Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
File: s-98dqs-aXHY-HMC3fksxgmISeo.mft (raw, json)
Hash identifier: IlzmLq0JznFCzM9LghLdEew8mJY6bsASVBYBGnIldiQ=
Subject key identifier: 27:42:77:DA:EF:D0:FC:91:FC:1F:6C:1A:EF:54:85:18:38:46:16:55
Authority key identifier: B3:EF:7C:76:AB:3E:69:71:D8:F8:73:02:DD:F9:2C:C6:09:88:49:EA
Certificate issuer: /CN=b3ef7c76ab3e6971d8f87302ddf92cc6098849ea
Certificate serial: 0197722CEB8D9DF9E7698A9D467C52D3D795
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
Manifest number: 1594
Signing time: Sun 15 Jun 2025 06:00:35 +0000
Manifest this update: Sun 15 Jun 2025 06:00:35 +0000
Manifest next update: Mon 16 Jun 2025 06:00:35 +0000
Files and hashes: 1: s-98dqs-aXHY-HMC3fksxgmISeo.crl (hash: 0TuCqSYAhyYVPKlaVjyJUj4zJjlbnxw33XU/LeVkr1g=)
2: uvesjoVgl9NM-m1BIFM5Yl9dGPo.roa (hash: BDyqIMMKzj8ksjoDvptTiXpxyPNIyT6fdfz8Vi/kBoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:2c:eb:8d:9d:f9:e7:69:8a:9d:46:7c:52:d3:d7:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3ef7c76ab3e6971d8f87302ddf92cc6098849ea
Validity
Not Before: Jun 15 06:00:35 2025 GMT
Not After : Jun 16 06:00:35 2025 GMT
Subject: CN=274277daefd0fc91fc1f6c1aef54851838461655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cb:13:4e:e9:7c:54:8d:61:d1:f7:fd:43:d2:
bd:e1:6c:4e:1c:e7:61:19:d7:39:7f:e4:3a:b6:55:
c9:df:14:eb:e6:e1:03:7d:10:61:5c:57:5e:42:a9:
d2:e4:ed:2a:81:45:6c:16:9d:37:81:5d:12:f0:33:
a0:34:37:51:07:26:8e:e8:73:c1:0d:67:4e:45:9a:
74:c1:ff:68:75:09:ab:3f:f2:3f:1f:d7:5d:2b:1b:
fd:4b:19:38:3d:15:d4:3d:88:b1:f6:d5:9e:63:0e:
40:14:3d:16:f3:64:83:b5:a4:30:af:8b:32:b4:a4:
c0:e8:ab:30:75:e7:ac:ff:45:06:c0:af:47:5f:13:
c8:2e:46:57:39:2e:1b:c8:6d:f5:6d:b4:63:1b:99:
20:42:22:7b:a2:26:c6:61:ca:60:67:9f:be:6b:a5:
62:f1:64:2b:e2:70:e1:23:93:ad:e1:f4:35:e4:85:
f4:15:9b:72:e5:8f:da:54:83:97:f5:e7:48:83:10:
77:0e:1a:02:d2:cd:2e:e1:9d:23:ea:33:b6:7d:01:
df:e7:f9:63:dc:f1:11:f7:37:06:b8:b4:6c:f5:8c:
09:17:79:fd:81:27:c7:88:45:e8:99:e2:c3:4f:4b:
94:46:07:b8:4c:d2:41:8a:c1:61:9d:f2:6b:85:d9:
8a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:42:77:DA:EF:D0:FC:91:FC:1F:6C:1A:EF:54:85:18:38:46:16:55
X509v3 Authority Key Identifier:
keyid:B3:EF:7C:76:AB:3E:69:71:D8:F8:73:02:DD:F9:2C:C6:09:88:49:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:f1:42:56:2b:38:42:6c:4a:96:33:68:19:cc:37:49:2e:c4:
