
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
File: 98ci2uJwhooZg4p81JnVnCZ52JE.mft (raw, json)
Hash identifier: AVdGFy+xwOA6G4AuatvQ5prYOmoqnzsJx1H3m3Z+MeI=
Subject key identifier: 3E:91:82:CD:40:2F:C4:29:E4:07:4F:87:D9:DE:2D:B4:E7:D2:31:40
Authority key identifier: F7:C7:22:DA:E2:70:86:8A:19:83:8A:7C:D4:99:D5:9C:26:79:D8:91
Certificate issuer: /CN=f7c722dae270868a19838a7cd499d59c2679d891
Certificate serial: 019769CEBA4DD9A31D8FC5970C5355B368B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
Manifest number: 047B
Signing time: Fri 13 Jun 2025 15:00:45 +0000
Manifest this update: Fri 13 Jun 2025 15:00:45 +0000
Manifest next update: Sat 14 Jun 2025 15:00:45 +0000
Files and hashes: 1: 2GvGxW56EwiXdY8WsCKuvBnzEmE.roa (hash: W3DnYzHP+CF6agGgHp9PqPmuvt/s/L6YaUF7RJiXgPQ=)
2: 98ci2uJwhooZg4p81JnVnCZ52JE.crl (hash: w7cCERBJNKMc6LWrjLlLFhZrNVOcJZ3cyohNP2xbtyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:ba:4d:d9:a3:1d:8f:c5:97:0c:53:55:b3:68:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7c722dae270868a19838a7cd499d59c2679d891
Validity
Not Before: Jun 13 15:00:45 2025 GMT
Not After : Jun 14 15:00:45 2025 GMT
Subject: CN=3e9182cd402fc429e4074f87d9de2db4e7d23140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d0:a5:94:6e:30:5e:68:d7:5e:80:dc:85:f0:
11:8b:b0:0e:1b:8f:13:ab:c1:7d:71:1a:30:9f:9a:
2f:17:d9:2f:3d:98:9e:4a:45:97:fc:78:2c:d2:c9:
47:54:d0:10:28:08:08:c7:87:b7:2c:73:3e:ce:b5:
0d:78:69:7a:e4:f9:dc:a2:06:e4:13:e3:45:fe:c2:
d5:44:df:16:e2:04:61:ff:a3:79:ec:8c:c0:c9:b5:
ce:25:e6:c8:11:56:d5:c5:c1:8f:53:49:52:ec:04:
90:39:27:de:81:8b:7c:02:44:14:5a:80:79:84:d3:
5e:3f:20:a5:c0:58:7a:ec:0b:ea:23:34:4a:1f:26:
a5:f6:53:f0:84:31:84:b5:d2:04:f8:30:44:2a:5d:
d8:04:c6:04:9c:8b:d4:fe:52:e9:36:16:fc:33:82:
eb:72:35:93:97:96:b5:25:1c:30:cc:b6:08:eb:9a:
04:2b:60:c1:24:93:3e:55:d7:e5:8b:e0:dd:aa:2d:
9f:34:4f:8a:54:87:e0:4d:82:50:6f:ff:19:1e:b7:
21:24:ad:ee:b3:67:a4:29:07:f3:40:ef:53:05:f6:
b1:7c:34:c5:a4:eb:d5:61:38:cf:7b:54:cf:4e:f7:
73:c3:2f:ff:31:50:e8:e1:3d:d5:d6:bd:43:30:82:
4a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:91:82:CD:40:2F:C4:29:E4:07:4F:87:D9:DE:2D:B4:E7:D2:31:40
X509v3 Authority Key Identifier:
keyid:F7:C7:22:DA:E2:70:86:8A:19:83:8A:7C:D4:99:D5:9C:26:79:D8:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:3b:d5:69:76:fe:dd:77:4f:b0:e8:ae:fe:25:9f:9f:18:c3:
b4:d5:77:34:a7:f6:7f:f8:a7:43:ce:49:ec:5c:c4:77:51:dc:
ff:62:37:39:80:f9:0d:eb:ac:3a:3a:5f:37:41:ec:7f:c9:45:
6e:3f:7d:5b:b3:72:dd:45:f6:52:dc:c0:10:7f:37:17:14:ed:
30:48:9b:fb:19:ee:91:cf:75:bc:a2:9d:f3:42:a4:7c:6d:07:
01:6f:3a:f0:24:41:8c:db:76:2a:ab:94:3a:8f:e4:43:5d:77:
e1:44:72:32:03:cb:ba:2a:87:66:c8:96:88:80:e6:7c:1f:8b:
e4:7a:90:6f:48:fb:67:91:b6:ab:25:97:c0:07:63:76:49:88:
f9:80:5f:58:49:25:8a:a6:99:2c:6e:bd:78:1d:43:41:a4:22:
aa:a8:0e:67:e5:7d:93:50:74:36:bb:36:bd:41:f3:5b:72:eb:
e8:da:63:68:21:78:98:98:5c:72:25:66:b2:33:94:17:d3:7d:
a3:6d:de:b0:73:26:1e:13:b4:b3:f9:6a:33:e7:6c:96:b9:e9:
cc:95:9e:43:0a:df:ba:c8:94:0d:de:52:04:10:41:7c:d4:5f:
49:c8:01:93:6a:02:02:a8:97:c2:ff:11:52:ed:7c:6a:04:8a:
01:25:a0:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 20:18:57 2025 by rpki-client