Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft
File: 97UMfoHYzyZNEgm2rVo8y4LBb90.mft (raw, json)
Hash identifier: qEeBtb44bb2VJLkFwfZwqFolbH9yu3zcAPP5gxjZ2EQ=
Subject key identifier: FD:77:01:91:75:19:F5:C7:FB:34:85:40:CA:08:8C:C1:6F:74:AF:FE
Authority key identifier: F7:B5:0C:7E:81:D8:CF:26:4D:12:09:B6:AD:5A:3C:CB:82:C1:6F:DD
Certificate issuer: /CN=f7b50c7e81d8cf264d1209b6ad5a3ccb82c16fdd
Certificate serial: 01976929EB3AF545B513E49A33590FE33404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft
Manifest number: 0D34
Signing time: Fri 13 Jun 2025 12:00:44 +0000
Manifest this update: Fri 13 Jun 2025 12:00:44 +0000
Manifest next update: Sat 14 Jun 2025 12:00:44 +0000
Files and hashes: 1: 97UMfoHYzyZNEgm2rVo8y4LBb90.crl (hash: YNYsUC73jlXG40X31lwKhXXLhLcQ4pBz1kbyy1a6KWk=)
2: GTCjpLpWFoRKa3RTQC7pQJBM1G0.roa (hash: EhNbeTG6PZNCY341R1mR2HkaZJMJL1NL7VGz9EOMvcU=)
3: SZn8hNrZLFz6_jd__cc2hQYVsJ4.roa (hash: pOi9fCGV3Xellqd7Bg8T2wW6LAr0IHc6DomlTTmJAug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft
rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:eb:3a:f5:45:b5:13:e4:9a:33:59:0f:e3:34:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b50c7e81d8cf264d1209b6ad5a3ccb82c16fdd
Validity
Not Before: Jun 13 12:00:44 2025 GMT
Not After : Jun 14 12:00:44 2025 GMT
Subject: CN=fd7701917519f5c7fb348540ca088cc16f74affe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bc:4f:00:22:6e:c1:64:1b:c5:b7:0e:74:85:
c8:73:39:01:69:a9:2f:33:58:49:d9:32:4d:c7:41:
75:a9:5e:14:80:44:ec:5b:6f:a9:7c:f3:b5:0f:c6:
84:b7:59:45:32:80:a8:65:8c:61:6a:06:04:c0:a6:
97:98:3b:37:e1:11:18:25:75:f8:9c:cd:ef:b1:92:
74:c4:9f:7a:38:f3:e8:95:63:77:66:07:75:95:e8:
ea:13:33:8c:ac:9a:df:27:18:84:4b:b6:60:ea:09:
8f:93:d5:cd:56:50:e7:4b:e7:6f:2b:1f:22:04:f5:
11:a6:64:51:a6:c0:0f:8b:58:8b:49:47:3b:db:7d:
24:9c:f5:21:cc:8a:62:16:ea:ae:da:22:63:e5:1e:
0b:ff:35:52:9f:b5:48:ce:a5:8d:99:88:0d:51:fd:
78:99:02:ed:d1:41:e5:98:ce:6c:9c:af:22:d2:2e:
53:ae:e8:fe:12:54:e8:ef:de:df:93:b5:8d:bf:c9:
2c:b1:94:bf:47:58:c6:25:0e:cf:90:b9:44:5a:13:
4d:b7:ab:1d:20:c3:52:7c:11:7c:c8:e6:06:2c:03:
88:69:ed:d8:f8:6c:66:fe:fa:ac:ab:39:a2:d3:1b:
ef:63:f3:10:ee:5d:93:38:92:73:d1:ce:67:9d:27:
4c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:77:01:91:75:19:F5:C7:FB:34:85:40:CA:08:8C:C1:6F:74:AF:FE
X509v3 Authority Key Identifier:
keyid:F7:B5:0C:7E:81:D8:CF:26:4D:12:09:B6:AD:5A:3C:CB:82:C1:6F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:f3:83:e5:de:01:6d:20:b7:88:2a:d7:ee:3a:1e:56:0a:4e:
49:fc:e4:06:64:1e:76:5b:a6:30:51:2a:e8:05:e8:97:e7:52:
43:0a:3c:4e:da:74:d1:c8:ce:86:5c:46:f7:12:15:80:26:2b:
02:7f:30:b7:29:06:c4:3f:fa:d0:87:11:20:7c:ba:d6:89:65:
e6:83:0b:46:5d:f5:8e:21:1d:67:50:c0:6d:b1:4b:87:94:77:
85:b6:b5:2c:24:00:30:df:1f:db:ca:64:11:d9:e7:78:01:3d:
3b:a2:c3:c1:42:55:f7:74:51:70:fa:18:87:b0:c7:9a:7b:74:
44:95:98:f5:63:c7:22:dc:82:fd:49:59:2b:f3:2f:ab:31:67:
d5:42:c6:9d:62:a3:56:85:b2:da:59:8b:2d:30:89:19:4a:6b:
da:09:a9:a1:d3:b9:e2:4a:39:a5:c6:19:4d:6b:cf:0b:c4:c7:
67:fb:12:a0:59:f9:fc:ab:ce:6c:ca:a2:a0:9b:45:a0:68:9c:
d3:bf:5a:11:73:56:c4:71:5b:e4:7f:a6:df:b5:fc:74:aa:2b:
b4:27:13:cc:98:25:75:67:b9:ee:12:5b:9a:a4:97:be:f5:2d:
3e:28:84:0d:e3:20:c3:a3:7d:1a:21:cd:6b:32:1d:16:45:3d:
52:1d:41:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 14:50:58 2025 by rpki-client