Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.mft
File: 96pRbAbRINN25XURMTT0T_Yl2Oc.mft (raw, json)
Hash identifier: 05n8D9vQyN+LmuYMpUQlqx1AfOFDwDzD87CZPRzEkJM=
Subject key identifier: 99:4A:1D:1F:4F:43:76:65:1B:10:85:2D:3E:03:89:E0:D6:88:53:50
Authority key identifier: F7:AA:51:6C:06:D1:20:D3:76:E5:75:11:31:34:F4:4F:F6:25:D8:E7
Certificate issuer: /CN=f7aa516c06d120d376e575113134f44ff625d8e7
Certificate serial: 0198D4741605CC6F324A586BC55389BAC942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/96pRbAbRINN25XURMTT0T_Yl2Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.mft
Manifest number: C2
Signing time: Sat 23 Aug 2025 01:03:54 +0000
Manifest this update: Sat 23 Aug 2025 01:03:54 +0000
Manifest next update: Sun 24 Aug 2025 01:03:54 +0000
Files and hashes: 1: 96pRbAbRINN25XURMTT0T_Yl2Oc.crl (hash: uzvsoi3/vNi5pVIHJYElYqp7cEo5gDgwdxmnU6GQYPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/96pRbAbRINN25XURMTT0T_Yl2Oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:16:05:cc:6f:32:4a:58:6b:c5:53:89:ba:c9:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7aa516c06d120d376e575113134f44ff625d8e7
Validity
Not Before: Aug 23 01:03:54 2025 GMT
Not After : Aug 24 01:03:54 2025 GMT
Subject: CN=994a1d1f4f4376651b10852d3e0389e0d6885350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:75:17:08:2d:f1:3b:8d:a9:dd:90:e0:92:aa:
b2:42:d4:48:74:b0:b0:2d:a0:b5:60:88:f8:6e:8a:
d1:72:a6:b4:7a:4e:b9:01:37:ed:15:ac:f7:e6:88:
41:19:56:fd:53:27:23:7c:14:74:64:d4:22:aa:15:
02:88:a2:15:da:8f:01:9b:79:f8:2e:a4:cb:38:4e:
ac:7b:cc:53:16:e6:ca:79:44:88:d5:ef:de:30:63:
88:5b:09:24:55:2d:d6:27:c4:4b:f0:c8:e9:6c:25:
f7:de:ce:fa:e9:15:5c:17:5f:37:10:27:7a:7f:5c:
09:9f:76:19:b0:d8:47:04:3e:d0:c6:c5:e2:97:c4:
19:59:3b:66:a5:6e:7b:a1:cb:8a:b1:f9:89:89:0d:
7a:87:58:8d:ff:31:7f:6e:48:23:24:c5:12:c8:07:
35:f7:ef:04:22:a9:70:44:1a:4a:5d:4c:2b:b9:44:
cf:af:bd:90:74:4a:51:3b:2a:6c:0b:c7:86:c6:45:
4a:e0:f4:f4:d9:0b:27:76:c1:8e:d7:5b:74:46:f1:
56:4f:d5:85:16:7a:3a:57:02:f8:47:b6:7b:4e:dd:
a5:09:db:a2:d9:dc:f5:13:e9:62:e1:c9:91:bd:72:
29:40:4e:ab:e2:41:b2:51:93:12:dc:14:3e:32:ef:
44:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:4A:1D:1F:4F:43:76:65:1B:10:85:2D:3E:03:89:E0:D6:88:53:50
X509v3 Authority Key Identifier:
keyid:F7:AA:51:6C:06:D1:20:D3:76:E5:75:11:31:34:F4:4F:F6:25:D8:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96pRbAbRINN25XURMTT0T_Yl2Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:fc:50:35:d0:1a:ad:a8:39:a8:7e:81:a7:33:50:c8:bd:ad:
06:78:de:63:77:84:11:73:91:0b:0a:a9:6a:49:71:30:ce:1b:
26:97:c3:22:29:ce:9c:d0:c4:07:b1:36:3e:0e:ff:12:c5:da:
8b:ba:c6:2d:05:6a:40:68:61:07:ac:d9:7b:c5:d0:eb:a9:db:
f0:b0:7d:60:fc:2e:15:90:47:ef:ac:da:64:88:2c:7b:2d:6c:
ff:8d:b2:36:66:18:15:f4:e3:8f:28:6e:72:09:d2:8e:80:f2:
df:56:2c:f4:56:c1:7c:60:4f:ea:5d:85:a7:f7:4b:5b:ff:28:
59:7e:8f:b4:c1:be:41:a7:48:e8:04:55:aa:0a:21:a8:6b:94:
2f:89:28:ce:ce:fe:72:d5:70:02:35:ce:4a:27:17:28:c7:4b:
a5:4e:6d:d6:70:79:82:f7:ea:fa:97:78:2c:25:91:15:0b:ac:
5a:ce:1a:e9:b3:0a:53:6b:fd:a9:15:4a:1f:88:69:d0:d3:ec:
09:5e:ff:c9:08:ed:ce:a1:1c:7c:b9:da:e1:46:c5:3e:93:aa:
c6:13:73:ce:55:ff:05:1c:25:58:ab:0f:d9:34:91:bd:45:57:
1d:70:38:54:ab:ca:28:cf:b7:ed:b9:47:74:05:37:92:b2:00:
70:e6:e0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:22:22 2025 by rpki-client