Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft
File: 96WNGxKutVgzKN2lJdBphnS7He8.mft (raw, json)
Hash identifier: 7IEjctmBLyNDIQORpN5yA6guCjroDfggyA8hvonBp6M=
Subject key identifier: 64:96:4F:54:A5:D7:AA:C1:29:61:8F:44:F4:2F:F5:CF:C6:EE:3F:CB
Authority key identifier: F7:A5:8D:1B:12:AE:B5:58:33:28:DD:A5:25:D0:69:86:74:BB:1D:EF
Certificate issuer: /CN=f7a58d1b12aeb5583328dda525d0698674bb1def
Certificate serial: 019921B1682CB99A125542D11DC915D84952
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/96WNGxKutVgzKN2lJdBphnS7He8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 01:01:38 +0000
Manifest this update: Sun 07 Sep 2025 01:01:38 +0000
Manifest next update: Mon 08 Sep 2025 01:01:38 +0000
Files and hashes: 1: 96WNGxKutVgzKN2lJdBphnS7He8.crl (hash: JmG8CsD03BmyBBue0B+9Rw0+nEjoqanprH8BzT7p2Y0=)
2: T-ndwyW2lzOqFwfi0HlwvxGN6hA.roa (hash: SwBUiR0PUxgXxZT0VaCgm/zNAN819Fxo/yeUtptTXzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft
rsync://rpki.ripe.net/repository/DEFAULT/96WNGxKutVgzKN2lJdBphnS7He8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:68:2c:b9:9a:12:55:42:d1:1d:c9:15:d8:49:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7a58d1b12aeb5583328dda525d0698674bb1def
Validity
Not Before: Sep 7 01:01:38 2025 GMT
Not After : Sep 8 01:01:38 2025 GMT
Subject: CN=64964f54a5d7aac129618f44f42ff5cfc6ee3fcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ab:0e:86:66:99:95:8d:46:34:a2:1b:53:21:
a5:3a:4f:4d:d9:ea:96:af:26:4e:30:a9:a2:6d:f1:
0f:3d:e2:f5:53:49:d0:f2:fd:11:56:49:d8:41:31:
e9:f1:a2:e4:21:b8:6f:01:fc:ce:6b:53:c2:c4:b2:
0d:3e:cc:13:53:c6:55:ca:ee:3d:bc:47:65:a0:da:
f7:8b:6c:c0:e5:23:af:29:76:a5:9a:ad:1f:3f:b6:
c0:a1:98:32:f6:e5:30:25:1d:e4:ae:6e:27:ec:56:
ec:74:4f:1d:b2:37:7e:57:50:ee:fa:af:b9:48:b9:
36:87:91:78:0c:eb:c4:9f:a9:21:43:51:79:3a:24:
a9:cc:69:f9:12:38:d0:6b:ac:85:db:d1:a5:57:80:
94:21:61:c1:75:5a:e7:d8:ad:25:ff:72:1c:70:ea:
33:ff:0d:29:ef:42:88:fa:65:75:d6:e5:95:2f:50:
ed:55:6f:c4:b9:e4:97:d9:36:2a:9f:72:5f:a7:aa:
dd:49:76:64:02:22:ea:aa:97:38:08:d0:b5:ee:48:
ca:30:21:9b:dd:db:12:be:08:af:1e:d1:58:b2:1e:
88:a6:85:eb:94:88:1f:26:d6:a9:35:23:97:81:ef:
1f:b2:7f:1d:2d:15:fb:b8:a6:8c:79:57:be:8b:9b:
25:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:96:4F:54:A5:D7:AA:C1:29:61:8F:44:F4:2F:F5:CF:C6:EE:3F:CB
X509v3 Authority Key Identifier:
keyid:F7:A5:8D:1B:12:AE:B5:58:33:28:DD:A5:25:D0:69:86:74:BB:1D:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96WNGxKutVgzKN2lJdBphnS7He8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:b6:b4:05:22:13:f1:cb:d0:37:96:e8:43:00:21:3b:15:2a:
af:a0:64:21:3a:e6:35:3e:63:b7:69:94:1f:4d:c8:c9:05:fd:
16:cb:76:8e:26:f2:33:59:77:47:74:9b:20:58:8d:e2:c5:b9:
f1:45:73:7c:e9:3e:ee:d6:a9:ef:77:7f:58:ab:3b:e3:73:5e:
26:81:e0:81:19:ba:8f:a9:26:ce:87:ee:04:02:27:b5:92:9f:
6d:2b:b1:b1:62:e2:7a:73:e8:da:1e:9b:cb:32:be:44:fa:f5:
a3:97:74:e9:a3:36:44:85:09:6e:be:4e:b2:bc:df:4f:64:a2:
24:83:dc:a3:56:5a:90:be:4d:32:6a:12:e0:f5:8b:a5:49:f3:
c8:da:44:81:ed:2b:05:da:94:46:ad:52:53:1a:70:8c:0a:b6:
fb:9c:a9:80:8a:82:75:5b:d8:bf:42:c0:ff:96:06:c6:ae:dd:
c8:85:85:e1:77:4e:31:3e:58:94:f6:08:a5:1a:84:5c:69:c3:
65:9e:e5:b4:79:38:f6:b9:12:04:01:48:f1:4a:ab:58:c7:02:
e8:fc:b2:dc:1d:65:b5:ea:17:e8:47:7d:61:20:78:6c:f3:73:
97:a2:62:96:b0:78:07:5d:d8:22:01:2e:c2:f6:e0:e6:bf:e2:
a1:39:8f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:26:24 2025 by rpki-client