Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.mft
File: 96pRbAbRINN25XURMTT0T_Yl2Oc.mft (raw, json)
Hash identifier: gnOhvkmjCKrhcGgtOvvQA8qbb2ZzmJ+ec7EkH3NrfL4=
Subject key identifier: 2A:D4:FA:DD:5E:59:BD:F2:83:CC:1E:A1:C5:60:3E:E8:26:7E:B1:88
Authority key identifier: F7:AA:51:6C:06:D1:20:D3:76:E5:75:11:31:34:F4:4F:F6:25:D8:E7
Certificate issuer: /CN=f7aa516c06d120d376e575113134f44ff625d8e7
Certificate serial: 0197C9F02679305532970B1916B6A6CEA7E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/96pRbAbRINN25XURMTT0T_Yl2Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.mft
Manifest number: 38
Signing time: Wed 02 Jul 2025 07:00:48 +0000
Manifest this update: Wed 02 Jul 2025 07:00:48 +0000
Manifest next update: Thu 03 Jul 2025 07:00:48 +0000
Files and hashes: 1: 96pRbAbRINN25XURMTT0T_Yl2Oc.crl (hash: +vWE1CtKHUug66o/LKyM6IJJWqYDd0LqAcblqPdbRBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/96pRbAbRINN25XURMTT0T_Yl2Oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:f0:26:79:30:55:32:97:0b:19:16:b6:a6:ce:a7:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7aa516c06d120d376e575113134f44ff625d8e7
Validity
Not Before: Jul 2 07:00:48 2025 GMT
Not After : Jul 3 07:00:48 2025 GMT
Subject: CN=2ad4fadd5e59bdf283cc1ea1c5603ee8267eb188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5b:c8:44:b7:61:8c:80:5e:27:df:e4:c2:dc:
d1:f6:5a:d8:57:68:9f:7c:6d:e5:c2:b1:6f:f5:20:
d8:22:3a:41:53:5c:0f:3c:34:60:7c:09:09:4f:ff:
d5:c3:70:8f:ee:46:56:b5:11:07:64:7a:86:56:30:
51:bc:9c:7c:48:ac:8e:29:0b:46:47:d9:c6:33:4b:
40:36:88:3b:71:30:90:9b:83:7b:a5:a3:ee:77:a2:
c6:08:cb:24:7e:78:e0:7c:00:8b:af:53:61:36:50:
67:c5:97:ce:fe:93:43:20:39:75:cc:9e:6c:c7:44:
07:1f:20:39:ae:11:20:41:83:95:93:89:54:35:0c:
17:69:8a:dd:34:4b:93:3b:dd:25:74:0d:a2:cb:13:
a0:d3:26:a1:97:b2:c6:46:78:01:67:e5:1a:e2:3e:
83:96:96:6f:d4:41:5f:71:07:28:ad:4b:8f:71:b0:
ee:55:cb:25:41:c9:30:59:14:17:de:70:7f:a2:29:
d0:56:09:ea:fa:b6:3b:07:b6:ac:13:a6:13:06:83:
32:b3:cd:8a:55:af:4a:87:f3:16:87:ad:bb:07:85:
dd:56:d5:9d:6d:db:1c:d8:1b:ce:01:64:39:83:a8:
ab:ff:13:9c:04:56:af:c2:1a:25:41:e1:12:44:99:
59:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D4:FA:DD:5E:59:BD:F2:83:CC:1E:A1:C5:60:3E:E8:26:7E:B1:88
X509v3 Authority Key Identifier:
keyid:F7:AA:51:6C:06:D1:20:D3:76:E5:75:11:31:34:F4:4F:F6:25:D8:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96pRbAbRINN25XURMTT0T_Yl2Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:2d:22:50:53:3b:5e:65:5d:d6:0a:3b:9b:4f:8d:78:50:8b:
4e:5f:94:2f:dc:4e:17:38:4f:0d:67:e6:26:b5:e4:16:41:37:
59:8b:e5:a9:07:e4:b5:35:ab:fe:f2:52:f4:9b:70:cc:46:d9:
27:3b:c8:59:e9:ea:47:c7:29:e8:1d:bb:8e:02:fd:c1:12:09:
f4:15:45:2c:3a:c7:56:a5:c5:bc:e9:50:0f:67:ae:be:28:0c:
23:23:be:dd:ac:be:70:6d:db:75:0c:f0:fe:98:e5:d8:df:7e:
46:71:a2:c5:3a:13:43:ba:09:f8:77:7e:b6:90:5d:94:70:89:
a9:8b:fc:76:48:5b:40:68:f5:6c:a2:6b:3c:fa:01:53:46:50:
c9:5e:d8:4d:9a:7b:cc:43:b6:5b:94:32:ef:e7:a3:82:e3:63:
ac:09:ae:cc:e2:bc:10:51:38:50:c2:3f:80:ee:df:8b:4b:c9:
f0:97:fb:57:6d:96:20:bb:12:e0:31:68:d0:e9:7b:a6:53:f0:
23:3f:ac:f6:0e:61:f9:06:be:31:c4:51:71:15:32:7f:96:84:
55:45:c9:e7:12:34:a8:34:63:9a:6f:92:c5:11:82:dd:e8:ec:
97:3e:d4:a6:ad:52:4f:f7:ec:96:c3:7e:90:55:dc:6d:94:ae:
b1:2b:6c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 12:04:56 2025 by rpki-client