Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
File: s-98dqs-aXHY-HMC3fksxgmISeo.mft (raw, json)
Hash identifier: ZNeKYzhS9MSrS4BkxP7tldnALPdAiBkFkTpCHnpjTVc=
Subject key identifier: 2E:A2:C5:64:27:2E:27:E5:AE:FF:54:E8:DC:2D:CD:99:D5:32:0E:AC
Authority key identifier: B3:EF:7C:76:AB:3E:69:71:D8:F8:73:02:DD:F9:2C:C6:09:88:49:EA
Certificate issuer: /CN=b3ef7c76ab3e6971d8f87302ddf92cc6098849ea
Certificate serial: 01989F710901F77EC2A514B27C21A9E5274D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
Manifest number: 1630
Signing time: Tue 12 Aug 2025 18:00:41 +0000
Manifest this update: Tue 12 Aug 2025 18:00:41 +0000
Manifest next update: Wed 13 Aug 2025 18:00:41 +0000
Files and hashes: 1: s-98dqs-aXHY-HMC3fksxgmISeo.crl (hash: wsM7ZV4RdWxt76yKiruotiFHBYnNgixeCBBr87oZs/k=)
2: uvesjoVgl9NM-m1BIFM5Yl9dGPo.roa (hash: BDyqIMMKzj8ksjoDvptTiXpxyPNIyT6fdfz8Vi/kBoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:71:09:01:f7:7e:c2:a5:14:b2:7c:21:a9:e5:27:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3ef7c76ab3e6971d8f87302ddf92cc6098849ea
Validity
Not Before: Aug 12 18:00:41 2025 GMT
Not After : Aug 13 18:00:41 2025 GMT
Subject: CN=2ea2c564272e27e5aeff54e8dc2dcd99d5320eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:05:a3:57:29:48:22:93:06:e3:a5:13:a0:be:
db:5f:bc:5d:af:bf:fc:22:e9:d4:ce:9d:0d:50:a0:
8b:55:d5:a8:3e:a0:b4:48:5d:66:e4:97:20:30:e9:
eb:58:f5:c6:a8:35:43:33:2c:14:08:11:bd:0d:ea:
95:82:50:29:5e:34:59:75:05:01:b8:9d:cb:f2:cc:
8b:34:a2:eb:03:d6:5d:5a:ff:c2:77:fb:2e:c4:f3:
18:e6:2a:35:37:d0:4d:7f:65:ee:7a:29:3e:7c:3a:
f3:71:e2:84:ce:2d:1a:53:20:47:c5:bb:bc:f5:8a:
19:10:14:98:a4:96:6b:1e:3d:b1:05:39:fd:10:e9:
65:36:a5:61:3a:53:fc:de:b6:1d:76:28:d0:7a:fd:
ee:00:27:22:27:0f:5b:30:bc:5b:7d:67:a0:a1:85:
8b:a2:ab:ba:a0:22:ba:33:ba:19:56:ee:fd:32:6c:
1c:56:c7:f1:0f:b2:84:a7:d7:db:17:ad:e2:39:21:
af:37:bc:6c:94:eb:3f:13:8f:40:a0:6d:cc:1e:68:
7f:91:0a:f3:5c:f5:3e:ab:7f:9a:7e:ad:6d:44:03:
cc:46:dd:d2:a1:42:df:d6:e5:1e:5a:4b:1c:c2:7b:
3e:56:1a:de:f0:de:59:7c:3a:24:f4:81:67:5d:df:
84:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A2:C5:64:27:2E:27:E5:AE:FF:54:E8:DC:2D:CD:99:D5:32:0E:AC
X509v3 Authority Key Identifier:
keyid:B3:EF:7C:76:AB:3E:69:71:D8:F8:73:02:DD:F9:2C:C6:09:88:49:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:09:fa:33:1e:70:83:d9:bd:5e:19:28:b9:ca:b2:d5:13:24:
