Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.mft
File: 97FD9k1RC6MSl8uuVoL9QbLIEZY.mft (raw, json)
Hash identifier: CC7F7mlOgqN+fTSTyFzFI4qoDUxyhkmviSlsPGLjltY=
Subject key identifier: 31:56:6C:91:C2:90:18:AA:8D:75:1C:CE:F6:D7:4A:13:F2:63:FF:1A
Authority key identifier: F7:B1:43:F6:4D:51:0B:A3:12:97:CB:AE:56:82:FD:41:B2:C8:11:96
Certificate issuer: /CN=f7b143f64d510ba31297cbae5682fd41b2c81196
Certificate serial: 019A70DBEBE1D1551441CADBD81F94B07A52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97FD9k1RC6MSl8uuVoL9QbLIEZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.mft
Manifest number: 0ABB
Signing time: Tue 11 Nov 2025 03:00:52 +0000
Manifest this update: Tue 11 Nov 2025 03:00:52 +0000
Manifest next update: Wed 12 Nov 2025 03:00:52 +0000
Files and hashes: 1: 97FD9k1RC6MSl8uuVoL9QbLIEZY.crl (hash: 6IW+KQ9ph48S4ciNl6jFS06nS7zE3JWSWBlBeWDRdfE=)
2: Q9uvUMUGF4tW9TpLUtXmiB_YDYU.roa (hash: 6w5t2feWmLv2FpcZk6E6i1f0DCsFUL0L2nW9iOpOGYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/97FD9k1RC6MSl8uuVoL9QbLIEZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:eb:e1:d1:55:14:41:ca:db:d8:1f:94:b0:7a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b143f64d510ba31297cbae5682fd41b2c81196
Validity
Not Before: Nov 11 03:00:52 2025 GMT
Not After : Nov 12 03:00:52 2025 GMT
Subject: CN=31566c91c29018aa8d751ccef6d74a13f263ff1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ec:e7:cf:ba:c5:e8:d4:35:e3:49:34:d4:25:
0e:2d:90:09:55:0d:4e:c4:47:9d:f6:f8:46:5b:1a:
75:02:be:ed:0f:a1:16:3e:9b:a3:29:0a:43:b0:6f:
21:95:96:a3:35:8f:0f:9b:a8:82:56:3b:f0:3c:81:
83:22:2a:05:4d:8f:6c:b2:36:31:17:20:bf:2a:88:
12:41:c8:a7:45:79:61:33:b9:dd:9c:dd:3f:84:dd:
f4:ae:15:81:dd:68:c9:77:d2:29:77:f8:e3:cd:fe:
e9:43:97:60:4c:03:00:36:9e:eb:73:32:0c:13:e9:
e7:04:e2:d6:d9:67:6f:49:a8:39:60:a1:83:52:7f:
da:06:e9:74:d2:16:a7:50:d1:b0:68:56:61:2c:bb:
38:db:c0:31:38:0c:01:1f:1b:14:f8:95:25:b8:5e:
a7:99:79:88:45:28:b3:d4:5f:48:31:ac:c0:0c:50:
e9:a6:98:a3:a8:b1:2b:75:00:84:13:54:48:40:35:
26:87:40:e2:3b:8c:dd:b5:aa:f2:db:df:7f:39:32:
25:fc:93:29:67:de:0e:a7:86:1d:f3:a5:bb:13:fd:
1c:10:3f:38:cf:cf:2d:50:7e:de:11:c1:0d:38:cf:
ad:69:b3:29:ac:8e:11:0e:3e:06:8e:bb:16:f5:96:
a5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:56:6C:91:C2:90:18:AA:8D:75:1C:CE:F6:D7:4A:13:F2:63:FF:1A
X509v3 Authority Key Identifier:
keyid:F7:B1:43:F6:4D:51:0B:A3:12:97:CB:AE:56:82:FD:41:B2:C8:11:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97FD9k1RC6MSl8uuVoL9QbLIEZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:2b:70:ce:63:05:98:16:90:03:ea:2e:ff:a2:c6:5e:08:57:
3e:3e:da:a5:d3:e9:88:9d:da:d8:a3:16:58:5b:2f:36:59:db:
74:a0:ac:36:06:f5:9a:9d:46:fb:4d:b7:46:a2:10:72:a3:e4:
54:73:7e:2c:1e:47:ad:55:59:66:e4:3c:25:18:76:44:46:b8:
13:c9:49:6e:59:0c:1c:a4:1e:cc:8d:50:e6:53:db:32:aa:52:
cb:34:f8:51:36:3c:23:e9:75:5c:66:40:c8:5f:96:9e:b2:b3:
d3:e9:f1:70:5f:7b:86:cd:d0:b7:cd:44:be:e6:cb:7b:d0:cb:
22:60:db:98:2b:06:ae:9d:04:19:93:e1:70:f4:38:27:4c:27:
cd:28:c5:f5:24:4e:16:ee:41:ef:cc:54:cc:c8:0e:8e:7b:08:
02:b0:70:e5:ed:d3:4d:3a:9c:33:83:98:7a:d2:da:60:0e:7b:
85:e3:7d:09:75:33:4d:db:ba:e5:b3:9b:1c:91:33:21:01:bf:
35:51:30:9b:d6:37:4c:00:be:d3:20:62:98:9f:78:8b:4e:e7:
d8:4e:ef:98:b0:c6:4e:71:66:48:07:11:e3:00:14:41:6f:63:
28:d1:f7:ae:fb:ef:09:9b:7f:db:8a:a4:f0:53:2b:e3:ba:7e:
b9:af:d2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:24 2025 by rpki-client