Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.mft
File: 96pRbAbRINN25XURMTT0T_Yl2Oc.mft (raw, json)
Hash identifier: 3g8pNhzxcdKsZfZYkSCzlGcPkRQsZI/dlV4JachxZVE=
Subject key identifier: 97:6C:A0:6F:BE:B3:42:AB:D4:ED:25:3A:F9:58:7C:07:71:E3:BE:E3
Authority key identifier: F7:AA:51:6C:06:D1:20:D3:76:E5:75:11:31:34:F4:4F:F6:25:D8:E7
Certificate issuer: /CN=f7aa516c06d120d376e575113134f44ff625d8e7
Certificate serial: 0197B6A10D35A4B4D9BD1C705C2B6C8BC0E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/96pRbAbRINN25XURMTT0T_Yl2Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.mft
Manifest number: 2E
Signing time: Sat 28 Jun 2025 13:01:37 +0000
Manifest this update: Sat 28 Jun 2025 13:01:37 +0000
Manifest next update: Sun 29 Jun 2025 13:01:37 +0000
Files and hashes: 1: 96pRbAbRINN25XURMTT0T_Yl2Oc.crl (hash: UTC/I2Vsb4wul0FrJB+8G17rGUxkTtBAWg+d/IEsWNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/96pRbAbRINN25XURMTT0T_Yl2Oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:0d:35:a4:b4:d9:bd:1c:70:5c:2b:6c:8b:c0:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7aa516c06d120d376e575113134f44ff625d8e7
Validity
Not Before: Jun 28 13:01:37 2025 GMT
Not After : Jun 29 13:01:37 2025 GMT
Subject: CN=976ca06fbeb342abd4ed253af9587c0771e3bee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:65:db:70:5d:18:2c:be:3f:38:6a:d2:65:40:
92:26:79:c6:fb:a0:b9:78:49:86:d6:02:1b:f2:38:
ab:08:dc:22:84:ee:3c:51:f4:5f:1b:43:d6:96:52:
fe:7e:23:aa:9b:ad:1c:07:c2:3c:a9:cb:ad:10:82:
53:94:68:c6:cb:78:4e:b7:a1:16:34:59:18:7c:85:
b7:97:6b:05:42:ec:92:1d:ac:5e:8f:73:63:36:f4:
46:28:eb:06:38:28:2a:95:ea:e4:4d:1f:39:c2:6a:
a8:b8:f9:dd:ad:f1:b5:b0:a3:97:ac:4b:7c:d3:3f:
06:5e:35:1d:4a:78:f0:8c:fb:c0:cf:61:78:8f:ca:
ef:78:ca:46:13:90:4b:ac:7e:5d:b3:63:36:8d:a8:
25:f6:a1:a4:d9:80:a4:15:5f:e4:da:a5:b2:a8:df:
d1:07:ef:d8:9a:95:ce:80:c5:6e:40:76:c4:a1:53:
a0:f9:60:6d:cd:ca:a4:33:b5:cd:5f:7d:3c:2e:41:
c7:63:38:44:33:35:ec:01:21:5b:e9:f9:0f:8b:e4:
9f:c8:2e:dc:16:a7:a6:6e:ec:54:bc:b1:d7:a9:06:
84:26:df:d8:66:8e:31:fb:90:a4:6a:24:be:33:65:
fa:33:c4:fd:3e:11:6c:33:03:f5:33:dc:4e:29:67:
fb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:6C:A0:6F:BE:B3:42:AB:D4:ED:25:3A:F9:58:7C:07:71:E3:BE:E3
X509v3 Authority Key Identifier:
keyid:F7:AA:51:6C:06:D1:20:D3:76:E5:75:11:31:34:F4:4F:F6:25:D8:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96pRbAbRINN25XURMTT0T_Yl2Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:4a:de:37:e3:c1:cb:57:13:d2:5d:8b:57:f2:08:bc:8b:8d:
90:e1:a2:ec:38:2f:bd:3f:47:2e:b9:0f:6c:c5:ed:1e:ee:8a:
cd:b6:f2:e9:65:fe:7d:53:e1:ad:07:aa:0d:9b:d4:97:a8:4d:
4f:90:ea:9b:f6:8a:c6:11:34:3d:8a:55:a1:6e:5a:f2:b9:62:
0b:0e:86:e9:63:c8:07:ec:f3:57:88:4f:51:50:b8:c5:54:ce:
94:70:04:d4:2c:5e:5c:c1:e1:76:d2:87:18:78:bc:be:f0:80:
b0:98:de:c8:93:34:7d:2a:60:75:76:df:64:4e:df:5d:0a:f5:
3e:09:b8:1f:2e:1c:37:4a:32:53:fc:77:b2:6a:4e:3e:30:4c:
9b:e2:d2:aa:f0:fe:f0:59:4e:6b:0e:c5:e1:6f:6a:b9:cc:b1:
b9:5d:b3:00:c6:1d:a2:90:2e:5b:54:53:55:e7:7b:a9:13:bd:
0e:b7:c2:a7:9d:50:2a:0d:01:ac:2a:9a:90:4a:48:7b:b6:15:
63:c3:47:83:af:d4:44:a6:e4:17:65:d2:68:27:ed:52:67:b1:
48:95:51:0d:ff:72:63:be:f1:5a:bf:be:76:ec:54:44:d9:00:
fd:d9:19:26:29:95:9b:d3:13:9f:a1:04:49:da:f4:56:0b:db:
fb:53:05:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:55:38 2025 by rpki-client