Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
File: 97NANTBJjYJfLniKB2UDvJ3OFXQ.mft (raw, json)
Hash identifier: 7COvw8gxDa7yk0Vd5iS56EybBEb7lY8imo97ENQyscY=
Subject key identifier: CC:DD:B6:66:CA:A5:0F:C9:B2:43:A4:62:D6:90:80:4C:2D:ED:EF:E9
Authority key identifier: F7:B3:40:35:30:49:8D:82:5F:2E:78:8A:07:65:03:BC:9D:CE:15:74
Certificate issuer: /CN=f7b3403530498d825f2e788a076503bc9dce1574
Certificate serial: 019A1F88590DA0080485D2C539F101124125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
Manifest number: 07C8
Signing time: Sun 26 Oct 2025 08:00:20 +0000
Manifest this update: Sun 26 Oct 2025 08:00:20 +0000
Manifest next update: Mon 27 Oct 2025 08:00:20 +0000
Files and hashes: 1: 97NANTBJjYJfLniKB2UDvJ3OFXQ.crl (hash: 4YPHuvQRH3QXRLPVhhTFD/PyJjq7HuizIUkDGltEJGg=)
2: wilpaK1V0r35ZNvUw0OLpxxalHM.roa (hash: cc48kr9ntP1AGZHGu6VbcBWoFsvg/tsNceyhXPWuzak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:88:59:0d:a0:08:04:85:d2:c5:39:f1:01:12:41:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b3403530498d825f2e788a076503bc9dce1574
Validity
Not Before: Oct 26 08:00:20 2025 GMT
Not After : Oct 27 08:00:20 2025 GMT
Subject: CN=ccddb666caa50fc9b243a462d690804c2dedefe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:59:c8:81:8b:7c:1b:11:ed:44:59:71:72:d4:
d1:8a:61:b5:c1:6a:bf:ed:6a:e7:62:5e:62:c7:20:
70:5b:67:b8:63:e4:c6:0f:0f:0e:f5:5a:de:50:2f:
70:c3:bb:83:a2:ee:67:8b:bd:8c:39:59:34:dc:2b:
08:eb:d2:cf:03:cf:ed:7d:d0:6c:fa:82:47:ce:f0:
6d:9f:c9:1d:d9:b5:2e:42:36:13:b1:1f:c7:4b:c8:
a9:40:3d:fa:25:ae:54:26:87:1e:cf:07:d3:cc:1f:
fb:eb:1b:1b:fc:00:01:85:14:34:c9:a0:9f:aa:b7:
26:f5:40:d3:ec:ec:80:e8:3a:fb:ec:b0:aa:af:0a:
c3:7f:6e:f4:d8:ab:ae:6e:b5:55:7a:b4:9f:e9:39:
76:eb:7f:27:45:04:90:57:e7:33:3e:15:69:58:5c:
69:4d:79:8c:1f:70:38:12:ff:ea:c5:c5:5d:e6:d7:
4e:74:11:6f:29:b9:ab:d8:72:3c:08:29:53:17:7b:
25:f7:7f:86:16:c1:79:44:9f:4b:f4:a3:33:a9:35:
31:e7:f6:cc:2b:b5:23:df:96:40:a5:36:00:49:56:
c9:9b:f4:8c:fc:2a:ce:69:7f:e5:28:c5:9a:3d:f6:
96:e4:40:5a:8a:ca:b0:6e:b0:c1:9b:8b:ce:d5:8d:
31:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:DD:B6:66:CA:A5:0F:C9:B2:43:A4:62:D6:90:80:4C:2D:ED:EF:E9
X509v3 Authority Key Identifier:
keyid:F7:B3:40:35:30:49:8D:82:5F:2E:78:8A:07:65:03:BC:9D:CE:15:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:75:f1:44:d5:25:70:f4:af:4a:13:1f:81:9d:bd:ec:02:b2:
06:11:bc:27:f2:78:8e:7a:ae:f7:6f:eb:ca:f1:03:5a:71:2c:
b8:2e:8e:9c:96:44:bf:e4:81:9d:a3:48:63:12:d4:93:8b:3d:
eb:da:d3:4c:b1:de:03:5d:ff:1b:d7:f5:86:c1:20:4a:28:63:
75:0e:eb:ab:e8:dd:d8:e8:69:19:1c:dd:5c:0f:20:5a:18:08:
4d:84:63:a3:fd:c6:ac:a8:64:3e:61:a0:af:29:8c:e5:e4:6a:
9c:e9:2e:7c:8d:b3:c6:50:a2:0f:fa:33:e5:92:a2:cd:a2:8b:
1a:e8:43:3e:d2:30:55:19:cb:83:81:09:fe:29:89:bb:f2:00:
9a:36:2c:70:a1:e1:fc:88:83:98:ff:9e:c6:e9:43:33:cd:74:
b5:a6:fc:b8:e4:4b:32:7a:18:33:71:58:35:55:ad:28:a8:99:
7e:38:10:d6:31:51:94:93:2d:c9:e9:17:0c:09:94:d9:2e:9f:
39:d9:fa:81:0f:58:2f:15:90:8d:cc:e9:1f:04:63:3a:d4:74:
19:ef:84:ef:b6:0b:ca:c1:64:6f:26:4b:8c:9c:9b:2b:d8:da:
86:37:24:0e:b0:cc:7d:c2:de:57:5f:99:76:c5:ae:b6:31:30:
4f:a2:d3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 09:39:04 2025 by rpki-client