Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.mft
File: 96pRbAbRINN25XURMTT0T_Yl2Oc.mft (raw, json)
Hash identifier: 3Artq7Y4md3eA2LsLFxbOkdtvkrbVDbXQxUVg0Y9aGE=
Subject key identifier: 3E:B0:0C:90:C8:34:FC:FE:60:56:79:EE:A6:3B:83:04:7F:6B:49:35
Authority key identifier: F7:AA:51:6C:06:D1:20:D3:76:E5:75:11:31:34:F4:4F:F6:25:D8:E7
Certificate issuer: /CN=f7aa516c06d120d376e575113134f44ff625d8e7
Certificate serial: 0198A04D3B026D760E20C9D040CBC6423166
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/96pRbAbRINN25XURMTT0T_Yl2Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.mft
Manifest number: A7
Signing time: Tue 12 Aug 2025 22:01:12 +0000
Manifest this update: Tue 12 Aug 2025 22:01:12 +0000
Manifest next update: Wed 13 Aug 2025 22:01:12 +0000
Files and hashes: 1: 96pRbAbRINN25XURMTT0T_Yl2Oc.crl (hash: l/9WMh7gVKpLEMNYQmJ5ws5X8EymoNRvykr+CXS9tyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/96pRbAbRINN25XURMTT0T_Yl2Oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4d:3b:02:6d:76:0e:20:c9:d0:40:cb:c6:42:31:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7aa516c06d120d376e575113134f44ff625d8e7
Validity
Not Before: Aug 12 22:01:12 2025 GMT
Not After : Aug 13 22:01:12 2025 GMT
Subject: CN=3eb00c90c834fcfe605679eea63b83047f6b4935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1f:92:83:5a:a5:63:3f:9f:38:28:9f:1f:41:
a7:90:26:f7:b7:af:a3:a3:d5:fb:b1:1a:ac:37:54:
5a:01:b7:c7:ea:7b:54:f5:da:68:aa:9f:ae:d4:f1:
7c:6b:fa:93:c5:fa:7f:22:65:44:b0:a2:17:4a:72:
a1:1b:4d:e3:d2:50:3f:f4:ab:61:af:7d:03:0d:25:
bf:80:09:42:44:7f:6f:ba:f7:7b:e8:7e:6b:b1:21:
d6:6e:36:af:de:bc:bb:af:70:73:48:6f:6a:e4:4a:
cc:18:f0:d2:55:bd:21:a4:ef:68:96:37:0e:42:dd:
c3:05:43:c7:13:83:62:a8:7f:a8:ec:87:23:a2:3c:
d9:b3:c3:a9:a1:1b:cd:86:c3:36:b0:78:d6:ef:0f:
4a:f2:6c:fe:80:2d:c3:31:f8:aa:3e:30:0f:b3:46:
26:8a:91:05:c0:3f:89:ac:60:53:8e:87:e6:a6:5b:
94:dd:24:ea:21:8c:bd:61:ee:71:31:b2:22:74:48:
6c:7b:c8:44:c5:52:1f:ad:fd:f1:f8:9f:8b:3f:2f:
b7:c5:91:88:1a:ba:ed:1b:42:32:ed:99:55:8e:f5:
8d:fd:84:22:36:ad:dd:f6:66:f8:fe:58:58:30:a3:
c6:b5:ee:44:45:81:8a:cc:79:3e:3f:5a:03:f0:f1:
d3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B0:0C:90:C8:34:FC:FE:60:56:79:EE:A6:3B:83:04:7F:6B:49:35
X509v3 Authority Key Identifier:
keyid:F7:AA:51:6C:06:D1:20:D3:76:E5:75:11:31:34:F4:4F:F6:25:D8:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96pRbAbRINN25XURMTT0T_Yl2Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:c6:65:d8:d0:7e:f0:24:34:36:6c:63:60:6d:c3:0c:fd:f3:
71:12:d3:5f:38:03:48:24:34:c6:39:3a:db:a0:53:84:2f:a5:
b2:47:0b:d9:c7:b9:14:92:ed:08:74:55:d1:42:64:78:46:93:
4a:67:19:58:fc:d6:dd:33:08:70:db:68:ac:ec:cc:9d:69:74:
92:89:9a:2f:8e:8d:b7:af:95:0e:44:20:e1:04:97:76:95:30:
b1:27:22:82:dd:c3:a0:82:08:37:f3:aa:e3:2b:5b:56:6d:a7:
97:72:80:ad:5c:c0:18:bf:60:a9:04:ce:fb:43:1e:be:66:05:
6a:e4:5c:ed:06:f7:94:0f:db:46:23:4e:da:ee:9e:3c:47:b5:
fd:4f:1a:9f:3a:35:03:be:df:5a:be:5e:7a:fe:f0:28:94:83:
b8:e0:cf:75:b1:42:3a:ae:9d:e1:a5:76:9f:cd:64:97:ca:42:
66:70:45:1b:4e:40:1b:c2:63:fa:e3:5e:9c:42:75:ed:47:38:
1b:da:49:9b:5c:b3:5e:f5:6f:96:94:78:46:38:0b:29:5f:43:
bb:78:31:1c:33:6e:05:78:ed:1c:63:2d:70:46:93:ea:26:a2:
38:1f:d3:f6:01:9a:e2:19:84:d9:31:6a:ef:23:4d:34:57:fa:
b5:9d:8e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:42:17 2025 by rpki-client