Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft
File: 97wp81OFLRgNI0EJl9DwR-wXeNM.mft (raw, json)
Hash identifier: Y+dYo2DemJehIqj9dlIjpruRFA+v1s8qd4PSa7H3Jag=
Subject key identifier: 12:F7:AB:8E:AB:8C:E3:FB:87:85:DB:14:D2:A9:86:3E:44:39:8F:3E
Authority key identifier: F7:BC:29:F3:53:85:2D:18:0D:23:41:09:97:D0:F0:47:EC:17:78:D3
Certificate issuer: /CN=f7bc29f353852d180d23410997d0f047ec1778d3
Certificate serial: 01974EC571C6436C8B144C58C2917C789047
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97wp81OFLRgNI0EJl9DwR-wXeNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft
Manifest number: 1513
Signing time: Sun 08 Jun 2025 09:00:51 +0000
Manifest this update: Sun 08 Jun 2025 09:00:51 +0000
Manifest next update: Mon 09 Jun 2025 09:00:51 +0000
Files and hashes: 1: 97wp81OFLRgNI0EJl9DwR-wXeNM.crl (hash: Z4THhzaf06dyWraSxc3FBWfEqzT0TUWJv6VEenHajBM=)
2: VAC_6RsE2oq5MD0lqmXv6KCzwDQ.roa (hash: TCLZUvDrgjrJ7J3tgeNK3Sq6QP0EDUXeSD5NVO6xxj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/97wp81OFLRgNI0EJl9DwR-wXeNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:71:c6:43:6c:8b:14:4c:58:c2:91:7c:78:90:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7bc29f353852d180d23410997d0f047ec1778d3
Validity
Not Before: Jun 8 09:00:51 2025 GMT
Not After : Jun 9 09:00:51 2025 GMT
Subject: CN=12f7ab8eab8ce3fb8785db14d2a9863e44398f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:92:4b:a4:52:13:52:24:8d:ce:23:1f:49:8c:
dd:bc:68:1c:6e:80:14:5b:98:96:c6:37:a8:0f:28:
09:24:8e:4f:2f:20:44:58:c1:de:d0:98:cd:d6:a8:
6d:c5:c4:99:39:85:c9:ca:77:da:09:9a:61:b4:16:
b5:9f:b6:be:b1:8c:0e:8e:b1:1f:a9:42:28:1a:09:
3c:9d:fa:24:f4:78:6b:77:4a:c3:ab:f9:e6:cd:e1:
9d:7a:bf:cc:4d:8f:e6:97:da:5c:f5:83:ef:b0:f4:
f8:6c:fc:be:d8:64:1e:ad:c7:cc:64:dd:60:76:9d:
9a:df:90:af:2a:07:02:5d:ea:26:b5:24:16:2e:ea:
e7:c2:23:0e:d6:18:e5:9e:3c:86:f8:c0:a0:b8:a5:
61:46:c5:2d:83:19:2b:05:57:ea:ea:5a:6a:87:b7:
14:f6:54:01:50:60:fb:d2:34:bc:89:35:c1:68:2d:
34:e9:5b:86:39:65:fe:8a:21:d7:8e:2e:05:4a:9a:
16:87:d5:15:6a:8a:e3:1e:10:fe:51:3f:1d:af:ef:
4e:2d:41:9d:38:21:ca:47:2b:a8:7f:c0:e1:ba:2f:
3b:5f:44:58:fe:0b:38:5b:4a:96:55:9a:17:94:7c:
43:fa:a7:0d:5c:38:a9:3d:04:96:de:ea:68:cd:08:
06:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F7:AB:8E:AB:8C:E3:FB:87:85:DB:14:D2:A9:86:3E:44:39:8F:3E
X509v3 Authority Key Identifier:
keyid:F7:BC:29:F3:53:85:2D:18:0D:23:41:09:97:D0:F0:47:EC:17:78:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97wp81OFLRgNI0EJl9DwR-wXeNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:3e:5b:b5:89:b2:0c:48:b9:4f:ea:f7:e7:6a:64:22:e7:6b:
1c:c7:c3:55:bd:80:9b:b1:22:7e:62:ef:0d:14:36:28:ee:e5:
9b:1e:d1:b0:d2:c1:64:b0:0a:bc:e7:b8:a0:be:05:0d:fc:d9:
d0:bd:3d:09:c6:6e:b9:87:0b:ad:cd:18:61:ca:26:54:30:de:
9c:02:d1:d8:c7:58:2b:4a:1b:a6:c9:3f:36:74:40:b6:17:05:
11:a3:c2:89:99:19:d4:af:b1:0c:4c:89:db:30:73:8d:78:71:
9f:7a:9b:ff:2b:c8:a9:df:9d:09:a7:5a:74:99:aa:f7:c7:82:
55:30:16:1f:d3:07:6e:d1:50:55:b6:6b:89:c5:6e:2e:f4:d7:
21:4f:0f:e1:1c:1d:a0:57:14:38:d7:7c:4e:92:65:29:d1:5d:
4e:e1:e5:39:f5:b0:41:0f:37:45:24:a2:cb:81:5e:b4:cf:f0:
b3:b8:e6:f3:17:44:79:c8:e8:76:ab:67:e9:a0:49:1f:0c:8a:
f1:61:4d:fd:8d:6a:bb:1d:74:d5:ef:13:2c:53:18:5c:cc:7a:
d4:61:f0:10:6e:62:b4:4d:85:fb:0c:c3:60:76:f4:e8:37:38:
0c:99:c9:92:68:dc:dc:33:32:26:86:2f:af:fa:b1:4c:dc:de:
bc:aa:41:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:34:59 2025 by rpki-client