Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.mft
File: 97LAktArE86qejP_BXqECmjXFSE.mft (raw, json)
Hash identifier: 4t1l5frNHaL25OG+CgiadNKAwRuMQCQ4KEcQ6bMaX40=
Subject key identifier: EB:F5:49:C7:35:92:74:AB:16:C4:B8:EE:D5:2F:74:E1:AA:76:78:3E
Authority key identifier: F7:B2:C0:92:D0:2B:13:CE:AA:7A:33:FF:05:7A:84:0A:68:D7:15:21
Certificate issuer: /CN=f7b2c092d02b13ceaa7a33ff057a840a68d71521
Certificate serial: 019873E2EFDA6B4B23EC69AFD5933DD09482
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97LAktArE86qejP_BXqECmjXFSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.mft
Manifest number: 1038
Signing time: Mon 04 Aug 2025 07:01:49 +0000
Manifest this update: Mon 04 Aug 2025 07:01:49 +0000
Manifest next update: Tue 05 Aug 2025 07:01:49 +0000
Files and hashes: 1: 97LAktArE86qejP_BXqECmjXFSE.crl (hash: MmxdEHOlvotAIR3yBBVNuEP8t/K0GiRoNhuNtdZoAMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/97LAktArE86qejP_BXqECmjXFSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:ef:da:6b:4b:23:ec:69:af:d5:93:3d:d0:94:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b2c092d02b13ceaa7a33ff057a840a68d71521
Validity
Not Before: Aug 4 07:01:49 2025 GMT
Not After : Aug 5 07:01:49 2025 GMT
Subject: CN=ebf549c7359274ab16c4b8eed52f74e1aa76783e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:97:08:d4:20:98:fe:50:53:c4:0a:3f:47:fd:
7a:e4:18:42:3f:86:a3:c0:7d:86:d8:4f:88:11:8c:
41:9c:5f:2c:94:59:74:af:fe:01:98:15:3d:98:96:
28:d6:4d:45:d8:8e:07:55:21:e1:ab:1b:00:e1:4a:
0c:7f:be:af:06:ab:d2:72:c8:f5:90:df:82:94:c6:
89:93:bc:02:15:c1:2d:b1:88:60:8a:4d:df:d5:2c:
d6:45:5f:a3:53:d1:e1:2e:31:f1:fe:d5:fd:27:7c:
96:b7:10:a9:d7:da:95:c4:4d:7d:6f:f7:b8:5a:6f:
79:f0:88:22:0e:2b:41:2f:cf:82:e5:a9:57:36:2e:
ba:17:d9:04:01:63:e4:4b:3e:c8:f5:82:17:06:f0:
71:2b:b0:fe:36:37:57:06:69:00:72:20:3d:1a:54:
06:fa:38:5d:49:e0:e7:05:c0:00:74:f0:e5:05:f3:
dc:4a:61:1c:ef:f5:77:17:bf:f5:3d:6b:7b:04:38:
11:1e:7e:3d:7a:96:21:29:0b:fa:e2:b0:18:5c:de:
11:29:6b:b8:98:07:7a:5c:71:60:0c:25:a2:2a:14:
f9:66:12:8e:ae:05:31:e1:db:72:4f:62:9e:b6:74:
17:70:83:25:7a:82:80:c5:0f:09:39:85:99:37:ad:
ca:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F5:49:C7:35:92:74:AB:16:C4:B8:EE:D5:2F:74:E1:AA:76:78:3E
X509v3 Authority Key Identifier:
keyid:F7:B2:C0:92:D0:2B:13:CE:AA:7A:33:FF:05:7A:84:0A:68:D7:15:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97LAktArE86qejP_BXqECmjXFSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a3:d6:3d:b1:7a:33:6c:ce:58:12:5d:d5:72:28:8b:32:40:
2e:58:04:54:89:f2:c6:d5:c3:76:66:8b:76:1f:01:77:28:37:
d1:73:46:39:3c:76:8f:43:ce:b5:32:06:f4:a3:f3:cb:9c:ec:
ce:fc:db:0e:ff:d0:95:79:ce:41:33:28:a6:0d:69:d7:c9:49:
aa:cd:5d:80:38:52:88:9a:4f:c7:53:ca:9b:1a:a3:44:bc:be:
dd:bf:a6:11:fa:04:3b:1b:7a:18:63:84:99:74:e3:03:14:76:
75:b8:4f:93:5e:53:3c:25:c2:91:c2:4c:d1:30:76:42:a6:82:
dd:49:e6:e4:d8:f8:9f:eb:96:ac:59:e6:01:37:fa:6e:34:d5:
67:55:fc:28:5c:3d:32:0a:b3:20:c7:8c:47:93:78:95:0f:82:
18:50:2b:e4:42:f8:f0:d0:8e:88:c3:e0:9a:56:a9:db:0c:43:
42:06:30:24:eb:d2:58:10:21:03:36:53:01:00:4b:a1:6f:8e:
8a:e7:48:02:54:52:08:ec:46:ec:b5:74:e7:60:4f:d0:91:79:
dc:20:61:a1:51:6b:0e:dd:78:ff:9b:a0:a2:11:c3:08:76:7f:
31:7e:1e:d2:b3:1a:b1:80:e6:ea:12:f0:c8:92:b2:14:09:5f:
ef:1c:cf:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:08:38 2025 by rpki-client