Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
File: 97NANTBJjYJfLniKB2UDvJ3OFXQ.mft (raw, json)
Hash identifier: qNzFqk7Czt3e+y7VDbj8M6Z7McnmGQTxdFvhYIf9vGI=
Subject key identifier: FE:20:E5:8B:F9:6E:75:6B:49:CB:A5:D7:F1:4E:62:D2:24:C4:76:24
Authority key identifier: F7:B3:40:35:30:49:8D:82:5F:2E:78:8A:07:65:03:BC:9D:CE:15:74
Certificate issuer: /CN=f7b3403530498d825f2e788a076503bc9dce1574
Certificate serial: 01974D44D654B8171E3CA7A44BA14975586F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
Manifest number: 0652
Signing time: Sun 08 Jun 2025 02:00:46 +0000
Manifest this update: Sun 08 Jun 2025 02:00:46 +0000
Manifest next update: Mon 09 Jun 2025 02:00:46 +0000
Files and hashes: 1: 97NANTBJjYJfLniKB2UDvJ3OFXQ.crl (hash: qEs9CQ8HJaOcRA1NvOLtcPOKk4g1PT8C2wGBImziKbQ=)
2: wilpaK1V0r35ZNvUw0OLpxxalHM.roa (hash: cc48kr9ntP1AGZHGu6VbcBWoFsvg/tsNceyhXPWuzak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:d6:54:b8:17:1e:3c:a7:a4:4b:a1:49:75:58:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b3403530498d825f2e788a076503bc9dce1574
Validity
Not Before: Jun 8 02:00:46 2025 GMT
Not After : Jun 9 02:00:46 2025 GMT
Subject: CN=fe20e58bf96e756b49cba5d7f14e62d224c47624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2a:02:6d:7e:7d:47:6c:7d:46:50:68:fb:82:
95:f6:60:b5:0c:5f:3d:52:b6:dc:94:3e:6f:ca:a3:
4c:e4:6f:88:19:09:0b:7c:72:a6:0a:d8:dd:05:4d:
0a:b9:da:95:a8:ec:5e:28:f8:74:17:bb:f9:48:dd:
49:26:2f:0b:97:aa:1e:b9:58:94:64:1d:04:44:d8:
c4:bc:29:c8:50:3d:f2:fe:2b:f8:a6:8b:a4:d9:1e:
2a:f7:b4:7a:df:e7:64:eb:26:94:51:df:65:0a:43:
22:ca:24:26:2c:dc:99:e2:9b:ba:00:09:9e:35:20:
10:14:e6:2c:c7:65:76:1c:ee:8f:51:d4:81:07:27:
ad:50:b9:f2:a8:07:65:bc:69:da:c2:68:3d:75:14:
84:71:8e:e6:0e:a7:dd:de:62:d9:36:59:e3:ed:9d:
de:77:58:d9:f7:8f:ea:6f:26:76:f9:8d:03:d3:3f:
a2:75:c9:30:34:54:17:16:ff:e6:03:f5:df:0f:58:
01:13:66:56:35:46:3a:32:b8:ec:75:eb:22:63:39:
b1:43:b7:50:af:5d:70:3d:9d:db:57:86:a9:43:6f:
7e:18:16:59:58:ad:05:e2:35:fb:e4:c3:12:1e:37:
f8:02:80:b0:e7:4b:ad:67:f3:9d:98:24:e6:8a:bd:
90:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:20:E5:8B:F9:6E:75:6B:49:CB:A5:D7:F1:4E:62:D2:24:C4:76:24
X509v3 Authority Key Identifier:
keyid:F7:B3:40:35:30:49:8D:82:5F:2E:78:8A:07:65:03:BC:9D:CE:15:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:47:1c:18:1a:0c:3a:b1:e6:ed:aa:ee:9d:c4:07:ab:b2:5f:
62:66:e2:6d:57:3e:9f:f6:e9:b1:d4:55:f6:93:1b:d1:79:39:
24:7b:b7:50:ba:2b:3e:53:83:aa:7e:af:28:41:a7:16:49:c7:
df:c8:e3:c2:21:84:26:22:6b:b8:2e:dd:c4:bf:c5:dc:ce:52:
ea:b2:ce:06:3c:ba:96:e0:d6:ef:e0:ad:31:e9:3d:dd:99:43:
b2:74:5a:e4:ef:b9:54:89:98:2e:a9:1d:27:26:04:b1:53:08:
3b:b5:c6:79:7e:ca:9f:2a:ad:37:de:bd:21:ea:d7:c7:26:15:
af:c3:4f:b5:eb:81:3e:46:a5:8f:bb:2c:88:4c:bd:eb:07:36:
73:16:e1:62:71:30:bd:d8:f1:51:1b:3b:0c:b3:59:9f:b9:ff:
09:69:ab:0d:e7:cb:96:93:a4:67:7b:44:b7:72:0b:b8:f9:69:
53:da:41:83:92:d2:d3:ab:5c:49:11:d2:a3:a8:30:c5:8b:ba:
1c:4e:b4:e9:54:e3:e2:87:d0:25:47:0b:48:c7:35:bc:0b:11:
b2:96:b1:cd:c6:68:f0:71:86:12:3c:48:f9:7f:47:8c:1f:ce:
b7:6e:3a:db:dd:0c:c5:db:fd:1d:d6:cc:8f:77:60:e2:69:05:
6a:53:d2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:56:01 2025 by rpki-client