83:8A:7C:D4:99:D5:9C:26:79:D8:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:17:c0:58:a1:36:10:a6:be:46:e1:8e:e8:80:6d:a7:be:ff:
50:9f:20:25:ca:92:30:01:bb:05:c2:aa:ae:c1:09:fe:3e:13:
04:d5:00:15:72:8b:af:4c:77:84:ca:a5:f8:30:0b:03:8d:12:
cd:21:f1:7d:e6:35:7d:6d:18:a4:3d:df:40:bc:ae:28:9c:20:
4b:a9:57:4b:db:7d:43:c6:9e:cc:b5:82:72:6d:dc:3a:8c:dd:
a9:47:05:2b:70:8b:4d:45:84:ac:b9:f8:cd:9a:33:d0:e2:9d:
74:0b:20:2c:59:fc:8e:6c:c3:d1:8e:c0:6c:c2:29:4e:99:54:
47:7a:2a:69:d0:cc:7f:a9:c0:2e:b7:09:b0:28:3f:c8:58:39:
83:13:25:94:e3:e4:6f:3a:44:09:d1:2e:3e:d0:c0:59:29:b9:
3b:fd:25:ef:0c:29:3f:f4:4d:dd:7b:3d:e1:72:67:d8:b3:3b:
e9:25:31:18:c4:35:7f:d4:9a:fb:f4:c2:70:4f:4b:a6:17:3e:
00:75:87:be:da:5b:48:26:51:19:09:b8:aa:3a:00:12:98:90:
70:bc:f8:2f:f1:50:14:70:47:47:76:fd:47:89:33:d7:ae:c1:
9f:66:be:6a:d7:03:28:09:2c:01:0b:07:a3:b2:a1:7a:c2:11:
6f:ab:11:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:48:48 2025 by rpki-client