Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.mft
File: 97KiPZsF9XV53i8CRJtmYD4-Vzo.mft (raw, json)
Hash identifier: Ex/OmkrdiH6VWue+aZ8GKgwuo05uaEyBTwtbb1qklqU=
Subject key identifier: 7B:3A:D7:D1:D0:A2:86:92:CF:15:CA:C2:C4:72:9B:69:C7:F8:EC:FE
Authority key identifier: F7:B2:A2:3D:9B:05:F5:75:79:DE:2F:02:44:9B:66:60:3E:3E:57:3A
Certificate issuer: /CN=f7b2a23d9b05f57579de2f02449b66603e3e573a
Certificate serial: 0199FD3405045CA6A0BD0218B4F48B9ECF2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97KiPZsF9XV53i8CRJtmYD4-Vzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.mft
Manifest number: 1296
Signing time: Sun 19 Oct 2025 16:01:08 +0000
Manifest this update: Sun 19 Oct 2025 16:01:08 +0000
Manifest next update: Mon 20 Oct 2025 16:01:08 +0000
Files and hashes: 1: 97KiPZsF9XV53i8CRJtmYD4-Vzo.crl (hash: RGJF+GTBgo7Ktxc2CfIZ1wlieaObkntRQjFaSNtLOrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/97KiPZsF9XV53i8CRJtmYD4-Vzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:05:04:5c:a6:a0:bd:02:18:b4:f4:8b:9e:cf:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b2a23d9b05f57579de2f02449b66603e3e573a
Validity
Not Before: Oct 19 16:01:08 2025 GMT
Not After : Oct 20 16:01:08 2025 GMT
Subject: CN=7b3ad7d1d0a28692cf15cac2c4729b69c7f8ecfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:48:ce:ae:c8:33:bf:f0:a3:6d:76:9d:54:29:
60:a6:c7:22:27:ac:1b:39:3c:6f:7f:a0:f7:71:14:
9d:72:8f:a9:55:c3:ad:15:9a:42:a9:c1:69:94:46:
75:2b:b2:49:a3:10:ce:21:32:08:bf:aa:e9:de:39:
c8:cf:b0:c7:15:58:6b:1e:4d:be:88:72:2c:97:4c:
93:de:0f:81:4b:02:ea:6e:a9:fa:9a:d9:29:12:d1:
5a:9f:4f:af:a4:94:07:d4:a5:36:83:42:ed:00:a6:
23:93:43:0a:f5:88:fa:f2:8b:a5:8d:25:70:b8:8a:
3d:85:65:5e:a2:5e:7a:41:ac:5c:d9:03:50:c9:c4:
b3:2e:a1:ee:cc:4c:a8:d3:a2:9b:c6:18:aa:8f:38:
2a:75:d2:dc:23:35:d7:b4:29:5f:ee:af:a0:90:d3:
15:62:bb:c0:e9:92:2a:df:4b:d9:c3:80:49:06:cf:
7c:c0:15:d8:fc:01:e2:79:16:55:7b:66:75:ce:5d:
cd:ea:b4:e9:ac:e6:3f:c9:c9:97:6a:8b:09:7a:cf:
6d:65:fd:dd:e8:f0:de:ea:f3:84:78:38:fa:1d:af:
a8:0e:23:96:bb:9a:e4:10:30:34:73:68:54:a5:d1:
6b:17:f8:55:33:ae:9e:8a:f2:19:7c:5e:19:6a:47:
be:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:3A:D7:D1:D0:A2:86:92:CF:15:CA:C2:C4:72:9B:69:C7:F8:EC:FE
X509v3 Authority Key Identifier:
keyid:F7:B2:A2:3D:9B:05:F5:75:79:DE:2F:02:44:9B:66:60:3E:3E:57:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97KiPZsF9XV53i8CRJtmYD4-Vzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:6e:66:f7:71:62:72:c8:6b:fd:b4:5f:69:ce:b4:1e:ea:4e:
08:cb:27:23:62:20:90:f6:0e:ea:ac:2c:39:9f:c9:0d:90:97:
a1:f8:af:39:0c:7f:e7:d7:aa:f3:d7:10:c3:59:66:4b:5e:3a:
a9:a6:6b:86:f8:ab:0b:2f:0c:2d:b1:77:9d:60:76:8e:0e:0d:
35:21:2e:38:48:c2:63:e5:86:2f:6d:3c:79:d9:10:9e:b8:9c:
77:b1:7f:a2:f5:fa:07:89:f0:de:a2:fb:62:a3:83:3c:e6:9e:
6d:09:d5:ac:66:0d:78:26:f7:f3:e9:75:23:b2:60:57:c9:8a:
b9:ca:c1:91:36:8e:7f:63:90:71:c3:81:3c:f9:55:bb:56:2a:
be:52:14:27:85:0b:ee:1c:83:12:79:b2:db:77:3b:ee:9d:32:
e7:74:cd:f0:ca:3e:8b:31:d5:8f:ff:2f:ad:b2:e9:10:04:4e:
70:0e:35:6d:1c:91:17:c2:b5:55:6b:c4:d1:94:c1:f0:ab:a8:
33:5b:80:3c:df:52:39:80:b2:be:e0:8e:35:49:de:a6:8c:80:
10:a2:37:02:48:0d:ba:49:84:f5:46:9b:ec:43:1e:ef:cb:fe:
48:b0:02:e4:7a:7d:8f:6e:8f:5d:16:d6:2b:61:21:37:6f:bf:
53:05:a4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:41 2025 by rpki-client