Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft
File: 97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft (raw, json)
Hash identifier: x/7xXGzkdN0MgeLqM8ml1b4ikBxcrJSaCG8H07N0+BM=
Subject key identifier: 0A:CF:2D:FA:05:DC:B8:38:51:03:CC:68:9C:0D:15:6C:85:8C:69:61
Authority key identifier: F7:B7:C2:E8:45:3E:D4:C0:92:9C:75:04:BA:F0:46:04:31:59:D1:05
Certificate issuer: /CN=f7b7c2e8453ed4c0929c7504baf046043159d105
Certificate serial: 019A5307C04D22346F324DBE8C5EFD1A9938
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97fC6EU-1MCSnHUEuvBGBDFZ0QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft
Manifest number: 16A1
Signing time: Wed 05 Nov 2025 08:00:07 +0000
Manifest this update: Wed 05 Nov 2025 08:00:07 +0000
Manifest next update: Thu 06 Nov 2025 08:00:07 +0000
Files and hashes: 1: 97fC6EU-1MCSnHUEuvBGBDFZ0QU.crl (hash: OgtsV3ot6GX+901csKfjmJO6sO6EbJd1yf0pNs98bCI=)
2: BvcR2l7_YlLN1G-PLIU4HFIYDzk.roa (hash: r1MEUEAOwAoEFh1pzdmgOC6wzXGzNLeScD3RSXz3sR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft
rsync://rpki.ripe.net/repository/DEFAULT/97fC6EU-1MCSnHUEuvBGBDFZ0QU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:07:c0:4d:22:34:6f:32:4d:be:8c:5e:fd:1a:99:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b7c2e8453ed4c0929c7504baf046043159d105
Validity
Not Before: Nov 5 08:00:07 2025 GMT
Not After : Nov 6 08:00:07 2025 GMT
Subject: CN=0acf2dfa05dcb8385103cc689c0d156c858c6961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ff:f5:ea:a4:8c:b3:39:20:30:87:5c:01:ec:
3c:f9:ac:28:dd:54:95:31:bd:24:86:c2:39:16:aa:
74:d5:bf:b6:51:23:d3:1d:01:a9:58:bb:68:a2:56:
93:93:e5:37:1b:5b:9f:a5:97:a7:80:fd:c7:58:4c:
ed:e3:bc:69:2e:98:3b:ae:5e:5d:97:1e:8e:cf:9c:
f4:a3:7f:20:4f:50:fd:0d:a1:77:3e:e0:d6:32:5e:
a0:93:08:69:6d:b6:c2:a2:be:6f:67:98:48:5d:a2:
c4:1c:82:88:21:d6:a9:70:dd:de:56:b0:d7:95:58:
9c:ed:92:47:06:aa:27:25:21:6e:69:9b:51:77:b5:
27:05:6c:bc:da:0f:a3:72:1b:1c:4a:1a:d5:c6:cf:
94:43:5a:22:7a:a8:36:de:b2:8b:9c:16:7b:cb:04:
8b:45:af:59:2b:78:a8:25:01:c9:e7:26:9a:d8:60:
22:c1:ea:98:3a:f1:34:d7:a8:f1:0e:02:ef:a3:6b:
79:71:94:4a:cc:aa:61:7f:13:59:51:a6:31:20:ff:
76:cd:ee:25:ff:5d:68:49:be:1b:9b:e9:23:87:8f:
6b:8d:4d:92:e5:ff:ca:3d:c8:79:82:93:1b:d1:89:
25:66:3e:39:a4:b9:2f:69:96:20:65:f0:20:ec:9d:
ec:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:CF:2D:FA:05:DC:B8:38:51:03:CC:68:9C:0D:15:6C:85:8C:69:61
X509v3 Authority Key Identifier:
keyid:F7:B7:C2:E8:45:3E:D4:C0:92:9C:75:04:BA:F0:46:04:31:59:D1:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97fC6EU-1MCSnHUEuvBGBDFZ0QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:ea:22:3f:b5:c2:71:fa:9a:c6:a8:04:d4:c6:2c:36:c0:38:
50:7a:f7:6f:12:00:a0:61:71:cf:e5:d2:ff:42:a1:96:05:81:
f1:8c:0e:b9:22:d7:e1:58:9b:9e:0a:7e:da:c9:c2:06:ed:ca:
f8:8a:51:17:e6:ab:bf:f8:a0:28:c9:bc:08:7c:67:db:ff:f3:
c4:cf:5e:9d:61:d7:d8:97:bc:12:bf:e6:b0:ec:b5:96:ce:4c:
ef:b8:6f:34:00:52:4d:b2:05:d9:7d:82:82:40:39:49:3c:8f:
eb:49:42:3b:dd:72:41:ae:00:25:69:6f:9c:6f:53:25:29:2f:
2a:67:2f:75:59:24:93:2d:49:1a:80:7c:30:e8:0b:6f:b1:9a:
d9:6e:55:56:cb:48:50:fd:e1:9e:43:7c:69:45:96:b5:79:5f:
2e:6b:d9:14:8c:0c:a3:d7:84:90:b4:81:8c:ea:41:f6:3e:9c:
db:cf:05:a2:00:c9:a6:58:02:6b:ad:11:c1:10:74:c0:5c:ba:
b6:01:da:7c:fd:9a:91:79:70:a8:3e:a7:54:01:1b:0e:84:9a:
65:d5:89:f5:e8:b7:01:0b:cb:84:77:5b:bc:56:0f:f8:19:82:
ac:2b:c1:eb:46:87:f4:05:25:ba:e2:0a:31:02:de:ad:72:40:
d4:77:51:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:22:22 2025 by rpki-client