Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
File: F9LMnguBhrYLJwMTzZaCECLQS5U.mft (raw, json)
Hash identifier: quLcws9fhz0I/VZJAR3fVcRcrfQFm+qpzRH6obIMhjk=
Subject key identifier: 59:0F:17:90:57:6B:51:9E:C0:C2:3F:01:2D:00:2C:23:C0:9F:D5:64
Authority key identifier: 17:D2:CC:9E:0B:81:86:B6:0B:27:03:13:CD:96:82:10:22:D0:4B:95
Certificate issuer: /CN=17d2cc9e0b8186b60b270313cd96821022d04b95
Certificate serial: 019678689B8EDB0F30BB11CE0D5471094BB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
Manifest number: 0426
Signing time: Sun 27 Apr 2025 18:00:43 +0000
Manifest this update: Sun 27 Apr 2025 18:00:43 +0000
Manifest next update: Mon 28 Apr 2025 18:00:43 +0000
Files and hashes: 1: F9LMnguBhrYLJwMTzZaCECLQS5U.crl (hash: FBqA5UkXOrKv2tIMnkM3ron/p3RyUXFw41G9TrXraZ8=)
2: uXgPf_GHZXRnXeYChGwQ6YgTY0A.roa (hash: O3rlazvN4WdAuuqeK4Ye7g2IFvV+XXKOscOrXA6JGjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:9b:8e:db:0f:30:bb:11:ce:0d:54:71:09:4b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d2cc9e0b8186b60b270313cd96821022d04b95
Validity
Not Before: Apr 27 18:00:43 2025 GMT
Not After : Apr 28 18:00:43 2025 GMT
Subject: CN=590f1790576b519ec0c23f012d002c23c09fd564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:bf:52:3a:ff:6b:5c:48:0d:99:6f:57:02:61:
78:6b:1a:b4:93:e7:69:f8:40:33:f8:86:83:41:46:
ac:ff:92:ad:18:94:20:dc:19:9f:3f:13:2e:35:53:
9b:f2:b5:16:7a:93:7d:63:d8:d7:2a:55:07:f6:26:
bd:b4:d9:82:81:4e:56:f7:79:b6:f8:56:d6:bf:a5:
ec:08:3d:aa:33:43:ca:50:35:69:83:ec:49:df:7c:
31:0f:c8:1d:84:cc:e6:89:36:6e:75:96:f2:fb:5a:
a3:2a:9c:77:81:6d:75:a0:ea:bf:32:d2:9b:1a:88:
a6:88:7f:53:c3:c7:4e:af:d6:22:a9:f7:b5:c5:0d:
c8:dc:34:da:64:9d:78:b4:a4:74:a9:cb:e8:10:d8:
e2:d7:8d:3f:51:0c:5c:08:72:5b:dd:f0:c9:96:ee:
f4:b4:2d:33:2a:84:53:85:2c:7b:a3:be:aa:42:25:
c0:fc:91:0e:6e:b5:46:f4:93:96:ab:ec:c9:fb:76:
aa:7c:11:31:4c:92:6f:75:22:e3:63:14:be:d8:f5:
bc:09:1e:61:83:f9:ff:de:e6:89:48:3e:b9:ec:1d:
9a:c4:e1:2c:10:c9:bd:d8:2d:6c:d1:4a:5a:6a:0b:
38:83:e5:32:c3:f7:1b:db:90:86:b7:a8:b6:66:f8:
cd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:0F:17:90:57:6B:51:9E:C0:C2:3F:01:2D:00:2C:23:C0:9F:D5:64
X509v3 Authority Key Identifier:
keyid:17:D2:CC:9E:0B:81:86:B6:0B:27:03:13:CD:96:82:10:22:D0:4B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:f4:9b:c5:0b:fb:29:8c:fd:c6:5d:7f:5f:eb:3f:53:be:eb:
