Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft
File: 97UMfoHYzyZNEgm2rVo8y4LBb90.mft (raw, json)
Hash identifier: QYOKZB2B1GGrMeyzYE2PECo8gQscZ2/k76VZGtblDyo=
Subject key identifier: BE:98:F8:94:95:A9:B5:10:57:1C:95:F7:FB:EE:4A:99:B2:BD:B3:F3
Authority key identifier: F7:B5:0C:7E:81:D8:CF:26:4D:12:09:B6:AD:5A:3C:CB:82:C1:6F:DD
Certificate issuer: /CN=f7b50c7e81d8cf264d1209b6ad5a3ccb82c16fdd
Certificate serial: 0196C6F186B2C1F0A27AA60D961E34C6720A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft
Manifest number: 0CE0
Signing time: Tue 13 May 2025 00:00:39 +0000
Manifest this update: Tue 13 May 2025 00:00:39 +0000
Manifest next update: Wed 14 May 2025 00:00:39 +0000
Files and hashes: 1: 97UMfoHYzyZNEgm2rVo8y4LBb90.crl (hash: e/XJopA4brXZyLYTeITuEw5MBvTxTJS1b3r1KEfUrG8=)
2: GTCjpLpWFoRKa3RTQC7pQJBM1G0.roa (hash: EhNbeTG6PZNCY341R1mR2HkaZJMJL1NL7VGz9EOMvcU=)
3: SZn8hNrZLFz6_jd__cc2hQYVsJ4.roa (hash: pOi9fCGV3Xellqd7Bg8T2wW6LAr0IHc6DomlTTmJAug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft
rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:f1:86:b2:c1:f0:a2:7a:a6:0d:96:1e:34:c6:72:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b50c7e81d8cf264d1209b6ad5a3ccb82c16fdd
Validity
Not Before: May 13 00:00:39 2025 GMT
Not After : May 14 00:00:39 2025 GMT
Subject: CN=be98f89495a9b510571c95f7fbee4a99b2bdb3f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:75:bf:51:8b:21:6d:93:da:ab:00:17:3a:50:
9b:3d:cb:b9:e0:f7:54:3b:de:b0:d0:84:8a:6b:5d:
24:ad:ca:53:0d:1f:10:c1:f7:45:32:99:29:06:5f:
fe:7b:46:7b:b2:c6:04:26:c4:fc:93:c3:4b:7d:df:
91:bd:a8:14:87:dc:81:76:a1:4b:8a:39:75:11:25:
7c:2c:88:a8:25:1f:80:b3:b7:5d:19:07:0d:4e:30:
52:93:c9:cc:90:1a:8e:25:b6:a8:6b:74:a9:9e:af:
64:b1:16:f8:96:4d:0e:23:1b:a3:65:5f:25:9c:80:
02:f0:22:37:f7:3b:de:dd:a8:a7:f3:70:82:cb:00:
2c:7f:a4:f0:03:e6:a3:92:4f:04:cd:69:3e:58:cc:
3b:79:84:eb:d0:87:22:b4:31:50:c0:cb:a2:f2:74:
39:83:74:50:65:51:df:5a:a7:f6:d1:65:24:b6:32:
d2:a7:2e:ac:1a:4e:2d:ad:69:22:05:fe:97:13:9a:
9f:3a:9f:30:a4:69:c2:bb:d7:cc:e2:c6:6e:8f:79:
14:60:b5:06:cd:60:60:ab:8e:51:e7:82:9a:07:d1:
90:fd:7f:f0:c1:1e:27:2b:7b:ec:a9:fc:bd:2b:b7:
44:6a:56:12:ff:8d:23:da:56:42:73:f0:3f:41:94:
c4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:98:F8:94:95:A9:B5:10:57:1C:95:F7:FB:EE:4A:99:B2:BD:B3:F3
X509v3 Authority Key Identifier:
keyid:F7:B5:0C:7E:81:D8:CF:26:4D:12:09:B6:AD:5A:3C:CB:82:C1:6F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:fc:90:09:2d:c6:d2:69:3a:f9:1e:40:81:c1:08:80:14:f1:
13:81:73:1d:ab:1c:de:a7:b0:f1:93:35:2b:da:96:9f:25:24:
e0:33:63:59:db:9b:c4:d3:41:73:c4:16:bb:8e:79:01:cc:a6:
86:66:43:12:c1:0e:14:1d:f2:1d:af:87:8d:e7:24:0b:fb:f8:
0f:0b:8a:fa:bd:2e:18:85:dd:e9:24:80:44:f9:c6:24:c3:c4:
07:94:29:69:a6:a0:e3:b3:08:db:6a:6e:3a:56:f9:66:12:e9:
de:58:58:ff:50:f5:ad:36:10:b4:ac:95:1c:ad:99:bc:e2:9a:
9f:45:8a:b3:4d:5e:b1:fa:f5:09:3c:84:c3:b5:ca:33:86:74:
df:c2:d3:ab:1a:bc:d8:56:d4:38:ab:6a:cd:9e:76:f0:f4:20:
43:30:da:8b:2d:97:11:c5:2d:d0:dd:90:27:08:b1:d2:a6:67:
0d:b2:86:58:b2:b5:1c:54:40:3c:ea:44:27:67:e3:ef:ea:38:
6f:8f:a7:87:57:85:24:7c:ad:ce:3d:95:04:a2:1c:8a:a9:0c:
b1:d7:7f:33:32:86:cd:45:bc:64:1e:6e:6d:37:03:8c:8d:3d:
e2:aa:55:65:f2:2d:4f:83:52:74:86:88:a8:23:f3:cd:59:dc:
5c:75:61:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 04:48:00 2025 by rpki-client