Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft
File: 97UMfoHYzyZNEgm2rVo8y4LBb90.mft (raw, json)
Hash identifier: NlThIcyvpYXlL2oxrXuhEGfDhlfzq7DjpJjaD1FXdHI=
Subject key identifier: C4:2D:FF:05:06:A0:5A:BD:B4:36:A6:A8:C4:5D:89:23:33:AD:6B:6B
Authority key identifier: F7:B5:0C:7E:81:D8:CF:26:4D:12:09:B6:AD:5A:3C:CB:82:C1:6F:DD
Certificate issuer: /CN=f7b50c7e81d8cf264d1209b6ad5a3ccb82c16fdd
Certificate serial: 0199FBEC38B3DB0BA0DF4883263512A29312
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft
Manifest number: 0E89
Signing time: Sun 19 Oct 2025 10:03:06 +0000
Manifest this update: Sun 19 Oct 2025 10:03:06 +0000
Manifest next update: Mon 20 Oct 2025 10:03:06 +0000
Files and hashes: 1: 97UMfoHYzyZNEgm2rVo8y4LBb90.crl (hash: R0heyHxHfUJLduXeEnS5TFa6ID8nXGldVX0PXypQcP0=)
2: GTCjpLpWFoRKa3RTQC7pQJBM1G0.roa (hash: EhNbeTG6PZNCY341R1mR2HkaZJMJL1NL7VGz9EOMvcU=)
3: SZn8hNrZLFz6_jd__cc2hQYVsJ4.roa (hash: pOi9fCGV3Xellqd7Bg8T2wW6LAr0IHc6DomlTTmJAug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft
rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:38:b3:db:0b:a0:df:48:83:26:35:12:a2:93:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b50c7e81d8cf264d1209b6ad5a3ccb82c16fdd
Validity
Not Before: Oct 19 10:03:06 2025 GMT
Not After : Oct 20 10:03:06 2025 GMT
Subject: CN=c42dff0506a05abdb436a6a8c45d892333ad6b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cf:08:b9:99:92:49:fe:6d:8b:38:da:a1:10:
2b:d7:b1:ce:ec:46:cb:b7:6a:49:3f:cb:54:13:1d:
d8:1f:5c:90:d1:7d:b2:16:ad:0a:c3:96:55:81:1a:
49:2e:fd:70:4a:3c:e8:26:8d:91:f8:68:1f:22:9c:
dd:f6:18:22:d3:bb:9f:60:e2:37:79:4a:43:dc:64:
77:45:be:89:b1:3a:3c:8f:58:90:f0:84:95:de:cf:
a3:b0:ac:07:13:cd:66:e8:67:84:80:3f:89:69:2b:
15:38:ef:6a:0a:37:94:8b:a5:a3:a0:7d:c8:a5:e4:
7b:90:96:b7:32:61:fb:7b:d6:c6:6c:ab:74:04:9d:
b9:88:76:20:ff:fc:41:c3:35:9f:a7:2e:0e:de:47:
51:76:e7:8a:6d:11:00:93:f2:f6:9b:fa:3b:94:d9:
2a:ec:d8:44:f3:eb:c9:44:4d:3d:e6:18:2f:c0:e4:
82:89:d3:f5:ac:d5:a5:5c:1a:ad:ed:ea:f0:f3:bb:
8a:d7:c3:d4:56:b7:90:8d:29:77:09:12:32:50:21:
1f:74:5a:5f:d5:27:5a:15:bc:33:ec:b3:31:61:38:
10:94:ff:9d:be:05:32:1a:dc:5e:6f:74:9f:6a:41:
9e:45:f6:a6:32:a7:5d:e9:4f:fb:d6:12:6d:c7:2f:
02:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:2D:FF:05:06:A0:5A:BD:B4:36:A6:A8:C4:5D:89:23:33:AD:6B:6B
X509v3 Authority Key Identifier:
keyid:F7:B5:0C:7E:81:D8:CF:26:4D:12:09:B6:AD:5A:3C:CB:82:C1:6F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:20:b6:9d:2e:b0:b8:59:a7:ad:57:92:2b:dc:53:6c:bb:89:
eb:0f:7d:ce:d0:3e:0e:6f:29:7f:01:2f:2d:b0:ef:f5:03:93:
7a:9e:3c:b7:ed:aa:a0:a2:b8:bd:03:b1:09:6d:f6:ef:4c:a3:
3d:c6:d1:94:40:aa:75:61:c1:00:1c:05:63:25:1e:0b:bd:e8:
65:69:54:f8:7f:d6:80:5b:e4:63:68:23:17:e1:53:e6:5a:66:
4c:d7:c9:c2:6d:20:f2:f6:22:1b:e9:41:5c:dc:92:6c:5e:84:
61:4d:83:a2:ef:0c:46:0f:f0:4c:8c:90:66:03:ff:a1:65:c7:
d2:f3:43:93:1a:6d:e1:30:bc:9b:8f:b4:0f:7d:4f:95:07:af:
c0:0d:14:d9:52:78:f0:dd:b5:e3:82:93:60:04:6c:57:9a:1e:
d8:6f:7b:6b:38:9a:0c:2a:0b:d4:ea:0b:30:d2:ab:fd:85:eb:
a1:df:af:21:70:50:85:48:6c:c1:fd:d8:46:2a:7f:df:a9:9a:
f2:5f:2d:2b:25:ca:a8:c3:5c:94:77:b4:07:74:96:ef:be:a5:
ff:58:96:7d:61:75:69:84:74:6e:81:94:03:73:c8:f0:24:be:
ea:e5:62:3f:34:55:e2:8b:32:73:42:00:e6:d6:4e:38:a9:e8:
73:c2:20:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:37 2025 by rpki-client