Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft
File: 97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft (raw, json)
Hash identifier: gnEFJoCOqZIYX5PKCR2WyQuvioWMIn5et8r6SG1sLiY=
Subject key identifier: 0B:B8:6D:20:41:91:30:74:C7:41:6A:9B:C2:6C:A9:0B:33:51:15:C2
Authority key identifier: F7:B7:C2:E8:45:3E:D4:C0:92:9C:75:04:BA:F0:46:04:31:59:D1:05
Certificate issuer: /CN=f7b7c2e8453ed4c0929c7504baf046043159d105
Certificate serial: 0196BDEE406EA12B0F8583CBE87156963471
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97fC6EU-1MCSnHUEuvBGBDFZ0QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft
Manifest number: 14C6
Signing time: Sun 11 May 2025 06:00:29 +0000
Manifest this update: Sun 11 May 2025 06:00:29 +0000
Manifest next update: Mon 12 May 2025 06:00:29 +0000
Files and hashes: 1: 97fC6EU-1MCSnHUEuvBGBDFZ0QU.crl (hash: pIjGDz11PcJGCJCRgHUXpttm4h85dFjHarUPqpFSqdo=)
2: BvcR2l7_YlLN1G-PLIU4HFIYDzk.roa (hash: r1MEUEAOwAoEFh1pzdmgOC6wzXGzNLeScD3RSXz3sR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft
rsync://rpki.ripe.net/repository/DEFAULT/97fC6EU-1MCSnHUEuvBGBDFZ0QU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:40:6e:a1:2b:0f:85:83:cb:e8:71:56:96:34:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b7c2e8453ed4c0929c7504baf046043159d105
Validity
Not Before: May 11 06:00:29 2025 GMT
Not After : May 12 06:00:29 2025 GMT
Subject: CN=0bb86d2041913074c7416a9bc26ca90b335115c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ce:9c:d4:89:e0:5f:7d:eb:a8:df:18:9e:58:
6a:56:70:9e:e1:16:bf:05:7d:d7:a1:fa:2a:33:f6:
de:5a:fa:18:47:5d:88:74:7b:9b:70:3b:d9:5f:ce:
ad:0e:0a:73:c9:67:24:2e:43:8c:0d:8b:f9:67:8b:
d7:82:3b:88:87:c3:11:5f:d0:70:9c:34:0c:65:12:
d3:13:1d:02:fe:72:8b:02:a1:13:50:9a:57:7d:8c:
37:21:d6:fb:e2:8f:44:2d:59:05:1a:cd:ab:ce:ec:
ad:5e:a2:ec:f0:6e:99:4b:30:6a:6e:6f:3d:8e:1f:
7a:64:16:5a:5d:26:9d:88:f8:71:8c:2e:40:49:f0:
64:b9:6a:bc:fb:0a:47:32:3d:6d:b0:a6:b8:83:e2:
f3:33:c6:2b:c8:c7:69:a8:9e:c2:f1:3e:56:90:02:
f2:35:a9:2a:e9:c3:68:0a:1e:b7:c6:31:b9:e6:eb:
07:8a:79:b9:4e:13:39:f6:de:77:6f:12:37:a7:dc:
fb:97:e8:93:db:4c:79:78:a9:65:e9:35:5f:5d:1e:
14:cf:81:dc:f7:d1:47:57:39:df:f0:28:7f:25:9a:
4f:6c:78:c0:ed:db:e2:ca:54:5e:36:1f:ab:64:a1:
5b:4a:d3:f0:b0:a9:7a:a7:18:41:55:2a:e0:24:d9:
ef:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B8:6D:20:41:91:30:74:C7:41:6A:9B:C2:6C:A9:0B:33:51:15:C2
X509v3 Authority Key Identifier:
