Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft
File: 97UMfoHYzyZNEgm2rVo8y4LBb90.mft (raw, json)
Hash identifier: R6m1K7vI9fOd7gXLR6ADbNzZcOhEzlTA334je+c9qRo=
Subject key identifier: B4:AF:A8:B7:9F:D4:BB:4E:02:23:56:D3:29:8C:82:63:2B:B1:5D:BC
Authority key identifier: F7:B5:0C:7E:81:D8:CF:26:4D:12:09:B6:AD:5A:3C:CB:82:C1:6F:DD
Certificate issuer: /CN=f7b50c7e81d8cf264d1209b6ad5a3ccb82c16fdd
Certificate serial: 0197B88EEA2FF8D25AFC5D60191A63C51970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft
Manifest number: 0D5D
Signing time: Sat 28 Jun 2025 22:01:03 +0000
Manifest this update: Sat 28 Jun 2025 22:01:03 +0000
Manifest next update: Sun 29 Jun 2025 22:01:03 +0000
Files and hashes: 1: 97UMfoHYzyZNEgm2rVo8y4LBb90.crl (hash: hmuCnEyjdNieImObQGwf1PNDldlyhqbH0/ToO7+9gJA=)
2: GTCjpLpWFoRKa3RTQC7pQJBM1G0.roa (hash: EhNbeTG6PZNCY341R1mR2HkaZJMJL1NL7VGz9EOMvcU=)
3: SZn8hNrZLFz6_jd__cc2hQYVsJ4.roa (hash: pOi9fCGV3Xellqd7Bg8T2wW6LAr0IHc6DomlTTmJAug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft
rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:ea:2f:f8:d2:5a:fc:5d:60:19:1a:63:c5:19:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b50c7e81d8cf264d1209b6ad5a3ccb82c16fdd
Validity
Not Before: Jun 28 22:01:03 2025 GMT
Not After : Jun 29 22:01:03 2025 GMT
Subject: CN=b4afa8b79fd4bb4e022356d3298c82632bb15dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:58:cf:a1:6d:cc:41:88:19:bd:df:22:a3:00:
6f:31:f5:54:d3:ea:f1:62:e3:a6:c0:26:74:e9:41:
16:f2:50:a0:05:35:0b:a9:be:d7:1b:5b:8f:6b:f3:
4f:a7:97:5f:f6:26:c0:97:a1:9d:bc:ee:8b:ba:07:
c9:ce:75:eb:ea:05:90:3c:b3:9c:e1:0b:12:94:09:
5c:b2:40:89:ab:1e:95:87:c7:11:5b:8a:70:1e:ec:
12:42:a0:d9:e0:bd:a9:94:2b:40:07:ad:83:93:9b:
de:ac:cd:09:ef:6f:25:f3:ff:0a:5a:b7:66:cb:82:
73:6a:db:17:b8:50:1f:ff:1d:2a:4e:f2:28:7c:ea:
70:8b:c4:ba:4a:2e:41:3f:4b:e0:21:97:f8:61:a0:
12:60:24:89:33:e5:fd:dd:16:48:a7:45:12:b8:c6:
21:2f:0a:59:cf:e6:45:f2:cc:f2:a3:2d:27:17:f1:
b0:1a:7a:68:3f:25:13:56:69:6c:22:90:1e:e6:52:
a9:c7:04:7f:b9:7e:7b:ce:fa:0e:ec:a2:22:a8:8a:
e5:23:0a:1b:d4:d0:d9:58:c7:17:c1:32:90:5b:22:
2e:20:36:8e:b6:5d:85:48:c2:8b:e9:46:50:bf:76:
db:e5:e8:e4:da:a2:ad:00:9d:92:71:28:36:eb:a9:
62:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:AF:A8:B7:9F:D4:BB:4E:02:23:56:D3:29:8C:82:63:2B:B1:5D:BC
X509v3 Authority Key Identifier:
keyid:F7:B5:0C:7E:81:D8:CF:26:4D:12:09:B6:AD:5A:3C:CB:82:C1:6F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:21:9b:60:4a:47:d8:19:7e:b4:cd:69:50:9a:95:e3:51:92:
10:e0:cf:2c:de:35:29:cb:04:bc:be:4b:fd:9b:e8:97:77:99:
da:24:14:19:a6:8e:72:03:99:90:bd:28:fd:86:4f:18:a3:20:
b0:50:23:97:f3:fd:be:f7:e0:06:39:22:93:32:05:a9:72:b1:
83:23:93:30:6e:26:20:74:43:f4:37:f3:c2:9c:5c:fa:3c:57:
53:1b:67:54:46:f4:4d:e2:71:10:04:94:ba:5a:e4:d7:bf:1b:
7e:7a:46:8d:73:7d:c7:24:1a:24:22:7d:41:a1:bf:bd:f8:17:
83:0b:d5:25:ee:b7:31:4f:62:36:fb:c7:bd:89:d4:fc:89:43:
f9:2b:cb:c9:92:b4:3c:1e:24:d9:a5:08:43:e0:4c:05:27:ba:
86:ec:4c:20:0d:0d:dd:bb:fb:f4:dd:b8:21:b5:fd:82:93:fc:
8f:78:1f:14:59:a9:6f:01:3c:f5:7c:f4:e9:87:58:a7:33:af:
b5:0f:ed:f2:e6:87:49:f4:77:3c:60:f3:85:d7:2b:15:cb:62:
24:ab:73:ca:a2:be:3f:51:4a:b3:c5:13:bd:e4:7f:31:88:1c:
63:7c:a9:a5:a1:2e:d0:64:2f:67:77:4c:95:06:06:c6:60:bd:
96:db:50:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:56 2025 by rpki-client