Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.mft
File: 97nZe5f9TLrO2oHEQG50rW1TkyY.mft (raw, json)
Hash identifier: v4KAcWewgWPcfptJdRA3xmCiBpQVWPio7kfJWdIgInw=
Subject key identifier: 22:41:D3:86:9C:E5:98:A8:31:D3:FD:68:F6:6A:CE:7B:AA:88:13:52
Authority key identifier: F7:B9:D9:7B:97:FD:4C:BA:CE:DA:81:C4:40:6E:74:AD:6D:53:93:26
Certificate issuer: /CN=f7b9d97b97fd4cbaceda81c4406e74ad6d539326
Certificate serial: 0196805912D0B3993639ECCB568A6F5AACF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97nZe5f9TLrO2oHEQG50rW1TkyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.mft
Manifest number: 025A
Signing time: Tue 29 Apr 2025 07:00:43 +0000
Manifest this update: Tue 29 Apr 2025 07:00:43 +0000
Manifest next update: Wed 30 Apr 2025 07:00:43 +0000
Files and hashes: 1: 97nZe5f9TLrO2oHEQG50rW1TkyY.crl (hash: 2v1S12J5HO9tkLXwAELJJ+Jj/5vk84xdKdI4LOWN+Wg=)
2: lbYGE0sLJ3B23IRi-OtNtyGPAp0.roa (hash: DQpQYf+5h9YK3aPo5AxywjFuQIhJ9ib5nUDkQNDeYcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/97nZe5f9TLrO2oHEQG50rW1TkyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:59:12:d0:b3:99:36:39:ec:cb:56:8a:6f:5a:ac:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b9d97b97fd4cbaceda81c4406e74ad6d539326
Validity
Not Before: Apr 29 07:00:43 2025 GMT
Not After : Apr 30 07:00:43 2025 GMT
Subject: CN=2241d3869ce598a831d3fd68f66ace7baa881352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:96:c9:c0:2e:d7:bc:7f:6f:87:b8:a2:fb:2d:
6a:dd:1a:1f:9d:79:61:48:21:b5:2f:f7:c6:fd:8b:
6e:97:6b:59:c6:7f:96:4b:2b:e9:1c:63:87:45:a3:
ff:b2:f6:13:72:60:98:86:de:aa:dc:0a:02:ac:17:
8f:b4:37:58:33:4c:9c:02:37:cc:27:51:f8:4c:95:
67:6f:26:28:77:c3:07:70:7b:2d:28:d2:39:de:2a:
60:61:86:a9:42:2b:8a:4c:91:ec:39:63:67:b2:65:
97:fe:23:df:62:7c:52:5f:dd:30:e7:ba:e4:50:d9:
a9:1a:26:7a:9a:e7:6f:ee:d2:b8:ac:bb:6d:7f:4f:
d1:a7:f7:e3:61:57:8e:ab:49:1c:76:cd:33:2b:a6:
6c:7d:62:a0:65:0b:86:b7:b9:d5:7a:12:aa:cc:c7:
2b:83:ab:06:ae:d9:e6:5e:86:bc:f5:bb:3f:db:2d:
86:84:6a:b8:61:b9:a6:91:38:06:30:97:76:a9:ef:
7f:5e:b2:5c:eb:2a:be:57:12:8e:8b:ee:5c:3e:81:
83:8f:de:61:5d:20:0b:d9:16:d5:9e:30:48:02:a1:
f6:63:8f:ba:e0:3f:61:52:d3:1a:7e:b8:30:63:20:
c8:11:d7:5f:fa:e1:96:8a:1c:0a:e7:7c:1a:bd:5a:
3a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:41:D3:86:9C:E5:98:A8:31:D3:FD:68:F6:6A:CE:7B:AA:88:13:52
X509v3 Authority Key Identifier:
keyid:F7:B9:D9:7B:97:FD:4C:BA:CE:DA:81:C4:40:6E:74:AD:6D:53:93:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97nZe5f9TLrO2oHEQG50rW1TkyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:1a:0f:8a:bd:b3:8f:32:cb:3d:4d:7d:d7:eb:48:83:06:27:
e4:d1:84:d0:01:5c:7a:26:31:ca:96:17:c7:0a:b5:a1:c8:bb:
f6:c5:e2:8e:43:28:57:34:db:72:ed:de:98:fc:26:a4:26:db:
5c:da:8e:31:ae:4f:66:63:95:ad:f1:b2:ae:2c:b2:84:9f:a4:
d8:95:53:1a:42:79:7c:16:5f:ca:bd:40:8e:ea:e6:b4:84:8a:
3c:30:f3:d5:f6:f2:72:e2:64:5f:ea:08:a6:38:ad:fc:d7:3c:
ed:b4:d1:d2:cd:9f:4a:37:a9:4c:9d:84:a8:af:e8:b1:13:c1:
b0:4b:42:3e:10:d4:0a:b2:a7:4f:8f:58:d5:ff:ed:bd:2a:bb:
68:d4:a7:18:5e:37:05:c8:8b:4a:a1:dd:71:2c:2c:33:54:f9:
f3:e1:11:fd:6d:8b:f8:9b:45:f5:43:db:02:ab:bd:1c:c7:26:
2f:b0:a3:5d:28:e0:01:c7:cc:18:29:d4:2a:2a:5f:42:ed:39:
db:50:b6:81:cf:7b:44:0f:04:50:d6:f8:08:77:d4:5e:6f:2b:
95:ea:cb:05:16:a8:11:bb:a3:58:16:0a:56:1d:20:d4:f2:9d:
68:88:54:aa:91:d8:7e:73:7b:cf:d3:a0:9b:f6:c6:7a:45:2c:
72:51:8d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:26:36 2025 by rpki-client