8c:dd:6b:8d:60:7a:b8:bd:30:e6:e7:a8:73:d9:91:00:b5:74:
72:1c:20:13:c8:88:9c:6e:f2:d0:0b:a2:12:17:a4:6f:f6:2b:
e5:07:41:2a:c8:f3:01:93:ee:ca:bc:54:fe:f4:fd:76:80:a9:
d1:f8:ec:6e:26:c8:b3:ed:73:37:ea:55:41:51:14:2b:4a:e3:
66:19:79:f7:67:2c:74:b4:00:9f:d0:f5:bd:27:96:2f:8b:cf:
74:61:c2:b0:b0:31:e7:77:16:0c:67:41:96:37:8d:e4:d8:bf:
48:e5:f2:96:68:b8:15:53:3f:5e:8c:c4:f4:65:fd:d2:77:fe:
24:0b:ca:b9:42:ad:50:85:9f:66:0e:a0:f7:6a:1d:c3:ba:f2:
b3:23:15:96:0f:2a:27:f0:02:5f:41:f0:d7:96:92:f7:9c:08:
54:11:5a:cf:e6:67:af:52:28:56:b6:9f:17:a0:6b:05:db:b2:
4a:b8:8a:35:6e:09:5e:f7:7d:13:3d:75:79:4a:9a:a1:f0:f4:
e7:33:27:47:e2:d9:9d:22:45:a7:20:64:ee:62:8b:7e:de:02:
20:d9:fd:6b:26:bc:db:c2:d2:55:5d:37:26:d7:b3:2e:02:4d:
3b:f7:a8:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ4aJuO2w8wuxHODVRxCUu5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZDJjYzllMGI4MTg2YjYwYjI3MDMxM2NkOTY4MjEwMjJk
MDRiOTUwHhcNMjUwNDI3MTgwMDQzWhcNMjUwNDI4MTgwMDQzWjAzMTEwLwYDVQQD
Eyg1OTBmMTc5MDU3NmI1MTllYzBjMjNmMDEyZDAwMmMyM2MwOWZkNTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6L9SOv9rXEgNmW9XAmF4axq0k+dp
+EAz+IaDQUas/5KtGJQg3BmfPxMuNVOb8rUWepN9Y9jXKlUH9ia9tNmCgU5W93m2
+FbWv6XsCD2qM0PKUDVpg+xJ33wxD8gdhMzmiTZudZby+1qjKpx3gW11oOq/MtKb
GoimiH9Tw8dOr9Yiqfe1xQ3I3DTaZJ14tKR0qcvoENji140/UQxcCHJb3fDJlu70
tC0zKoRThSx7o76qQiXA/JEObrVG9JOWq+zJ+3aqfBExTJJvdSLjYxS+2PW8CR5h
g/n/3uaJSD657B2axOEsEMm92C1s0Upaags4g+Uyw/cb25CGt6i2ZvjN9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFkPF5BXa1GewMI/AS0ALCPAn9VkMB8GA1UdIwQY
MBaAFBfSzJ4LgYa2CycDE82WghAi0EuVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjlMTW5ndUJocllMSndNVHpaYUNFQ0xRUzVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8wZDM4ZjktZTBjMS00NmNjLTlhMjIt
ZGZiYjZlYzM0MzBlLzEvRjlMTW5ndUJocllMSndNVHpaYUNFQ0xRUzVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8wZDM4ZjktZTBjMS00NmNjLTlhMjItZGZiYjZlYzM0MzBl
LzEvRjlMTW5ndUJocllMSndNVHpaYUNFQ0xRUzVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJPSbxQv7
KYz9xl1/X+s/U77rjN1rjWB6uL0w5ueoc9mRALV0chwgE8iInG7y0AuiEhekb/Yr
5QdBKsjzAZPuyrxU/vT9doCp0fjsbibIs+1zN+pVQVEUK0rjZhl592csdLQAn9D1
vSeWL4vPdGHCsLAx53cWDGdBljeN5Ni/SOXylmi4FVM/XozE9GX90nf+JAvKuUKt
UIWfZg6g92odw7rysyMVlg8qJ/ACX0Hw15aS95wIVBFaz+Znr1IoVrafF6BrBduy
SriKNW4JXvd9Ez11eUqaofD05zMnR+LZnSJFpyBk7mKLft4CINn9aya828LSVV03
JtezLgJNO/eoKQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 20:58:33 2025 by rpki-client