Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft
File: 97UMfoHYzyZNEgm2rVo8y4LBb90.mft (raw, json)
Hash identifier: TNrtVhzbywDIzqxlom2P6gRIyq9SbIRPLqtlRFOLe24=
Subject key identifier: D2:07:F9:9A:1A:BA:3D:47:40:4E:3B:31:01:E9:87:47:FB:F7:63:B4
Authority key identifier: F7:B5:0C:7E:81:D8:CF:26:4D:12:09:B6:AD:5A:3C:CB:82:C1:6F:DD
Certificate issuer: /CN=f7b50c7e81d8cf264d1209b6ad5a3ccb82c16fdd
Certificate serial: 01993124B4988CEA4B06BBDA7526B399D3C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft
Manifest number: 0E20
Signing time: Wed 10 Sep 2025 01:01:52 +0000
Manifest this update: Wed 10 Sep 2025 01:01:52 +0000
Manifest next update: Thu 11 Sep 2025 01:01:52 +0000
Files and hashes: 1: 97UMfoHYzyZNEgm2rVo8y4LBb90.crl (hash: DjeU5d2jKGc0YR9+/lpU9P98XirnN0/PO9SdYSeeKHg=)
2: GTCjpLpWFoRKa3RTQC7pQJBM1G0.roa (hash: EhNbeTG6PZNCY341R1mR2HkaZJMJL1NL7VGz9EOMvcU=)
3: SZn8hNrZLFz6_jd__cc2hQYVsJ4.roa (hash: pOi9fCGV3Xellqd7Bg8T2wW6LAr0IHc6DomlTTmJAug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft
rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:24:b4:98:8c:ea:4b:06:bb:da:75:26:b3:99:d3:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b50c7e81d8cf264d1209b6ad5a3ccb82c16fdd
Validity
Not Before: Sep 10 01:01:52 2025 GMT
Not After : Sep 11 01:01:52 2025 GMT
Subject: CN=d207f99a1aba3d47404e3b3101e98747fbf763b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b6:98:de:c2:83:d8:6f:96:6c:a0:64:64:65:
6d:f3:28:55:33:45:9d:3c:21:c6:1f:67:ab:52:45:
31:80:93:73:cf:6c:c6:f1:a5:6e:84:af:90:e0:0f:
72:c6:54:e0:3e:26:0c:c3:a0:bd:3e:07:8b:39:96:
ae:28:0f:e1:b1:34:f8:e2:91:68:10:fb:85:5b:67:
fd:92:ad:2e:05:c1:f3:50:13:f9:96:9e:87:32:40:
7c:fb:21:cc:d1:4d:e9:11:94:94:bb:f8:c7:a1:a8:
3f:f7:1c:d5:6b:dc:0e:eb:fe:d6:16:68:03:03:95:
63:ae:0d:10:71:16:a9:80:fa:da:ce:25:c9:6b:bb:
dd:76:a2:7b:0d:99:9e:79:05:88:55:1f:1c:ca:b0:
3b:c4:27:ce:3a:b2:70:95:9b:e0:cf:91:a8:08:ba:
4e:84:ca:34:42:bc:36:6f:c8:54:b1:96:4b:e7:3b:
db:32:a5:33:9f:92:65:af:f1:56:47:88:b4:be:c5:
4b:27:6f:84:64:29:b1:e6:b2:c8:97:ac:72:e1:c3:
ec:c5:56:ad:f9:01:af:e6:01:c2:8c:8d:5a:5b:7d:
b0:75:ea:46:05:5d:8c:05:b1:e2:b5:46:f3:9d:0e:
4b:81:0d:f7:2d:b8:7e:f4:a0:2d:af:f1:f7:a9:ae:
fb:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:07:F9:9A:1A:BA:3D:47:40:4E:3B:31:01:E9:87:47:FB:F7:63:B4
X509v3 Authority Key Identifier:
keyid:F7:B5:0C:7E:81:D8:CF:26:4D:12:09:B6:AD:5A:3C:CB:82:C1:6F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:65:20:18:09:53:a9:55:26:f5:a3:66:99:b6:b8:fe:b0:5d:
b4:a9:8c:50:15:d8:99:b8:71:ed:c2:17:32:a6:56:ed:76:03:
9d:88:43:16:d4:17:8a:16:8d:1c:6e:eb:2e:12:c1:a9:87:01:
ec:b5:f6:9e:61:0a:bd:70:d6:ec:44:b4:2c:a6:60:6a:57:ef:
95:8f:c0:19:c9:50:40:c6:7b:01:ad:38:0e:40:b9:06:e8:2a:
fa:1a:ea:89:d0:9c:d2:51:35:31:e6:89:c9:87:52:53:97:6f:
4f:9d:57:1f:e9:a3:e8:19:41:e4:22:4f:2c:41:27:de:71:46:
ba:4b:bc:fd:f3:62:63:86:93:64:c3:99:e4:7d:b3:f8:df:d6:
0f:d9:9a:96:5f:d0:b2:18:8c:2c:4e:1d:4b:8b:d1:76:51:37:
35:c4:1a:62:45:2f:4f:28:c4:a0:40:ce:2c:98:ea:ab:65:7f:
0f:38:a4:83:01:7d:3b:b0:4e:8c:ce:ee:62:e3:5e:2d:bf:00:
09:89:e6:8a:3d:b1:9f:a5:10:b4:90:f8:fb:9e:1d:b0:68:b6:
9b:4e:3d:45:ae:5c:b1:0c:74:a3:70:14:33:2b:36:fc:4c:44:
cd:40:11:bc:4e:f4:cf:0f:bc:4e:c6:d4:b4:51:69:34:8b:9b:
c1:a0:09:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 04:17:45 2025 by rpki-client