keyid:F7:B7:C2:E8:45:3E:D4:C0:92:9C:75:04:BA:F0:46:04:31:59:D1:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97fC6EU-1MCSnHUEuvBGBDFZ0QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:23:a1:53:6f:59:7b:1e:53:d0:4f:b4:a5:40:6b:ee:74:dc:
de:af:a1:f7:23:4f:02:b1:4d:37:03:45:1a:5d:f4:04:a8:50:
b8:37:dc:90:86:79:bf:bb:fa:49:91:60:1b:b3:e0:0b:d7:e9:
59:f0:8c:91:00:e1:ca:c8:0d:13:ce:b8:aa:87:bf:83:d3:af:
f8:2c:65:34:22:98:e7:57:60:ff:53:f4:c2:db:7f:cc:1a:61:
00:06:a0:e7:e7:0e:f6:9d:a8:14:c1:97:8b:93:d9:f5:48:62:
e1:57:42:5d:e8:01:85:66:49:b3:28:ff:1c:15:cc:ba:b5:b9:
65:2b:81:03:6b:86:ad:01:84:02:fc:3b:d8:13:16:cc:b4:a9:
3a:49:a8:d0:92:4b:61:46:7a:c6:77:39:6a:71:c3:76:21:4b:
9e:c4:67:a7:fa:cd:e3:2d:bf:55:c9:a9:c8:50:b1:f9:6b:ee:
49:f3:6b:49:b7:6a:e2:01:ef:df:76:93:01:b0:b9:0f:d1:44:
f7:e6:7b:40:06:da:21:87:c7:99:36:f7:09:c2:b8:ae:f2:98:
60:d9:66:f1:61:89:14:83:12:5e:13:f3:8c:ec:03:14:d8:4c:
38:89:65:99:48:35:cb:87:7e:1a:b6:fe:e8:b2:1f:11:9f:f5:
04:e4:d4:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa97kBuoSsPhYPL6HFWljRxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3YjdjMmU4NDUzZWQ0YzA5MjljNzUwNGJhZjA0NjA0MzE1
OWQxMDUwHhcNMjUwNTExMDYwMDI5WhcNMjUwNTEyMDYwMDI5WjAzMTEwLwYDVQQD
EygwYmI4NmQyMDQxOTEzMDc0Yzc0MTZhOWJjMjZjYTkwYjMzNTExNWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2s6c1IngX33rqN8YnlhqVnCe4Ra/
BX3XofoqM/beWvoYR12IdHubcDvZX86tDgpzyWckLkOMDYv5Z4vXgjuIh8MRX9Bw
nDQMZRLTEx0C/nKLAqETUJpXfYw3Idb74o9ELVkFGs2rzuytXqLs8G6ZSzBqbm89
jh96ZBZaXSadiPhxjC5ASfBkuWq8+wpHMj1tsKa4g+LzM8YryMdpqJ7C8T5WkALy
Nakq6cNoCh63xjG55usHinm5ThM59t53bxI3p9z7l+iT20x5eKll6TVfXR4Uz4Hc
99FHVznf8Ch/JZpPbHjA7dviylReNh+rZKFbStPwsKl6pxhBVSrgJNnvfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAu4bSBBkTB0x0Fqm8JsqQszURXCMB8GA1UdIwQY
MBaAFPe3wuhFPtTAkpx1BLrwRgQxWdEFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTdmQzZFVS0xTUNTbkhVRXV2QkdCREZaMFFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82NjE2NzktYWMyNS00M2VlLTljYmYt
OGNmMjU0YjQ4Nzk0LzEvOTdmQzZFVS0xTUNTbkhVRXV2QkdCREZaMFFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC82NjE2NzktYWMyNS00M2VlLTljYmYtOGNmMjU0YjQ4Nzk0
LzEvOTdmQzZFVS0xTUNTbkhVRXV2QkdCREZaMFFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvSOhU29Z
ex5T0E+0pUBr7nTc3q+h9yNPArFNNwNFGl30BKhQuDfckIZ5v7v6SZFgG7PgC9fp
WfCMkQDhysgNE864qoe/g9Ov+CxlNCKY51dg/1P0wtt/zBphAAag5+cO9p2oFMGX
i5PZ9Uhi4VdCXegBhWZJsyj/HBXMurW5ZSuBA2uGrQGEAvw72BMWzLSpOkmo0JJL
YUZ6xnc5anHDdiFLnsRnp/rN4y2/VcmpyFCx+WvuSfNrSbdq4gHv33aTAbC5D9FE
9+Z7QAbaIYfHmTb3CcK4rvKYYNlm8WGJFIMSXhPzjOwDFNhMOIllmUg1y4d+Grb+
6LIfEZ/1BOTU3g==
-----END CERTIFICATE-----
Generated at Sun May 11 12:43:12 2025 by rpki-client