Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.mft
File: 97nZe5f9TLrO2oHEQG50rW1TkyY.mft (raw, json)
Hash identifier: Kpix5zyz4oTwxDjuNc7f187UAsRcQGeq9V3S9X2s2dg=
Subject key identifier: 97:9D:32:BE:BF:B4:16:1A:8D:80:77:5D:74:C6:53:7A:B6:93:E4:3C
Authority key identifier: F7:B9:D9:7B:97:FD:4C:BA:CE:DA:81:C4:40:6E:74:AD:6D:53:93:26
Certificate issuer: /CN=f7b9d97b97fd4cbaceda81c4406e74ad6d539326
Certificate serial: 01974B1F2EC4CBA263A894786787483FE146
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97nZe5f9TLrO2oHEQG50rW1TkyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.mft
Manifest number: 02C3
Signing time: Sat 07 Jun 2025 16:00:24 +0000
Manifest this update: Sat 07 Jun 2025 16:00:24 +0000
Manifest next update: Sun 08 Jun 2025 16:00:24 +0000
Files and hashes: 1: 97nZe5f9TLrO2oHEQG50rW1TkyY.crl (hash: H6505gY4vIfcGnZKzKrYWGyCSK3aA/svdGOGHwfk4QM=)
2: lbYGE0sLJ3B23IRi-OtNtyGPAp0.roa (hash: DQpQYf+5h9YK3aPo5AxywjFuQIhJ9ib5nUDkQNDeYcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/97nZe5f9TLrO2oHEQG50rW1TkyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 16:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:2e:c4:cb:a2:63:a8:94:78:67:87:48:3f:e1:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b9d97b97fd4cbaceda81c4406e74ad6d539326
Validity
Not Before: Jun 7 16:00:24 2025 GMT
Not After : Jun 8 16:00:24 2025 GMT
Subject: CN=979d32bebfb4161a8d80775d74c6537ab693e43c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:34:0b:41:dd:51:40:31:d5:9c:3e:ab:9d:b8:
0e:8e:85:d7:63:51:13:f9:c9:6e:f2:9e:98:ed:e1:
3b:24:27:b2:2b:de:c5:dd:39:b1:5e:ad:5d:ed:55:
16:1f:b2:f1:ca:7b:2d:a4:67:dc:b8:df:88:03:f2:
27:02:dd:e7:b4:40:99:af:6e:19:c6:fa:c1:56:64:
b2:f6:65:9e:76:97:a4:c3:be:e7:d9:88:99:1e:05:
3f:ca:4f:ec:af:c6:fe:11:04:0c:6a:d0:a4:ff:58:
7f:2c:b5:86:d3:c3:78:90:a5:71:65:3c:eb:b0:6c:
ba:32:dd:ae:f7:b3:ba:33:ec:ea:aa:85:9e:57:64:
c0:35:89:8b:d7:36:cd:3b:e3:f1:b8:7c:79:f5:da:
77:0d:f3:34:f9:a9:1c:b8:95:7e:e7:25:96:37:db:
a3:c9:32:d1:f4:86:68:fb:07:e1:21:aa:47:bd:c2:
17:2e:6c:ba:0c:f0:63:cd:f6:6b:74:d9:11:dc:a8:
de:30:83:21:cc:50:84:3a:fd:e6:8a:10:e2:62:39:
39:3a:44:81:b9:33:bf:b3:84:2a:ac:21:88:83:62:
8c:ab:2a:dc:4c:41:08:68:e0:3b:13:b6:db:33:56:
7d:06:84:82:8c:4b:fd:e6:be:c5:ff:bb:78:1a:93:
35:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:9D:32:BE:BF:B4:16:1A:8D:80:77:5D:74:C6:53:7A:B6:93:E4:3C
X509v3 Authority Key Identifier:
keyid:F7:B9:D9:7B:97:FD:4C:BA:CE:DA:81:C4:40:6E:74:AD:6D:53:93:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97nZe5f9TLrO2oHEQG50rW1TkyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:b6:10:9a:fe:e0:99:0c:3a:fd:eb:e1:ed:5c:03:eb:3b:0e:
4d:b1:68:d6:23:8e:68:f2:49:ec:5d:86:34:f0:57:67:d6:36:
20:f0:9d:b1:69:b7:7f:20:2c:4f:ef:c2:95:11:73:02:7b:b8:
c0:50:e3:27:37:06:6c:c8:d0:dc:cb:fd:31:02:ff:a2:53:61:
d7:74:f8:5f:c2:87:0b:b1:be:0e:00:9b:6e:0f:29:07:3b:3f:
09:6e:8b:91:69:99:b8:cd:1d:fc:b6:31:22:50:9a:0e:cf:86:
c0:bd:46:28:cd:c1:32:fc:5c:28:82:62:8d:2c:8e:38:98:19:
54:de:ea:e5:34:e4:02:01:4f:07:7d:a1:d5:70:e2:98:b0:07:
87:28:32:41:67:50:90:27:72:d0:d4:82:d8:07:56:75:38:e5:
b1:26:fb:94:41:b0:1a:fa:9f:c4:9a:3d:6e:95:d0:b6:13:70:
76:0d:04:76:17:9a:c7:9d:33:a5:57:e1:90:6c:9c:5c:27:a4:
5b:23:52:69:2d:7a:5c:75:b4:a0:b8:79:96:f9:6e:25:d7:88:
dc:42:00:32:98:be:d0:3b:4d:a1:22:91:f5:86:99:e7:b7:e4:
7e:4f:9d:23:77:c8:03:cc:af:c4:71:f7:6d:8e:9f:d8:c8:2d:
ee:86:d0:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLHy7Ey6JjqJR4Z4dIP+FGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3YjlkOTdiOTdmZDRjYmFjZWRhODFjNDQwNmU3NGFkNmQ1
MzkzMjYwHhcNMjUwNjA3MTYwMDI0WhcNMjUwNjA4MTYwMDI0WjAzMTEwLwYDVQQD
Eyg5NzlkMzJiZWJmYjQxNjFhOGQ4MDc3NWQ3NGM2NTM3YWI2OTNlNDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTQLQd1RQDHVnD6rnbgOjoXXY1ET
+clu8p6Y7eE7JCeyK97F3TmxXq1d7VUWH7LxynstpGfcuN+IA/InAt3ntECZr24Z
xvrBVmSy9mWedpekw77n2YiZHgU/yk/sr8b+EQQMatCk/1h/LLWG08N4kKVxZTzr
sGy6Mt2u97O6M+zqqoWeV2TANYmL1zbNO+PxuHx59dp3DfM0+akcuJV+5yWWN9uj
yTLR9IZo+wfhIapHvcIXLmy6DPBjzfZrdNkR3KjeMIMhzFCEOv3mihDiYjk5OkSB
uTO/s4QqrCGIg2KMqyrcTEEIaOA7E7bbM1Z9BoSCjEv95r7F/7t4GpM1rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJedMr6/tBYajYB3XXTGU3q2k+Q8MB8GA1UdIwQY
MBaAFPe52XuX/Uy6ztqBxEBudK1tU5MmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTduWmU1ZjlUTHJPMm9IRVFHNTByVzFUa3lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy80NjlkNDctMDFlMi00ZmNiLWE2OGMt
YTMwZDgyYmQ2MjE5LzEvOTduWmU1ZjlUTHJPMm9IRVFHNTByVzFUa3lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy80NjlkNDctMDFlMi00ZmNiLWE2OGMtYTMwZDgyYmQ2MjE5
LzEvOTduWmU1ZjlUTHJPMm9IRVFHNTByVzFUa3lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvbYQmv7g
mQw6/evh7VwD6zsOTbFo1iOOaPJJ7F2GNPBXZ9Y2IPCdsWm3fyAsT+/ClRFzAnu4
wFDjJzcGbMjQ3Mv9MQL/olNh13T4X8KHC7G+DgCbbg8pBzs/CW6LkWmZuM0d/LYx
IlCaDs+GwL1GKM3BMvxcKIJijSyOOJgZVN7q5TTkAgFPB32h1XDimLAHhygyQWdQ
kCdy0NSC2AdWdTjlsSb7lEGwGvqfxJo9bpXQthNwdg0Edheax50zpVfhkGycXCek
WyNSaS16XHW0oLh5lvluJdeI3EIAMpi+0DtNoSKR9YaZ57fkfk+dI3fIA8yvxHH3
bY6f2Mgt7obQGg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 02:39:58 2025 by rpki-client