Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.mft
File: 97KiPZsF9XV53i8CRJtmYD4-Vzo.mft (raw, json)
Hash identifier: vCq+n+xWTq4ACd7+ZRrYNxr4PquUn4WHeMdx2JkZ1gU=
Subject key identifier: B1:7F:9C:E6:13:2C:C1:B5:61:6A:3A:CB:2E:08:70:19:B5:30:D4:F0
Authority key identifier: F7:B2:A2:3D:9B:05:F5:75:79:DE:2F:02:44:9B:66:60:3E:3E:57:3A
Certificate issuer: /CN=f7b2a23d9b05f57579de2f02449b66603e3e573a
Certificate serial: 0198D5BBDE5976DAFF7879A7BB8C5264D99E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97KiPZsF9XV53i8CRJtmYD4-Vzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.mft
Manifest number: 11FD
Signing time: Sat 23 Aug 2025 07:01:55 +0000
Manifest this update: Sat 23 Aug 2025 07:01:55 +0000
Manifest next update: Sun 24 Aug 2025 07:01:55 +0000
Files and hashes: 1: 97KiPZsF9XV53i8CRJtmYD4-Vzo.crl (hash: /rMWGGjFsv0BwxPqicyh2eqvPxcAdjaq+DniZATW3jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/97KiPZsF9XV53i8CRJtmYD4-Vzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:de:59:76:da:ff:78:79:a7:bb:8c:52:64:d9:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b2a23d9b05f57579de2f02449b66603e3e573a
Validity
Not Before: Aug 23 07:01:55 2025 GMT
Not After : Aug 24 07:01:55 2025 GMT
Subject: CN=b17f9ce6132cc1b5616a3acb2e087019b530d4f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:db:9f:72:39:90:53:e0:53:9f:b6:87:16:16:
37:69:98:d9:26:e8:66:7d:e1:68:d6:56:d1:7e:d8:
df:9d:c1:42:50:47:06:ac:20:77:47:9c:c5:5e:49:
08:88:79:cf:8c:2c:75:2f:db:c8:ba:75:29:59:a1:
b1:7d:e8:1b:a2:05:e7:30:db:08:69:c4:b4:d8:07:
74:a9:b0:8f:50:7e:b1:b9:b9:70:9e:0c:a6:9f:20:
cd:b5:cb:89:23:a9:58:43:11:97:b1:f8:83:1b:a8:
8a:81:53:d9:ea:43:5a:88:ab:b2:fe:f4:41:7b:e4:
32:a0:da:6b:f3:03:90:4f:9b:c1:dd:7f:e4:07:e1:
c6:43:60:71:5a:ca:ef:6f:0f:17:7d:35:1a:64:5e:
1b:60:ba:6d:ad:4d:46:3f:9b:3f:f9:ae:0a:8f:f3:
41:6a:54:79:a6:20:2d:70:d0:9a:3c:58:29:05:75:
29:ae:83:19:f8:df:9b:04:1a:87:02:14:03:fd:ee:
29:ef:83:f8:b2:b5:cd:24:35:1c:97:e9:23:79:59:
56:00:f0:ce:9e:41:7d:62:18:95:e5:8a:49:07:84:
60:33:fa:0a:f4:3a:aa:34:09:69:d7:9c:de:77:c5:
c8:ea:65:a6:05:d9:bc:44:4f:3c:94:e4:52:1d:0e:
42:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:7F:9C:E6:13:2C:C1:B5:61:6A:3A:CB:2E:08:70:19:B5:30:D4:F0
X509v3 Authority Key Identifier:
keyid:F7:B2:A2:3D:9B:05:F5:75:79:DE:2F:02:44:9B:66:60:3E:3E:57:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97KiPZsF9XV53i8CRJtmYD4-Vzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:05:ad:af:e2:a4:fa:ba:5f:ab:76:d6:64:94:b7:0e:de:68:
74:04:58:22:83:8e:84:80:70:32:11:ec:28:08:97:95:e1:67:
f0:53:56:d5:42:db:13:6b:0c:ee:f9:e2:bb:be:eb:34:be:5d:
5a:8a:63:3b:51:90:e1:00:02:ea:b7:69:d0:ec:63:8d:9e:e9:
6f:14:79:33:34:78:e2:e0:14:f0:f7:bf:86:71:f0:dd:63:13:
34:30:db:f0:25:20:91:c9:33:b6:1d:22:c9:4b:1e:27:c7:8f:
26:ee:d6:24:8f:a9:f1:de:11:6e:a0:db:09:19:6a:54:48:71:
b1:47:52:84:50:3f:71:ac:da:53:4c:88:7c:e7:c2:36:fe:1d:
61:e6:86:62:d6:47:03:de:02:e7:e9:3f:7b:bb:22:60:5d:29:
09:10:2f:aa:f7:51:0e:56:b9:b8:c5:7c:86:49:4f:ee:81:05:
77:cb:b8:26:17:a5:95:05:4d:11:e9:34:18:a6:65:b6:5f:a8:
f1:48:69:2c:c0:aa:7b:9c:51:8f:d6:f4:62:fc:99:50:35:fb:
e8:32:f4:77:32:0a:60:50:5d:c5:20:fe:c1:57:5f:8f:3d:bc:
a1:80:9b:74:17:88:08:e7:45:8e:be:cd:af:b4:01:45:64:a8:
2d:33:46:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:05 2025 by rpki-client