Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft
File: 97UMfoHYzyZNEgm2rVo8y4LBb90.mft (raw, json)
Hash identifier: 2C7SZmuvVIo/7/Zisf4pzLMwV46XOysJpCrAk0zMNuA=
Subject key identifier: 50:A5:F3:A1:93:3B:9C:CB:59:65:13:07:57:3C:B9:F7:AA:CF:AD:7D
Authority key identifier: F7:B5:0C:7E:81:D8:CF:26:4D:12:09:B6:AD:5A:3C:CB:82:C1:6F:DD
Certificate issuer: /CN=f7b50c7e81d8cf264d1209b6ad5a3ccb82c16fdd
Certificate serial: 0197635EC995752DB1EB59BAC18BC6220FD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft
Manifest number: 0D31
Signing time: Thu 12 Jun 2025 09:00:45 +0000
Manifest this update: Thu 12 Jun 2025 09:00:45 +0000
Manifest next update: Fri 13 Jun 2025 09:00:45 +0000
Files and hashes: 1: 97UMfoHYzyZNEgm2rVo8y4LBb90.crl (hash: ozJ8eGeTR1gK50DYpAchwXj+ZOkQGyO4NAvYbQ6zj2E=)
2: GTCjpLpWFoRKa3RTQC7pQJBM1G0.roa (hash: EhNbeTG6PZNCY341R1mR2HkaZJMJL1NL7VGz9EOMvcU=)
3: SZn8hNrZLFz6_jd__cc2hQYVsJ4.roa (hash: pOi9fCGV3Xellqd7Bg8T2wW6LAr0IHc6DomlTTmJAug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft
rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:5e:c9:95:75:2d:b1:eb:59:ba:c1:8b:c6:22:0f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b50c7e81d8cf264d1209b6ad5a3ccb82c16fdd
Validity
Not Before: Jun 12 09:00:45 2025 GMT
Not After : Jun 13 09:00:45 2025 GMT
Subject: CN=50a5f3a1933b9ccb59651307573cb9f7aacfad7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:02:20:bd:a1:6d:3a:63:35:ce:4c:01:46:92:
fc:7e:42:e6:18:cd:67:67:34:9c:46:93:c5:d7:68:
95:28:55:b5:60:c1:94:ed:95:05:17:79:bc:e8:20:
23:bc:d4:8a:21:4d:7f:31:f7:3c:c9:a2:c5:36:64:
67:88:cf:a3:71:6e:39:50:65:71:d5:1b:07:3f:e5:
27:55:21:57:5b:db:97:74:e2:be:99:72:67:c1:ea:
5e:02:0c:a5:2c:f3:4b:df:44:9d:b0:05:29:0e:82:
6c:c7:68:7d:21:8a:f8:94:23:c9:20:4e:6b:20:37:
ff:be:69:c9:85:30:37:81:25:ea:74:bb:23:7b:43:
39:3d:62:ed:df:c2:12:12:3d:6f:ea:a8:e1:0b:8e:
e5:af:1d:cd:37:44:75:2a:62:22:21:f1:3b:2a:6c:
7d:67:28:ef:12:21:ee:8d:97:fb:b6:01:ce:37:dc:
3b:bd:67:3a:80:78:0f:ca:05:a9:3e:58:96:f4:cc:
6e:8f:39:ed:de:20:d8:65:ff:e0:a5:bc:06:0a:ad:
a2:9a:3b:49:29:82:20:d5:e2:1f:93:21:a5:62:39:
10:ae:d7:ea:31:6f:11:1a:12:7a:84:9b:9f:99:d4:
18:44:3c:f7:65:0d:9f:2f:18:79:2a:34:4f:11:d9:
4d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:A5:F3:A1:93:3B:9C:CB:59:65:13:07:57:3C:B9:F7:AA:CF:AD:7D
X509v3 Authority Key Identifier:
keyid:F7:B5:0C:7E:81:D8:CF:26:4D:12:09:B6:AD:5A:3C:CB:82:C1:6F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:a4:e3:81:51:8a:86:7b:d6:b5:d7:a3:ef:83:e0:16:d0:86:
3e:97:58:a3:20:92:ca:72:75:90:fa:9a:80:ee:4d:59:bb:79:
4f:81:7e:6f:77:0b:a5:3b:3d:35:ce:28:64:f9:ed:37:df:73:
f9:88:d2:7d:61:c5:22:fa:ec:49:5a:44:1a:20:aa:5e:51:19:
40:6c:8b:30:ec:f6:25:9b:a6:46:6b:79:ba:93:57:2e:75:e8:
56:7e:4c:a3:87:54:bf:b6:55:2f:07:68:fc:e0:8a:6f:41:f9:
19:19:82:37:9a:70:b3:a9:4d:49:63:de:55:bb:3a:b0:57:ac:
ef:71:36:e3:d3:47:37:ff:95:dc:8c:aa:6c:c9:dd:05:09:14:
f4:e4:82:9f:7f:11:b2:51:88:c8:43:dd:e8:ac:3d:a8:62:88:
7a:ab:7d:15:e0:fd:b6:72:d1:6d:61:ee:4a:83:46:6e:00:60:
9a:61:e4:eb:38:63:6b:4d:38:d5:53:9a:3b:2e:c2:d5:22:a0:
4e:26:b9:54:a8:4a:52:cb:6b:29:c1:36:d7:5a:e8:34:b1:64:
d2:57:e2:ef:55:0f:96:3c:9b:93:7b:d1:33:93:ec:63:a1:82:
70:a1:0c:e3:f2:7d:d8:d1:78:bd:89:6d:c9:25:06:4a:5b:c4:
48:87:2e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 12:08:10 2025 by rpki-client