Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
File: s-98dqs-aXHY-HMC3fksxgmISeo.mft (raw, json)
Hash identifier: 8o8H/6sUd1NvqYJiRC1czo+VJecbgD7dJzhM4cNoWxc=
Subject key identifier: 4C:F6:80:7E:EF:B1:A3:A6:50:F1:55:73:0A:26:55:84:5E:87:BF:66
Authority key identifier: B3:EF:7C:76:AB:3E:69:71:D8:F8:73:02:DD:F9:2C:C6:09:88:49:EA
Certificate issuer: /CN=b3ef7c76ab3e6971d8f87302ddf92cc6098849ea
Certificate serial: 019A4E1915E2CA182ACBEDFBBA482EDA33AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 09:00:58 +0000
Manifest this update: Tue 04 Nov 2025 09:00:58 +0000
Manifest next update: Wed 05 Nov 2025 09:00:58 +0000
Files and hashes: 1: s-98dqs-aXHY-HMC3fksxgmISeo.crl (hash: TiQekdywNTK0EKD1Ngcfe3wbMF+XcK+Sq6zAadZJxC8=)
2: uvesjoVgl9NM-m1BIFM5Yl9dGPo.roa (hash: BDyqIMMKzj8ksjoDvptTiXpxyPNIyT6fdfz8Vi/kBoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:15:e2:ca:18:2a:cb:ed:fb:ba:48:2e:da:33:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3ef7c76ab3e6971d8f87302ddf92cc6098849ea
Validity
Not Before: Nov 4 09:00:58 2025 GMT
Not After : Nov 5 09:00:58 2025 GMT
Subject: CN=4cf6807eefb1a3a650f155730a2655845e87bf66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ad:20:13:f4:b8:73:a7:aa:d6:8a:68:d3:ee:
4a:6c:93:e2:46:40:78:53:19:df:ca:5e:64:72:fc:
50:11:05:3d:cc:ab:cc:af:f5:cc:c6:aa:46:6a:40:
9f:12:83:47:d5:a9:28:86:f6:50:82:d2:43:af:6a:
ea:c0:4f:24:66:e7:ca:71:f4:89:38:4a:2b:f6:5b:
eb:4d:e8:d4:b5:f0:84:e4:f3:28:1d:51:00:ed:4c:
70:8d:b1:02:44:1e:cc:d6:5d:73:66:37:da:b7:f8:
6b:7f:91:d5:ac:84:b0:18:c0:b2:2f:76:2c:7d:31:
fd:a0:b7:1d:47:8b:8e:4d:98:32:15:53:bf:f1:b3:
c3:b6:63:47:cf:ba:ab:e7:7e:32:95:dd:2c:c3:c5:
6f:9b:8d:c6:23:ef:79:1c:82:b6:88:7e:42:1f:0c:
15:34:df:b2:e9:ab:6c:cf:e7:9a:7a:b1:8f:48:a5:
de:39:ff:7a:ec:05:ce:63:4c:34:70:12:06:eb:60:
10:4a:3a:9c:2f:8e:2a:2d:5c:4d:ff:b2:81:2f:a8:
b5:d7:3f:4e:91:37:39:2b:9b:39:51:36:00:8f:57:
99:9e:c9:57:0f:0f:a7:3f:53:50:66:5f:7c:5c:89:
bc:e5:88:82:64:b5:a9:f6:52:99:7a:79:63:e6:07:
2a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F6:80:7E:EF:B1:A3:A6:50:F1:55:73:0A:26:55:84:5E:87:BF:66
X509v3 Authority Key Identifier:
keyid:B3:EF:7C:76:AB:3E:69:71:D8:F8:73:02:DD:F9:2C:C6:09:88:49:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:1d:c4:94:8b:72:bf:cb:90:02:f2:e1:b5:bb:7f:9f:4c:65:
59:95:9f:ea:bc:ee:5f:5e:7e:84:b2:38:d0:bd:e1:30:d8:73:
29:b0:ba:8b:ac:ee:24:0c:6b:53:7b:de:93:4c:fe:3c:88:4b:
92:ba:ea:b7:4d:5a:12:c2:41:80:07:8e:28:32:b3:0e:85:2e:
d5:ff:61:25:29:2c:50:05:4e:3e:56:32:d1:a7:54:8b:ca:b0:
4c:97:cc:97:88:0b:55:b5:18:e2:f7:5d:98:99:57:7b:67:c1:
5c:7e:59:b2:49:17:99:e8:3c:64:5e:04:0f:63:bc:dd:cf:a4:
38:78:62:09:f2:52:65:bd:4d:93:7f:2b:49:de:ca:35:32:42:
fa:dd:99:a4:f7:36:c9:f6:2b:2a:de:0e:87:44:d4:0f:80:8d:
0f:0b:f9:a7:b1:c9:fd:0b:b1:c8:d2:cd:4f:1e:2f:a5:f5:49:
0e:6d:f9:2c:e0:60:3b:e4:95:26:cf:38:86:7a:b9:6e:4a:7a:
72:d3:aa:be:b7:db:af:06:28:8c:bf:4e:6a:df:ee:6e:ac:ec:
8f:1b:b3:40:49:43:90:af:87:0a:e1:6d:c1:9a:29:04:c0:6d:
84:f9:87:d5:c4:b7:42:a6:e2:e7:dc:07:14:db:a8:5f:ed:bb:
d8:4a:b0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:21 2025 by rpki-client