Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
File: 97NANTBJjYJfLniKB2UDvJ3OFXQ.mft (raw, json)
Hash identifier: IRysibqlrUpPn+g+oVMkrd0tFXRPdaUaQeKeIK4YE14=
Subject key identifier: DE:B8:00:43:1E:ED:F4:47:A5:DF:8C:AE:D5:FE:CA:30:C6:0C:1B:41
Authority key identifier: F7:B3:40:35:30:49:8D:82:5F:2E:78:8A:07:65:03:BC:9D:CE:15:74
Certificate issuer: /CN=f7b3403530498d825f2e788a076503bc9dce1574
Certificate serial: 0197B77CBB47DAC02A163E0E9DB914D3584B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
Manifest number: 0689
Signing time: Sat 28 Jun 2025 17:01:34 +0000
Manifest this update: Sat 28 Jun 2025 17:01:34 +0000
Manifest next update: Sun 29 Jun 2025 17:01:34 +0000
Files and hashes: 1: 97NANTBJjYJfLniKB2UDvJ3OFXQ.crl (hash: EIBYt7hL8IPoB5ekPg+qeCmKb1f57Yw+7M2jRY/Umb8=)
2: wilpaK1V0r35ZNvUw0OLpxxalHM.roa (hash: cc48kr9ntP1AGZHGu6VbcBWoFsvg/tsNceyhXPWuzak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:bb:47:da:c0:2a:16:3e:0e:9d:b9:14:d3:58:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b3403530498d825f2e788a076503bc9dce1574
Validity
Not Before: Jun 28 17:01:34 2025 GMT
Not After : Jun 29 17:01:34 2025 GMT
Subject: CN=deb800431eedf447a5df8caed5feca30c60c1b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:15:bf:ad:96:f8:7c:ed:8c:be:fe:d5:6d:c6:
10:8d:73:60:e1:73:fa:ce:dc:70:81:ed:b8:89:ff:
53:12:4a:5a:1f:49:20:4f:97:22:68:a1:d1:d5:c8:
3a:24:cb:44:97:37:e4:9c:e6:45:40:d9:cd:6e:a5:
7b:c6:58:d6:22:47:ee:b7:5f:18:65:c4:9d:df:27:
9f:11:72:c7:38:71:96:63:5b:d6:0c:63:6d:89:d3:
5d:22:c4:ad:da:81:7e:ea:ac:69:df:8f:cb:51:45:
e0:1f:64:0a:5b:1c:ee:27:b0:ed:b6:1c:f9:18:30:
eb:5e:b6:16:d2:31:b1:03:48:29:04:fa:25:95:1c:
e9:e4:eb:aa:b8:35:c9:bf:3f:e5:67:64:85:bf:94:
31:ca:0b:08:11:dc:1a:ac:45:4a:1b:3f:a5:af:42:
ad:a8:b7:eb:e6:8c:ed:6b:7f:77:f6:fa:da:c5:ec:
62:40:ff:31:66:c7:d5:8f:ad:9f:72:8d:cc:3d:43:
6f:db:85:e6:d6:98:54:8f:9f:87:5d:2e:f9:0c:ff:
54:68:39:28:04:22:e1:22:da:c4:64:33:77:77:9b:
ab:da:42:09:79:48:27:01:ca:c2:d5:a7:2f:cb:75:
e9:0b:b9:e2:08:77:c1:25:4f:e6:6d:56:2d:44:f1:
a2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B8:00:43:1E:ED:F4:47:A5:DF:8C:AE:D5:FE:CA:30:C6:0C:1B:41
X509v3 Authority Key Identifier:
keyid:F7:B3:40:35:30:49:8D:82:5F:2E:78:8A:07:65:03:BC:9D:CE:15:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:7d:1b:3d:b0:e5:a7:c4:65:95:9f:0b:ab:0e:53:4d:51:9d:
5b:85:f0:1b:04:75:5b:61:78:19:2c:64:d4:e4:b0:52:31:31:
eb:eb:35:07:9f:7f:e6:9f:50:f3:31:a7:56:72:50:ad:15:23:
a4:02:28:9d:da:4b:5a:6a:8d:4e:c1:75:fd:0c:af:54:fd:a2:
b0:a4:4e:89:27:27:18:ac:f4:99:30:70:0f:d0:51:88:df:81:
38:71:90:ad:20:4a:69:d0:76:79:23:1c:2a:a3:b6:47:33:29:
79:48:b9:28:07:6d:69:2a:9f:25:95:3a:c2:c7:79:53:3f:e7:
a6:44:02:28:0b:10:c8:3c:08:07:e6:9f:cb:37:51:6a:34:29:
f9:31:8c:5c:bc:67:3d:31:af:4e:41:5b:a7:b9:a3:83:a4:67:
6f:fe:03:ad:7f:04:2f:e0:2b:05:de:4e:d7:9e:b7:7e:d2:06:
e9:16:7d:78:66:df:b3:b5:c2:12:7b:f7:ac:86:26:2b:b2:bc:
b7:b7:59:06:96:f8:46:57:17:e3:fd:fe:fe:71:04:b8:cb:7d:
e3:c8:6b:f3:6e:12:6a:c9:58:f4:67:3b:25:81:ac:85:88:8d:
05:5f:cf:14:08:49:94:51:46:3c:3b:21:a2:10:1b:46:35:01:
0c:2f:e4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:03:14 2025 by rpki-client