Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft
File: 97UMfoHYzyZNEgm2rVo8y4LBb90.mft (raw, json)
Hash identifier: SaAe6sZdjDJigQraiMlp77s5nhImk/TPrnITT8ObgW0=
Subject key identifier: 2B:85:7B:BF:1D:FE:50:EB:A5:AA:AD:14:A7:69:26:94:53:EC:18:A9
Authority key identifier: F7:B5:0C:7E:81:D8:CF:26:4D:12:09:B6:AD:5A:3C:CB:82:C1:6F:DD
Certificate issuer: /CN=f7b50c7e81d8cf264d1209b6ad5a3ccb82c16fdd
Certificate serial: 019759B6DB4875A004B8C627688B5A6BEFCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft
Manifest number: 0D2C
Signing time: Tue 10 Jun 2025 12:00:45 +0000
Manifest this update: Tue 10 Jun 2025 12:00:45 +0000
Manifest next update: Wed 11 Jun 2025 12:00:45 +0000
Files and hashes: 1: 97UMfoHYzyZNEgm2rVo8y4LBb90.crl (hash: j7Rj3WzuhDv0D+HOFo7jb4VfqWwDh9iITt0RYYgDIQ4=)
2: GTCjpLpWFoRKa3RTQC7pQJBM1G0.roa (hash: EhNbeTG6PZNCY341R1mR2HkaZJMJL1NL7VGz9EOMvcU=)
3: SZn8hNrZLFz6_jd__cc2hQYVsJ4.roa (hash: pOi9fCGV3Xellqd7Bg8T2wW6LAr0IHc6DomlTTmJAug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft
rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:b6:db:48:75:a0:04:b8:c6:27:68:8b:5a:6b:ef:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b50c7e81d8cf264d1209b6ad5a3ccb82c16fdd
Validity
Not Before: Jun 10 12:00:45 2025 GMT
Not After : Jun 11 12:00:45 2025 GMT
Subject: CN=2b857bbf1dfe50eba5aaad14a769269453ec18a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d4:b5:c1:16:47:9d:dd:4b:8b:19:94:3a:8c:
3c:9b:25:cd:9e:e0:12:8b:db:5c:f6:c8:f2:ca:37:
44:b1:bf:55:52:e6:8a:99:d0:85:4a:92:8a:cf:9b:
bb:b2:81:f5:66:07:b9:cc:3c:a9:39:b4:41:fa:30:
b0:fc:ef:5f:d3:92:19:ea:02:35:91:63:49:08:33:
c2:94:5d:31:83:e0:cd:40:37:68:ac:d2:f6:80:06:
97:f1:13:42:f1:77:d9:13:99:1f:b7:b3:43:0b:03:
c1:e4:28:9b:b1:3c:0f:6c:bc:b8:72:d1:cc:92:62:
d6:59:57:2f:d4:88:c3:03:29:e9:d3:96:6f:bd:0f:
db:17:ed:fc:be:88:21:43:83:a2:2a:65:4d:ae:53:
e8:21:a6:61:79:a8:e0:a0:f8:d1:13:0f:b8:a0:72:
5e:8a:1b:2a:96:7d:95:de:a1:f7:30:9e:56:84:13:
2a:d8:e5:31:4c:bf:fb:05:6f:1c:9e:14:48:8c:3c:
11:17:5a:81:f3:5b:35:68:a9:0a:56:82:8b:42:f0:
21:43:11:be:7d:86:24:53:88:33:31:cf:00:68:52:
12:c8:e5:e0:e8:7e:b5:8a:cc:1c:06:b1:05:3a:79:
2d:98:0a:7b:8d:e2:58:c7:bb:a5:c5:0a:96:50:94:
56:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:85:7B:BF:1D:FE:50:EB:A5:AA:AD:14:A7:69:26:94:53:EC:18:A9
X509v3 Authority Key Identifier:
keyid:F7:B5:0C:7E:81:D8:CF:26:4D:12:09:B6:AD:5A:3C:CB:82:C1:6F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:60:06:38:c8:1d:1f:b0:ce:13:74:b3:bd:44:91:d7:29:05:
22:6f:ef:47:9b:35:75:e6:bf:8e:6a:cb:22:b7:3b:49:b6:09:
19:9e:93:59:6b:c5:f9:44:0f:83:b9:bc:63:50:46:46:de:43:
72:8f:42:c2:d6:22:82:d8:de:29:83:84:80:38:55:ba:cf:74:
73:cd:38:4c:39:35:d9:f1:16:30:b3:66:1b:ab:28:fb:2f:4b:
80:98:70:3c:f8:79:90:0b:f2:c5:07:e3:b0:25:66:58:22:75:
1d:24:39:44:63:10:fd:48:9c:19:91:c7:79:b9:d3:3e:b8:30:
02:38:11:18:80:69:72:80:68:a2:a5:92:6e:fb:6b:41:75:38:
d9:57:e9:2a:aa:46:51:df:05:6c:1a:d4:66:cb:fc:62:13:1e:
aa:d6:51:b8:d2:f0:af:3f:0e:49:b1:cc:b2:72:af:90:b1:81:
57:7c:fc:0f:54:78:2d:3a:2b:54:f3:0c:48:92:97:6d:ba:ed:
85:85:a9:ef:a3:c9:73:0f:92:d3:a4:64:ba:01:21:81:37:66:
f1:66:ee:10:c3:5f:06:e0:c5:62:02:a9:e2:e9:5d:2f:3a:7e:
ff:11:95:a5:0c:a1:3a:da:7c:25:29:7a:da:5c:ae:c2:6c:e2:
58:50:c3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 21:22:00 2025 by rpki-client