Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.mft
File: 97LAktArE86qejP_BXqECmjXFSE.mft (raw, json)
Hash identifier: mqBT8dO1c4/ajgIuiiVmf3QEAFpNPvbmvCSFYnkq7ao=
Subject key identifier: 53:29:48:07:F3:B3:DB:79:C9:13:1B:1F:91:E0:8D:12:2D:68:04:71
Authority key identifier: F7:B2:C0:92:D0:2B:13:CE:AA:7A:33:FF:05:7A:84:0A:68:D7:15:21
Certificate issuer: /CN=f7b2c092d02b13ceaa7a33ff057a840a68d71521
Certificate serial: 0197488C87D2EB55A0EC323E0ABC672E1EFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97LAktArE86qejP_BXqECmjXFSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.mft
Manifest number: 0F9D
Signing time: Sat 07 Jun 2025 04:00:58 +0000
Manifest this update: Sat 07 Jun 2025 04:00:58 +0000
Manifest next update: Sun 08 Jun 2025 04:00:58 +0000
Files and hashes: 1: 97LAktArE86qejP_BXqECmjXFSE.crl (hash: ZAMKwYF0wQj41ElPmIZn4aw6Ytza2tm8wDfqApksoeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/97LAktArE86qejP_BXqECmjXFSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:87:d2:eb:55:a0:ec:32:3e:0a:bc:67:2e:1e:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b2c092d02b13ceaa7a33ff057a840a68d71521
Validity
Not Before: Jun 7 04:00:58 2025 GMT
Not After : Jun 8 04:00:58 2025 GMT
Subject: CN=53294807f3b3db79c9131b1f91e08d122d680471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b7:84:cd:a5:c6:e7:a2:77:0e:02:80:e2:04:
48:ae:9f:fe:42:e1:c3:89:3c:e6:48:43:3e:da:f2:
17:85:15:d1:0f:ce:1c:ec:2d:ba:65:d5:46:8b:59:
17:aa:06:58:45:4f:4c:e9:59:27:41:67:a7:07:f3:
37:35:47:89:64:01:95:34:be:44:a7:7e:2a:b5:8a:
65:39:84:50:32:d3:f1:40:6c:b4:49:83:db:09:0c:
77:c4:88:ad:87:d7:73:49:5a:7c:e2:5c:cf:92:a6:
59:51:5c:2e:e1:c5:1f:d6:d5:f7:08:20:12:d4:b1:
77:1e:f6:f4:cb:0f:c4:ca:d8:80:e9:e4:16:79:c6:
e5:10:39:77:1b:a2:d1:8b:6c:e2:28:9c:ec:c2:8d:
1c:79:8f:ef:1f:4f:c0:7c:f3:56:1d:df:3d:48:cc:
9a:9f:1d:c1:92:c0:2b:67:44:30:f3:d5:d7:35:a2:
dc:42:2e:b3:41:28:a9:88:e2:93:97:4f:e4:38:1e:
ed:e3:ca:73:b4:41:97:5a:7a:46:d9:b7:8c:ca:7d:
a6:68:29:23:1a:85:26:06:1c:af:73:61:e6:a6:45:
ba:42:39:b1:77:d3:75:55:5f:ee:cc:b3:f0:16:8f:
8b:40:27:d7:4b:b9:32:75:12:c4:0a:e6:59:39:b4:
d1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:29:48:07:F3:B3:DB:79:C9:13:1B:1F:91:E0:8D:12:2D:68:04:71
X509v3 Authority Key Identifier:
keyid:F7:B2:C0:92:D0:2B:13:CE:AA:7A:33:FF:05:7A:84:0A:68:D7:15:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97LAktArE86qejP_BXqECmjXFSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:69:89:35:9a:99:11:c9:10:36:9e:88:dc:1b:85:52:fa:02:
c4:f6:35:c7:55:8d:fd:59:ca:ba:fd:c5:44:1a:e4:d9:09:c6:
f1:e3:17:df:2e:7c:dc:9c:6d:ba:5f:a8:47:96:17:94:72:e7:
43:6e:66:d0:df:cf:37:9e:e9:e2:34:64:89:5d:ee:b6:db:7f:
fd:fb:75:c7:86:c4:0b:da:bb:b3:d5:f1:d4:c9:77:c0:9d:76:
74:a3:30:76:18:0c:c8:21:03:58:23:1e:a5:6a:43:ba:4f:b9:
c6:89:0f:7b:55:47:6c:0a:fe:ca:ef:09:42:bf:56:44:51:30:
ea:3b:e4:ab:c9:c9:0d:b7:82:dd:44:81:25:b8:c4:cc:fc:90:
7a:3e:a5:53:f1:af:49:c2:75:c4:91:3c:99:91:94:c1:de:85:
43:a8:1d:95:b7:18:93:b0:37:6a:ec:f0:25:41:be:c5:45:c6:
ed:f3:6d:82:7e:97:78:8c:a6:30:6a:17:9e:15:ba:54:f9:0b:
9b:74:f1:da:63:70:2e:5a:ec:d3:c0:f6:04:57:68:f0:d7:aa:
c2:17:71:07:73:b1:b4:d0:19:84:07:77:c8:54:f2:9a:e9:00:
1a:f1:17:19:0c:33:19:59:e2:6f:bb:4b:93:47:2b:aa:37:f4:
95:4e:61:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:47:58 2025 by rpki-client