Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft
File: 97UMfoHYzyZNEgm2rVo8y4LBb90.mft (raw, json)
Hash identifier: VhSsBvZts3pS8eE+dOhyHgdpu/bWF46cESiKvG2i/C0=
Subject key identifier: ED:01:63:3F:84:47:D7:4A:24:31:CC:CA:2B:99:43:88:33:17:40:7C
Authority key identifier: F7:B5:0C:7E:81:D8:CF:26:4D:12:09:B6:AD:5A:3C:CB:82:C1:6F:DD
Certificate issuer: /CN=f7b50c7e81d8cf264d1209b6ad5a3ccb82c16fdd
Certificate serial: 019770E37D11EED9305E05C6F4260A46B058
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft
Manifest number: 0D38
Signing time: Sun 15 Jun 2025 00:00:46 +0000
Manifest this update: Sun 15 Jun 2025 00:00:46 +0000
Manifest next update: Mon 16 Jun 2025 00:00:46 +0000
Files and hashes: 1: 97UMfoHYzyZNEgm2rVo8y4LBb90.crl (hash: qhqf9bDA7BJmt6laZKw+zJbg+ESvv5/y9Ic44vS43vA=)
2: GTCjpLpWFoRKa3RTQC7pQJBM1G0.roa (hash: EhNbeTG6PZNCY341R1mR2HkaZJMJL1NL7VGz9EOMvcU=)
3: SZn8hNrZLFz6_jd__cc2hQYVsJ4.roa (hash: pOi9fCGV3Xellqd7Bg8T2wW6LAr0IHc6DomlTTmJAug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft
rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:e3:7d:11:ee:d9:30:5e:05:c6:f4:26:0a:46:b0:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b50c7e81d8cf264d1209b6ad5a3ccb82c16fdd
Validity
Not Before: Jun 15 00:00:46 2025 GMT
Not After : Jun 16 00:00:46 2025 GMT
Subject: CN=ed01633f8447d74a2431ccca2b9943883317407c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ed:30:5c:d6:91:7c:9f:88:f7:53:cf:e2:df:
3f:04:a3:9e:27:f7:76:49:0e:d4:96:cc:1b:28:ac:
8c:55:ae:06:8d:4f:cd:e1:fb:9e:a5:95:f9:bd:9d:
ab:1c:38:2b:59:83:37:b5:cb:9d:94:d7:1c:95:d8:
69:61:f0:4d:ed:0d:c2:b7:40:b1:9b:ef:25:e2:33:
60:be:af:83:26:99:27:58:55:5b:c2:d4:01:80:76:
dc:b1:d1:95:f7:6d:5e:80:66:ed:20:83:a1:a4:0b:
58:73:00:21:55:63:ce:f0:59:a3:52:e4:15:1b:84:
bf:39:9c:d7:50:92:bb:16:50:2e:7d:f0:71:95:cf:
45:b3:2a:1c:10:be:70:db:36:17:ee:6f:24:cd:0c:
b1:2a:87:8e:ba:29:ee:24:d8:6a:31:9c:f1:27:9f:
a2:8d:cb:b8:56:76:ba:43:7c:03:fc:ce:b2:96:06:
a6:ea:07:1a:01:fb:82:95:3d:a6:8a:66:4c:4c:dc:
8a:75:ae:2a:3e:8c:71:7a:ff:17:9d:b2:85:c9:06:
51:25:a6:cb:d2:96:92:e7:d0:b7:f2:21:72:5f:cc:
42:ec:e8:57:ac:f2:19:c6:3e:85:f5:b8:f0:ec:cd:
4a:a9:b3:68:8c:8e:e9:95:cd:1d:04:7c:21:d7:e7:
e3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:01:63:3F:84:47:D7:4A:24:31:CC:CA:2B:99:43:88:33:17:40:7C
X509v3 Authority Key Identifier:
keyid:F7:B5:0C:7E:81:D8:CF:26:4D:12:09:B6:AD:5A:3C:CB:82:C1:6F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:77:2d:b8:95:8f:52:d6:53:c7:50:10:bc:53:40:14:32:e7:
40:5c:4b:31:91:b5:26:0d:68:84:1f:45:04:25:8d:00:85:86:
87:d6:ab:5b:99:a3:e8:94:b1:7e:9f:de:d3:1c:75:06:aa:35:
c3:48:86:bb:be:e7:e3:a7:fb:eb:1a:e6:2c:9d:dc:87:e3:86:
d6:9b:15:89:8e:46:cf:71:95:83:16:a0:55:44:e1:31:81:57:
b6:3d:2f:d3:49:df:4b:96:8a:66:e2:96:79:1f:22:8a:74:cd:
9c:70:fe:b7:1b:52:b0:31:c3:f4:0f:4d:ed:e3:06:fa:c2:f6:
e9:5e:76:41:21:e3:dc:98:1d:d4:0a:f0:6c:b5:5f:3f:1b:4d:
90:61:07:b8:12:c0:a1:04:50:ca:f9:2e:dc:74:46:c3:29:b7:
8b:4e:e7:84:70:11:85:f2:39:2f:51:7d:4e:ba:03:2b:ed:62:
f8:8b:08:76:17:aa:6b:22:45:56:26:14:7b:65:2d:51:fe:4c:
dd:98:25:90:2c:6c:52:17:b0:aa:d2:44:5b:40:8e:91:ac:b6:
85:78:ce:62:8d:60:d6:64:14:32:ca:62:62:e6:ac:80:b2:e0:
77:ad:5f:88:e3:e2:17:e7:b3:f1:b2:43:3d:6d:6a:ee:60:6d:
bf:af:9e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:34:03 2025 by rpki-client