Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
File: F9LMnguBhrYLJwMTzZaCECLQS5U.mft (raw, json)
Hash identifier: grrrXSCSc5hgW626q7nj+6flQOM3waxJyvC+eTPqnPg=
Subject key identifier: 59:82:57:0D:3E:38:D4:FC:76:AB:CA:A8:0C:EE:08:BB:00:BA:BB:86
Authority key identifier: 17:D2:CC:9E:0B:81:86:B6:0B:27:03:13:CD:96:82:10:22:D0:4B:95
Certificate issuer: /CN=17d2cc9e0b8186b60b270313cd96821022d04b95
Certificate serial: 01976BBDBA13614E8D3E79968A601757EC32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
Manifest number: 04A4
Signing time: Sat 14 Jun 2025 00:01:25 +0000
Manifest this update: Sat 14 Jun 2025 00:01:25 +0000
Manifest next update: Sun 15 Jun 2025 00:01:25 +0000
Files and hashes: 1: F9LMnguBhrYLJwMTzZaCECLQS5U.crl (hash: bn14p0k1XQH3NDdGZZ7Q0yURO0/Kl7MbBuBSgrVq12o=)
2: uXgPf_GHZXRnXeYChGwQ6YgTY0A.roa (hash: O3rlazvN4WdAuuqeK4Ye7g2IFvV+XXKOscOrXA6JGjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:ba:13:61:4e:8d:3e:79:96:8a:60:17:57:ec:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d2cc9e0b8186b60b270313cd96821022d04b95
Validity
Not Before: Jun 14 00:01:25 2025 GMT
Not After : Jun 15 00:01:25 2025 GMT
Subject: CN=5982570d3e38d4fc76abcaa80cee08bb00babb86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:de:93:d5:ea:5b:7e:d6:1a:c0:6d:8c:01:ca:
c2:5e:0e:f3:89:d7:61:1c:fb:94:80:04:81:30:a9:
5c:73:e4:47:f3:2d:b3:09:33:f2:d6:f3:b6:2a:59:
be:c9:d4:70:46:d5:46:a4:f0:db:6b:9e:2c:90:79:
c9:0e:7a:a9:22:5a:d5:e7:e6:78:03:dc:77:de:f4:
a8:22:b7:d1:91:a2:06:f7:c8:f5:a7:68:2e:77:f7:
93:28:31:67:96:ac:3f:78:80:38:6e:57:53:9e:f0:
42:01:9c:39:a7:95:b7:70:96:ab:91:5a:06:ec:4f:
13:71:47:49:c1:0a:a6:0b:7c:8b:60:73:a7:36:dd:
06:6c:ae:dd:58:8c:25:37:be:24:25:7a:51:68:da:
10:fd:61:af:72:de:16:ab:c4:cb:02:56:45:07:71:
89:66:eb:50:eb:d5:4d:70:bd:55:a4:0b:8b:ad:aa:
d8:b5:f1:7f:ca:d4:c3:8b:ff:23:75:43:fb:a4:20:
4a:4c:fb:fc:6d:2a:58:df:7f:fa:c1:aa:74:e4:61:
2c:ec:cf:51:67:f6:ad:de:a5:e3:0f:db:c2:af:a5:
01:65:7f:ee:3c:64:eb:39:97:a8:59:38:95:12:17:
2a:80:0b:d3:58:bf:8e:fd:58:97:e3:50:71:ea:96:
99:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:82:57:0D:3E:38:D4:FC:76:AB:CA:A8:0C:EE:08:BB:00:BA:BB:86
X509v3 Authority Key Identifier:
keyid:17:D2:CC:9E:0B:81:86:B6:0B:27:03:13:CD:96:82:10:22:D0:4B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:a7:34:d6:a3:cc:75:6b:a5:37:ea:19:4a:ba:25:0e:41:34:
28:7f:e2:ee:ac:2f:81:e1:cd:27:ee:27:b1:03:f9:c0:83:7c:
b3:fd:de:cc:07:cc:51:3e:59:01:9e:01:cb:99:a2:4c:20:36:
e2:88:a0:7f:3b:41:d0:9e:50:92:29:52:2b:0e:45:11:5c:54:
60:7a:45:50:b3:5b:73:50:7c:c2:1f:42:a7:86:5a:94:e6:3c:
ab:7d:2f:63:01:06:45:21:78:00:b7:7f:52:f5:e7:9b:a4:3c:
21:89:57:d1:92:9c:29:d5:4b:25:61:34:e2:f3:da:57:d3:23:
5b:6e:45:f0:06:c5:5a:02:06:f6:3e:37:6f:29:7d:21:cd:6b:
bf:1d:38:1c:9b:65:f8:bd:8a:f5:5d:68:05:2a:bd:eb:1a:33:
bc:b7:10:9c:6f:53:8c:e9:58:02:78:5b:0e:18:1f:df:7f:86:
73:ac:4e:22:23:48:cc:fd:c6:d1:64:3e:f9:2e:87:77:a1:2f:
a2:b8:83:28:6b:70:ae:24:d1:11:25:33:49:6d:57:f7:c9:87:
b2:db:92:9e:f9:00:5b:a4:92:06:af:7a:7e:02:25:22:4a:f3:
59:d1:bb:41:7d:48:d8:5b:36:d0:39:a6:32:09:b8:65:da:87:
c6:79:ee:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:20:25 2025 by rpki-client