Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.mft
File: 97KiPZsF9XV53i8CRJtmYD4-Vzo.mft (raw, json)
Hash identifier: e7r0wcU+gBHVevcZpNmytZkATSUA2UHO6+AtCjU504o=
Subject key identifier: 9C:01:CE:0A:A8:51:4A:FA:7B:C2:6A:B6:FD:05:9B:01:79:81:A0:B2
Authority key identifier: F7:B2:A2:3D:9B:05:F5:75:79:DE:2F:02:44:9B:66:60:3E:3E:57:3A
Certificate issuer: /CN=f7b2a23d9b05f57579de2f02449b66603e3e573a
Certificate serial: 01984AAECA6CBB1C6E51B0123549A566871F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97KiPZsF9XV53i8CRJtmYD4-Vzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.mft
Manifest number: 11B5
Signing time: Sun 27 Jul 2025 07:00:25 +0000
Manifest this update: Sun 27 Jul 2025 07:00:25 +0000
Manifest next update: Mon 28 Jul 2025 07:00:25 +0000
Files and hashes: 1: 97KiPZsF9XV53i8CRJtmYD4-Vzo.crl (hash: Y8xy7Q9YFUQDxeIwxz/0GbM2T65WPHRMVovTO/h1dZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/97KiPZsF9XV53i8CRJtmYD4-Vzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:ca:6c:bb:1c:6e:51:b0:12:35:49:a5:66:87:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b2a23d9b05f57579de2f02449b66603e3e573a
Validity
Not Before: Jul 27 07:00:25 2025 GMT
Not After : Jul 28 07:00:25 2025 GMT
Subject: CN=9c01ce0aa8514afa7bc26ab6fd059b017981a0b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:98:06:e9:d5:56:e5:58:f5:f9:b3:b2:ee:42:
8e:65:5c:61:33:d9:7a:34:91:ca:0d:6e:00:3b:9b:
40:9e:65:ec:bb:7d:20:8d:b1:9e:cd:fc:e1:1e:54:
a4:00:cf:e6:8f:db:ea:37:06:ef:96:fe:ca:c4:4c:
a7:4b:d8:ff:ba:f2:e6:0b:ea:9f:e8:89:2f:3b:4d:
82:0f:fb:f8:77:d5:47:3f:dd:92:f7:36:b9:d9:5d:
ba:8f:ff:45:c1:65:b9:18:2e:a1:a3:60:02:e9:24:
46:71:89:5f:f7:4e:dd:5a:10:8f:b3:df:9f:7c:ae:
2b:8f:58:56:a8:37:11:97:da:17:5b:7e:2b:0a:c1:
f2:11:8c:de:7f:92:ec:5b:40:27:e8:70:ec:18:81:
24:ad:57:80:e1:9a:78:d9:8d:b6:b1:95:e4:95:de:
04:e0:29:3f:67:04:01:d4:50:00:a7:0f:9c:7e:94:
5d:a4:ea:3c:6e:af:13:81:f0:23:b1:8d:e9:fb:07:
9b:ba:cc:b6:31:c7:6c:11:ed:b0:46:f6:f8:3a:c0:
9f:10:4a:fb:04:f8:76:fe:c9:2d:e8:6d:f1:19:0b:
23:7d:9b:53:de:da:03:41:f0:1f:33:92:41:59:5b:
ee:5d:cf:43:64:f6:d4:67:c3:c2:c6:d2:ba:8d:c0:
be:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:01:CE:0A:A8:51:4A:FA:7B:C2:6A:B6:FD:05:9B:01:79:81:A0:B2
X509v3 Authority Key Identifier:
keyid:F7:B2:A2:3D:9B:05:F5:75:79:DE:2F:02:44:9B:66:60:3E:3E:57:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97KiPZsF9XV53i8CRJtmYD4-Vzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:36:d1:11:51:eb:8c:50:36:7f:ec:53:f1:50:be:08:9a:c6:
f9:f6:c9:eb:7c:3a:77:67:a0:bb:e1:cf:7f:44:1f:55:8a:26:
d0:76:99:e9:00:b6:c3:27:8d:a3:80:1b:31:c0:4d:8f:2c:67:
d2:66:87:09:ed:68:0f:a4:5d:91:cf:c7:cf:4d:cf:8b:2c:d1:
10:b3:f4:45:62:ce:4f:03:88:24:e0:b6:43:54:31:ab:19:22:
41:a6:4e:6e:e4:f1:58:fd:18:c2:6f:81:da:6c:f5:9c:4b:15:
1e:8c:f2:fe:e2:52:07:e1:dd:01:c1:94:ed:83:41:f0:74:6d:
e1:98:a9:15:1e:60:8c:28:5f:a8:c7:45:11:eb:56:7e:db:ed:
b9:10:dc:80:2b:f5:4c:3f:c1:54:ba:74:b0:39:18:ad:60:07:
6f:e8:e4:cb:7c:61:d3:4c:48:4b:80:22:38:27:d7:56:1c:d1:
9f:c6:78:a8:c1:19:0e:de:8f:0a:73:3c:68:58:9d:5d:e7:dc:
4b:71:68:80:a2:e6:24:f7:00:b3:10:f4:42:f8:ae:98:2e:06:
d3:c2:d7:68:f0:a9:ba:bb:6c:12:67:62:2c:0c:91:22:67:de:
3c:28:ce:db:ff:72:51:8e:a9:30:9e:6a:75:09:e9:15:2d:f6:
13:d3:cc:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:23:37 2025 by rpki-client