Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft
File: 97UMfoHYzyZNEgm2rVo8y4LBb90.mft (raw, json)
Hash identifier: XodabShRdUy2nEgEEepzfHBRFMbD3Y91ofHoYzs0tus=
Subject key identifier: E8:1E:27:57:97:0C:2C:9B:91:97:D9:DE:08:3B:1E:FB:63:CD:AE:29
Authority key identifier: F7:B5:0C:7E:81:D8:CF:26:4D:12:09:B6:AD:5A:3C:CB:82:C1:6F:DD
Certificate issuer: /CN=f7b50c7e81d8cf264d1209b6ad5a3ccb82c16fdd
Certificate serial: 0198D660721E28388A6977CC3BE7E60D43BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft
Manifest number: 0DF1
Signing time: Sat 23 Aug 2025 10:01:41 +0000
Manifest this update: Sat 23 Aug 2025 10:01:41 +0000
Manifest next update: Sun 24 Aug 2025 10:01:41 +0000
Files and hashes: 1: 97UMfoHYzyZNEgm2rVo8y4LBb90.crl (hash: 1oLBwcPZiiHzHUdcTcxkNSPIcacCWuP+M9HC7PUAQug=)
2: GTCjpLpWFoRKa3RTQC7pQJBM1G0.roa (hash: EhNbeTG6PZNCY341R1mR2HkaZJMJL1NL7VGz9EOMvcU=)
3: SZn8hNrZLFz6_jd__cc2hQYVsJ4.roa (hash: pOi9fCGV3Xellqd7Bg8T2wW6LAr0IHc6DomlTTmJAug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft
rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:72:1e:28:38:8a:69:77:cc:3b:e7:e6:0d:43:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b50c7e81d8cf264d1209b6ad5a3ccb82c16fdd
Validity
Not Before: Aug 23 10:01:41 2025 GMT
Not After : Aug 24 10:01:41 2025 GMT
Subject: CN=e81e2757970c2c9b9197d9de083b1efb63cdae29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:96:f0:47:cf:c5:9c:47:fc:54:fa:b6:77:57:
df:64:81:b7:d3:ba:4a:df:8b:99:53:8b:2d:7e:4f:
11:d0:38:22:ad:b0:14:a9:09:2d:fe:06:83:55:94:
da:85:0d:2d:14:b0:41:ab:34:b2:3e:f0:48:b1:30:
6b:53:35:25:dc:09:4a:20:c5:41:30:24:0a:04:d3:
55:2d:7d:dc:6e:db:2b:f6:10:fa:7a:93:7d:62:c7:
01:eb:72:13:41:45:92:50:d7:05:9d:3b:ef:be:7b:
81:d4:46:cb:0c:e5:89:f5:91:a0:43:04:54:46:f9:
aa:36:80:70:5a:d6:54:91:bb:03:9c:60:37:31:81:
c2:7b:6a:77:44:fc:68:06:91:82:8d:41:d6:b9:89:
2b:62:41:6a:32:e3:be:47:d1:bf:37:62:3c:f3:e7:
08:5f:31:63:c3:88:07:4d:50:80:eb:50:6f:01:7c:
dc:b8:70:bc:74:c6:81:f8:45:ea:98:9e:89:15:cf:
96:e3:cb:bb:7f:e7:f7:65:78:31:29:eb:e9:5d:6c:
1a:b2:81:8d:98:9c:e1:fd:13:38:b3:e3:96:9c:9a:
c5:06:2f:b7:b7:36:39:d4:83:e5:5b:3c:c9:63:d4:
33:10:c9:89:a9:4c:a7:60:fd:3f:e2:f3:b0:bd:dc:
32:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:1E:27:57:97:0C:2C:9B:91:97:D9:DE:08:3B:1E:FB:63:CD:AE:29
X509v3 Authority Key Identifier:
keyid:F7:B5:0C:7E:81:D8:CF:26:4D:12:09:B6:AD:5A:3C:CB:82:C1:6F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:45:de:7c:aa:af:2d:b4:87:48:16:21:96:ab:6a:76:fd:a3:
14:2f:7f:49:dc:47:a1:ac:75:92:3b:47:23:d1:02:b5:b4:6c:
bd:45:4b:af:82:94:54:12:7f:5d:6a:31:29:eb:5d:9f:f3:c1:
89:bb:70:ed:27:80:e4:6a:1d:ca:44:19:ca:d4:e0:64:79:f2:
da:f6:19:33:20:e9:da:e2:6f:db:09:2c:e5:5b:76:d0:78:72:
21:1f:5f:36:81:50:41:ea:a8:d0:df:91:6e:b6:95:32:26:4d:
87:19:ee:e4:d5:0e:f9:d9:a6:0b:5f:a3:ba:5c:7a:d7:7b:5a:
77:2a:54:8b:4d:11:cc:ea:e6:f4:b1:40:b7:97:7f:c5:15:8b:
e2:4b:34:7f:33:c3:e8:be:ae:b0:18:5c:97:97:49:fc:e0:a7:
c6:27:02:bb:99:0d:89:e0:50:95:a3:a0:ec:69:74:0f:a1:9c:
89:17:48:fd:42:02:bf:3a:f2:52:cb:5e:61:12:1e:67:21:eb:
a8:11:9a:7a:1f:7d:be:02:59:7f:66:0a:2c:62:bb:bc:93:0b:
fd:64:0c:a2:a8:a6:67:39:b0:64:d7:f1:c4:1c:c6:7f:4f:fa:
aa:31:91:93:01:6c:b7:f6:b6:5f:ce:ea:b3:a7:f8:db:50:3b:
6e:85:9f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:20:12 2025 by rpki-client