
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.mft
File: 96pRbAbRINN25XURMTT0T_Yl2Oc.mft (raw, json)
Hash identifier: 96QxXJ8L0j6ZudDSQFG7TvP/f0PnpvLzKb68RErQ1b8=
Subject key identifier: F6:0C:62:02:B7:C3:CF:BF:B1:B1:21:2B:C6:31:25:24:76:D7:AE:E4
Authority key identifier: F7:AA:51:6C:06:D1:20:D3:76:E5:75:11:31:34:F4:4F:F6:25:D8:E7
Certificate issuer: /CN=f7aa516c06d120d376e575113134f44ff625d8e7
Certificate serial: 019921B0DB784728BE8E7C3CBFBCF0B038DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/96pRbAbRINN25XURMTT0T_Yl2Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.mft
Manifest number: EA
Signing time: Sun 07 Sep 2025 01:01:02 +0000
Manifest this update: Sun 07 Sep 2025 01:01:02 +0000
Manifest next update: Mon 08 Sep 2025 01:01:02 +0000
Files and hashes: 1: 96pRbAbRINN25XURMTT0T_Yl2Oc.crl (hash: 7zf1uM7YVl5Vt5AopiQHb1Z7x+dzc6mUgWHNi0IKgNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/96pRbAbRINN25XURMTT0T_Yl2Oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:db:78:47:28:be:8e:7c:3c:bf:bc:f0:b0:38:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7aa516c06d120d376e575113134f44ff625d8e7
Validity
Not Before: Sep 7 01:01:02 2025 GMT
Not After : Sep 8 01:01:02 2025 GMT
Subject: CN=f60c6202b7c3cfbfb1b1212bc631252476d7aee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:71:d9:60:99:fd:69:4e:6c:eb:df:80:6a:2c:
7f:b8:bd:94:22:e0:54:51:85:65:6b:14:30:ff:65:
ea:bb:17:c8:b3:2a:1b:68:1c:7f:28:aa:19:1d:27:
4a:2b:c6:1f:6f:09:1c:85:3b:53:0f:29:99:ea:ed:
93:30:f7:4b:77:d6:ba:4e:0b:4d:39:59:52:3d:79:
10:3d:f7:7f:91:e6:0e:15:f6:03:cb:6b:3b:f8:50:
94:8b:b0:65:69:d6:a7:ce:d3:1e:39:b2:1e:b3:14:
9e:d5:21:a1:9a:96:85:4c:73:27:da:6f:70:54:8b:
ce:40:93:e2:7f:c2:e8:6a:d1:63:b3:ad:e7:ce:a7:
55:ba:61:f8:9c:5c:a6:f2:cf:db:1b:19:4e:d0:22:
e8:9c:06:03:81:e2:b7:a7:1b:b0:c9:a0:6d:59:b6:
7c:6f:11:8f:55:c1:b6:5b:4a:cd:3f:39:46:d2:77:
37:74:77:32:9a:72:08:87:aa:11:9d:9f:8c:06:61:
52:49:c0:d4:16:7f:f1:1d:cb:68:9e:ce:e4:56:ac:
2f:89:e3:c8:9b:05:61:5d:70:79:69:bf:16:53:7a:
82:79:e4:ce:c4:3c:b1:50:40:f5:6c:9c:84:58:80:
b1:cc:03:ab:ef:04:37:ea:ea:4e:76:69:a2:22:18:
a9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:0C:62:02:B7:C3:CF:BF:B1:B1:21:2B:C6:31:25:24:76:D7:AE:E4
X509v3 Authority Key Identifier:
keyid:F7:AA:51:6C:06:D1:20:D3:76:E5:75:11:31:34:F4:4F:F6:25:D8:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96pRbAbRINN25XURMTT0T_Yl2Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:25:65:62:47:80:85:04:70:7a:83:95:cb:df:11:f2:14:6f:
96:d7:2b:ee:12:c8:40:f9:3d:00:80:a5:2e:8e:b1:a7:07:6c:
22:21:fd:a5:88:1f:86:77:ed:39:3e:a4:db:2f:96:c6:67:a4:
b5:bf:4b:b3:b8:eb:9c:6d:46:bc:4f:ab:3f:62:03:64:49:d2:
3f:69:fa:8b:86:0e:67:54:2a:95:20:24:af:55:7f:b9:c2:51:
c4:4d:c4:37:3d:22:77:d0:2a:b1:05:5d:47:17:93:7c:03:5d:
b8:4d:9d:62:25:ec:7d:41:7c:b3:a2:fe:a2:57:7f:ad:03:3d:
45:8e:e7:c5:99:c4:2c:8c:bc:17:dd:1f:d0:4b:14:f7:82:42:
8e:b7:b3:77:7c:c0:e7:92:b1:b9:33:34:2a:fa:92:5a:58:4b:
fd:e9:9e:91:ff:c3:00:1a:cc:82:d0:b7:6c:b5:e3:f0:5d:55:
bd:0b:b1:22:4d:3f:aa:85:46:ba:7a:5e:85:8f:be:13:03:e4:
d2:c2:7f:0e:fd:7d:0e:f1:51:93:18:08:c4:5f:ad:42:30:0d:
19:c2:ed:fa:09:0c:79:c6:30:ce:25:64:4a:e5:68:0e:d7:a1:
34:14:34:fc:99:55:54:63:17:df:c2:9b:e0:bd:99:d1:b2:0d:
59:d7:c9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:43:37 2025 by rpki-client