Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft
File: 97UMfoHYzyZNEgm2rVo8y4LBb90.mft (raw, json)
Hash identifier: sMs1/Kg2jQLlRr7W+Yb3LbQVYdg7fzQ/ifrKZnyK03w=
Subject key identifier: 48:FA:AF:B3:DF:A7:94:3A:19:49:D5:7D:6B:04:9F:C9:B5:56:2F:7D
Authority key identifier: F7:B5:0C:7E:81:D8:CF:26:4D:12:09:B6:AD:5A:3C:CB:82:C1:6F:DD
Certificate issuer: /CN=f7b50c7e81d8cf264d1209b6ad5a3ccb82c16fdd
Certificate serial: 01976EF4BAC7BF83918D5EEEF51654E3BD53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft
Manifest number: 0D37
Signing time: Sat 14 Jun 2025 15:00:21 +0000
Manifest this update: Sat 14 Jun 2025 15:00:21 +0000
Manifest next update: Sun 15 Jun 2025 15:00:21 +0000
Files and hashes: 1: 97UMfoHYzyZNEgm2rVo8y4LBb90.crl (hash: LHI91AgyNrxKmeVIYCRg6DO7hN7h0NT0T1RzcC09SuE=)
2: GTCjpLpWFoRKa3RTQC7pQJBM1G0.roa (hash: EhNbeTG6PZNCY341R1mR2HkaZJMJL1NL7VGz9EOMvcU=)
3: SZn8hNrZLFz6_jd__cc2hQYVsJ4.roa (hash: pOi9fCGV3Xellqd7Bg8T2wW6LAr0IHc6DomlTTmJAug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft
rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 15:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f4:ba:c7:bf:83:91:8d:5e:ee:f5:16:54:e3:bd:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b50c7e81d8cf264d1209b6ad5a3ccb82c16fdd
Validity
Not Before: Jun 14 15:00:21 2025 GMT
Not After : Jun 15 15:00:21 2025 GMT
Subject: CN=48faafb3dfa7943a1949d57d6b049fc9b5562f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:91:60:66:4c:00:8a:43:af:48:13:d1:cf:ba:
89:4d:1c:70:95:1a:a7:4d:c5:4c:e7:00:51:45:2a:
4f:41:ba:f7:7e:c4:ed:19:5a:40:3d:9c:02:53:83:
5e:55:c6:5b:82:bd:c5:7d:12:4b:80:6f:ac:c0:ec:
68:e0:43:62:06:d7:c7:e7:a3:bf:c4:7b:ba:28:de:
c6:a8:01:84:a6:4e:ac:85:bd:95:09:47:df:18:e7:
91:9d:84:29:62:04:f0:de:5c:dd:a1:d7:b1:3a:19:
61:74:36:1c:f8:50:bc:3e:fd:1a:72:0a:51:02:2d:
dd:eb:88:c4:9e:9a:70:87:76:d1:32:0a:46:f8:47:
2d:ae:5c:d8:6e:b3:3e:9f:5d:79:9f:d8:08:8a:45:
8a:b6:75:de:25:ad:34:18:05:ca:e6:30:b9:fd:2f:
fb:9e:0e:9d:fd:75:0b:7e:7e:b2:60:90:80:86:4b:
cc:ab:dc:7e:06:e7:3e:bd:0a:a5:e8:04:32:af:38:
1f:9b:28:96:90:91:d5:6f:60:00:31:7d:ee:21:6b:
73:10:7c:57:a3:0a:80:c3:65:9d:8f:d1:62:41:a1:
a7:24:c7:8a:3a:e8:b0:43:19:cc:0a:b1:d6:86:3d:
f9:0c:d6:d9:ef:e8:73:e8:cf:56:84:d7:db:09:8c:
e3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:FA:AF:B3:DF:A7:94:3A:19:49:D5:7D:6B:04:9F:C9:B5:56:2F:7D
X509v3 Authority Key Identifier:
keyid:F7:B5:0C:7E:81:D8:CF:26:4D:12:09:B6:AD:5A:3C:CB:82:C1:6F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:87:20:7e:2a:7c:bd:9d:18:3c:87:8c:04:22:2e:24:a0:0b:
46:b6:d8:c7:bc:f4:50:7f:d9:bf:69:a6:18:53:e0:2e:a5:52:
d4:bd:01:d1:c4:26:01:62:df:6a:f5:a4:26:0b:fb:64:2d:a3:
73:f4:f7:e9:4b:c1:23:42:25:2e:80:a5:8d:94:7e:12:85:aa:
05:bc:5d:34:32:e3:24:0f:20:3b:1d:eb:4e:bc:d3:47:21:f5:
cc:36:d3:82:01:a0:b2:cb:f2:f8:9a:31:c9:4e:1d:ba:a3:83:
f9:ea:94:29:15:98:ae:ee:2b:b4:ff:3d:cf:e7:10:98:ed:7c:
fa:bb:51:8a:d1:8f:a3:49:2a:99:f7:29:84:7a:c5:82:b0:de:
f6:b0:72:fa:ff:fe:1a:b9:a1:3a:da:80:06:99:25:37:ef:86:
39:29:d7:7f:f1:b7:94:06:3d:e2:00:ea:b4:a0:cc:12:01:fb:
32:12:a7:76:f9:44:e7:6c:e3:73:18:49:69:99:50:5e:18:a7:
33:f4:f1:71:ef:50:b3:76:98:f4:63:da:d4:56:25:d3:47:6e:
76:24:f2:68:bb:c5:73:89:cf:1c:1a:7a:63:8a:15:5f:15:bb:
34:7d:bb:58:08:06:57:6f:ce:08:b6:d5:7a:16:c5:00:f4:42:
a5:d3:36:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:41:37 2025 by rpki-client