47:b2:93:34:8f:71:97:2b:87:5b:08:0d:ec:a3:cd:8e:98:c7:
a0:7e:1e:ef:ac:14:88:af:6b:fa:31:69:85:d2:06:c3:0a:a4:
e2:9a:c0:42:88:51:d8:ff:c5:50:d3:16:5b:37:1e:0f:37:5f:
fc:dd:07:46:84:1d:49:3c:87:ae:87:1f:87:28:33:2a:54:e5:
cc:06:44:3f:ed:a7:9a:8e:36:00:12:eb:86:22:0f:22:9d:0d:
9e:22:65:90:4a:f3:4f:91:49:99:1c:53:ad:b7:00:d1:5e:3c:
87:82:ec:0f:0f:34:d6:84:22:f4:1c:24:21:99:b2:88:c1:c0:
fd:51:e5:e7:dd:3b:9e:89:ff:02:27:aa:23:2e:51:88:a1:04:
4c:58:10:1f:f0:17:38:12:25:74:b5:3a:88:2b:a6:f0:73:ba:
1b:f0:53:0a:e0:de:17:c6:3e:96:f6:d6:af:e3:11:34:5a:28:
01:30:5d:6a:0d:e8:e1:8f:97:53:a5:89:94:0e:ad:f2:c3:1d:
1e:a1:a8:52:b2:c3:2e:a2:90:69:54:77:3e:5f:ca:42:9a:ff:
b6:71:c5:6c:4b:5d:24:ae:a8:af:9b:69:74:c2:25:96:64:43:
f0:b6:33:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdyLOuNnfnnaYqdRnxS09eVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZWY3Yzc2YWIzZTY5NzFkOGY4NzMwMmRkZjkyY2M2MDk4
ODQ5ZWEwHhcNMjUwNjE1MDYwMDM1WhcNMjUwNjE2MDYwMDM1WjAzMTEwLwYDVQQD
EygyNzQyNzdkYWVmZDBmYzkxZmMxZjZjMWFlZjU0ODUxODM4NDYxNjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApssTTul8VI1h0ff9Q9K94WxOHOdh
Gdc5f+Q6tlXJ3xTr5uEDfRBhXFdeQqnS5O0qgUVsFp03gV0S8DOgNDdRByaO6HPB
DWdORZp0wf9odQmrP/I/H9ddKxv9Sxk4PRXUPYix9tWeYw5AFD0W82SDtaQwr4sy
tKTA6Kswdees/0UGwK9HXxPILkZXOS4byG31bbRjG5kgQiJ7oibGYcpgZ5++a6Vi
8WQr4nDhI5Ot4fQ15IX0FZty5Y/aVIOX9edIgxB3DhoC0s0u4Z0j6jO2fQHf5/lj
3PER9zcGuLRs9YwJF3n9gSfHiEXomeLDT0uURge4TNJBisFhnfJrhdmKOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCdCd9rv0PyR/B9sGu9UhRg4RhZVMB8GA1UdIwQY
MBaAFLPvfHarPmlx2PhzAt35LMYJiEnqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcy05OGRxcy1hWEhZLUhNQzNma3N4Z21JU2VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS83NDk4MGUtNzRmOS00YjVlLTljZjIt
Njk3MTFmZTgzZDIzLzEvcy05OGRxcy1hWEhZLUhNQzNma3N4Z21JU2VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS83NDk4MGUtNzRmOS00YjVlLTljZjItNjk3MTFmZTgzZDIz
LzEvcy05OGRxcy1hWEhZLUhNQzNma3N4Z21JU2VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk/FCVis4
QmxKljNoGcw3SS7ER7KTNI9xlyuHWwgN7KPNjpjHoH4e76wUiK9r+jFphdIGwwqk
4prAQohR2P/FUNMWWzceDzdf/N0HRoQdSTyHrocfhygzKlTlzAZEP+2nmo42ABLr
hiIPIp0NniJlkErzT5FJmRxTrbcA0V48h4LsDw801oQi9BwkIZmyiMHA/VHl5907
non/AieqIy5RiKEETFgQH/AXOBIldLU6iCum8HO6G/BTCuDeF8Y+lvbWr+MRNFoo
ATBdag3o4Y+XU6WJlA6t8sMdHqGoUrLDLqKQaVR3Pl/KQpr/tnHFbEtdJK6or5tp
dMIllmRD8LYzPg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 08:57:16 2025 by rpki-client