9f:86:d3:8e:ec:8c:b8:fa:d3:20:2f:f7:51:5a:8e:cc:a9:79:
95:55:a7:31:7c:e9:4a:c9:ee:ec:04:c9:16:93:fd:bf:f3:8f:
6a:90:50:2c:c1:89:b3:72:c0:a1:47:ab:9b:e0:1b:ab:8c:aa:
51:57:ae:80:42:15:f1:a6:80:c2:d6:28:35:47:6b:26:49:27:
da:a3:24:ac:53:62:b1:ac:56:6e:a1:da:2a:96:2c:a0:ed:a8:
24:57:81:b7:50:8e:13:47:24:f0:d0:2f:81:b6:1b:cf:5a:d6:
05:49:17:b6:91:b7:cd:1b:9a:2f:6c:24:3b:db:31:c5:a1:e0:
60:47:78:f8:3b:c7:eb:11:e5:26:40:5f:1f:4c:c5:20:e6:13:
44:61:59:76:42:70:c9:48:15:eb:9d:93:88:7f:82:69:aa:13:
c6:15:e6:34:50:34:4f:1e:7c:8e:bf:d5:57:5d:78:ec:c4:fd:
d6:27:1d:d0:da:a8:84:4c:9c:d9:44:a6:8d:6b:99:3a:27:98:
7c:1b:ca:16:fb:61:e4:55:69:ad:8d:c7:0c:21:bd:25:90:2b:
50:df:08:be:80:94:d8:3a:1c:d3:1e:4d:b5:bc:b9:aa:f6:80:
53:63:79:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZifcQkB937CpRSyfCGp5SdNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZWY3Yzc2YWIzZTY5NzFkOGY4NzMwMmRkZjkyY2M2MDk4
ODQ5ZWEwHhcNMjUwODEyMTgwMDQxWhcNMjUwODEzMTgwMDQxWjAzMTEwLwYDVQQD
EygyZWEyYzU2NDI3MmUyN2U1YWVmZjU0ZThkYzJkY2Q5OWQ1MzIwZWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwWjVylIIpMG46UToL7bX7xdr7/8
IunUzp0NUKCLVdWoPqC0SF1m5JcgMOnrWPXGqDVDMywUCBG9DeqVglApXjRZdQUB
uJ3L8syLNKLrA9ZdWv/Cd/suxPMY5io1N9BNf2Xueik+fDrzceKEzi0aUyBHxbu8
9YoZEBSYpJZrHj2xBTn9EOllNqVhOlP83rYddijQev3uACciJw9bMLxbfWegoYWL
oqu6oCK6M7oZVu79MmwcVsfxD7KEp9fbF63iOSGvN7xslOs/E49AoG3MHmh/kQrz
XPU+q3+afq1tRAPMRt3SoULf1uUeWkscwns+Vhre8N5ZfDok9IFnXd+ESQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC6ixWQnLiflrv9U6NwtzZnVMg6sMB8GA1UdIwQY
MBaAFLPvfHarPmlx2PhzAt35LMYJiEnqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcy05OGRxcy1hWEhZLUhNQzNma3N4Z21JU2VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS83NDk4MGUtNzRmOS00YjVlLTljZjIt
Njk3MTFmZTgzZDIzLzEvcy05OGRxcy1hWEhZLUhNQzNma3N4Z21JU2VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS83NDk4MGUtNzRmOS00YjVlLTljZjItNjk3MTFmZTgzZDIz
LzEvcy05OGRxcy1hWEhZLUhNQzNma3N4Z21JU2VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMAn6Mx5w
g9m9Xhkoucqy1RMkn4bTjuyMuPrTIC/3UVqOzKl5lVWnMXzpSsnu7ATJFpP9v/OP
apBQLMGJs3LAoUerm+Abq4yqUVeugEIV8aaAwtYoNUdrJkkn2qMkrFNisaxWbqHa
KpYsoO2oJFeBt1COE0ck8NAvgbYbz1rWBUkXtpG3zRuaL2wkO9sxxaHgYEd4+DvH
6xHlJkBfH0zFIOYTRGFZdkJwyUgV652TiH+CaaoTxhXmNFA0Tx58jr/VV1147MT9
1icd0NqohEyc2USmjWuZOieYfBvKFvth5FVprY3HDCG9JZArUN8IvoCU2Doc0x5N
tby5qvaAU2N5IA==
-----END CERTIFICATE-----
Generated at Wed Aug 13 00:10:44 2025 by rpki-client