Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.mft
File: 97LAktArE86qejP_BXqECmjXFSE.mft (raw, json)
Hash identifier: ds7Z0PQl3ojvFqeOKABHGOGxjQUos7g3GYYz74pZdoM=
Subject key identifier: B4:A0:12:2B:85:7D:71:8B:D8:64:76:83:1B:15:4E:58:C3:69:A4:90
Authority key identifier: F7:B2:C0:92:D0:2B:13:CE:AA:7A:33:FF:05:7A:84:0A:68:D7:15:21
Certificate issuer: /CN=f7b2c092d02b13ceaa7a33ff057a840a68d71521
Certificate serial: 0199FBEB6C7F4C06399E8025CFA4AECB2972
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97LAktArE86qejP_BXqECmjXFSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.mft
Manifest number: 1103
Signing time: Sun 19 Oct 2025 10:02:13 +0000
Manifest this update: Sun 19 Oct 2025 10:02:13 +0000
Manifest next update: Mon 20 Oct 2025 10:02:13 +0000
Files and hashes: 1: 97LAktArE86qejP_BXqECmjXFSE.crl (hash: TbzrWAW/33yPFVnSupPOLJUe51pjWPaqZs4/VdKKtx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/97LAktArE86qejP_BXqECmjXFSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:6c:7f:4c:06:39:9e:80:25:cf:a4:ae:cb:29:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b2c092d02b13ceaa7a33ff057a840a68d71521
Validity
Not Before: Oct 19 10:02:13 2025 GMT
Not After : Oct 20 10:02:13 2025 GMT
Subject: CN=b4a0122b857d718bd86476831b154e58c369a490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a5:9e:96:12:57:9f:67:05:05:12:c2:a9:bf:
29:11:32:ea:5c:dc:96:73:9e:50:23:17:47:ba:2c:
a6:99:a0:8f:66:32:f4:12:24:69:93:bf:20:4a:cc:
a2:9e:70:99:fe:7b:d0:82:04:eb:12:0a:48:b4:e3:
d3:d7:1f:8a:14:18:f6:e3:0e:0c:57:d8:48:53:9e:
a8:9c:df:83:50:ca:e1:fd:e9:e2:77:08:82:36:a7:
99:26:a3:9b:d9:a7:df:8e:e3:8c:68:92:64:b8:f3:
9e:31:98:a2:0e:15:f2:3c:e0:8c:0e:b6:4d:0d:fc:
19:03:5e:9b:d2:55:8f:b8:57:0f:c8:a8:5c:10:6d:
00:6c:e0:0a:3b:e9:a4:fe:5c:c2:22:3a:7c:cb:d5:
fd:6f:fa:59:93:36:7a:3f:25:3a:12:d8:4a:5d:6e:
34:7e:f5:c8:b7:a7:b5:70:d6:cf:0a:e1:dc:34:fa:
a4:75:4e:42:a3:07:03:2d:28:1c:e4:55:09:80:ea:
af:8e:51:77:47:fd:06:18:64:50:42:3b:94:25:9d:
0b:af:f7:1b:cb:18:7f:74:1f:df:6a:6e:6a:d6:d3:
0b:0c:06:5d:46:ae:08:7c:f5:07:3c:33:a1:d0:ee:
4d:8e:a6:6f:57:23:b0:76:b6:b6:78:a1:40:e3:16:
e0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A0:12:2B:85:7D:71:8B:D8:64:76:83:1B:15:4E:58:C3:69:A4:90
X509v3 Authority Key Identifier:
keyid:F7:B2:C0:92:D0:2B:13:CE:AA:7A:33:FF:05:7A:84:0A:68:D7:15:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97LAktArE86qejP_BXqECmjXFSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:4d:3e:4e:5f:33:57:bd:05:2e:c2:2e:2a:bb:91:dc:92:c4:
79:7d:bd:4b:2e:fc:b9:cd:1f:35:89:32:c3:ad:86:1d:34:53:
c4:19:83:0d:89:ee:75:37:01:48:1f:12:86:b5:fa:77:47:54:
e3:d4:1d:92:9c:ba:66:cb:d0:5b:64:6c:64:62:99:5f:52:cf:
37:f4:f4:d5:8e:63:36:52:76:b8:df:86:b6:55:91:c4:74:ba:
d6:de:ba:b1:71:80:71:78:8e:19:de:fc:54:b8:09:06:74:9d:
c9:5e:d0:01:2e:c1:35:78:2d:fb:3f:b7:bf:2f:39:2f:b4:34:
7a:30:5b:04:f2:ff:10:30:63:68:38:03:56:63:d5:f6:fc:30:
91:3b:c3:98:d9:db:63:d2:9e:5b:27:88:39:10:95:2b:17:df:
ae:44:89:d4:03:01:02:93:2d:c3:9c:f5:dd:66:90:ef:02:f3:
3c:d9:4f:7c:6b:da:a2:45:0d:d6:0b:65:46:fe:d0:13:61:60:
8a:87:e0:91:30:58:fa:5c:6e:b0:d0:24:89:f9:07:86:3b:99:
0d:42:c2:7a:c3:27:53:07:1a:1d:e8:f8:f0:80:c7:0b:b7:61:
34:f0:6e:a8:9a:c6:bd:d8:3c:39:cf:b9:93:60:5a:7c:9d:40:
c9:73:35:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:41 2025 by rpki-client