Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft
File: F42BIe9wTXqXcMPs4eIFYUeQrDk.mft (raw, json)
Hash identifier: rucYFJhsxHVNBpvbgcDN2h0TRkc5zhBbXyPA3h1jIPU=
Subject key identifier: 12:07:DE:CF:B5:6D:A3:3A:9D:88:97:5B:AE:FD:1F:6B:E2:83:68:8B
Authority key identifier: 17:8D:81:21:EF:70:4D:7A:97:70:C3:EC:E1:E2:05:61:47:90:AC:39
Certificate issuer: /CN=178d8121ef704d7a9770c3ece1e205614790ac39
Certificate serial: 019893364526201C5F56BE9B95D0814672DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F42BIe9wTXqXcMPs4eIFYUeQrDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft
Manifest number: 057F
Signing time: Sun 10 Aug 2025 09:01:04 +0000
Manifest this update: Sun 10 Aug 2025 09:01:04 +0000
Manifest next update: Mon 11 Aug 2025 09:01:04 +0000
Files and hashes: 1: F42BIe9wTXqXcMPs4eIFYUeQrDk.crl (hash: oIjrcdJvHGClpBnlmagB9Fyg/f0Zmy2aIpzUz1JfH0E=)
2: tQhQQED_2rbtgmsDxQqfycOcoj4.roa (hash: 7QkytynjV9fTl5bHPu2TPRokrjL3zXWtRN7glg7QEBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/F42BIe9wTXqXcMPs4eIFYUeQrDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 09:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:36:45:26:20:1c:5f:56:be:9b:95:d0:81:46:72:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=178d8121ef704d7a9770c3ece1e205614790ac39
Validity
Not Before: Aug 10 09:01:04 2025 GMT
Not After : Aug 11 09:01:04 2025 GMT
Subject: CN=1207decfb56da33a9d88975baefd1f6be283688b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:29:cc:c5:97:9a:ab:58:7c:80:d8:85:3a:e4:
df:30:53:a1:fe:6c:0f:ed:68:08:52:96:c4:62:de:
c4:95:6f:46:81:c0:88:a4:99:c7:b1:3a:b0:64:99:
7e:18:ae:27:f5:3b:23:ad:d3:6d:2e:d5:dc:37:70:
80:80:ba:91:d0:f3:c7:12:95:2a:5a:6a:d7:d3:1e:
d5:06:1e:75:f2:c3:13:bb:69:f8:47:91:f7:39:40:
5b:27:78:54:c3:ad:2d:2c:d1:79:06:d3:8e:3f:b3:
da:29:55:ad:10:df:27:25:4d:6e:33:ee:1b:27:4d:
ce:17:73:54:5d:26:44:c3:ee:20:50:5d:4c:55:aa:
da:ae:af:b0:73:d0:4e:6c:fc:c6:1a:e7:07:de:da:
6a:d4:17:1a:e5:d7:ad:0a:75:43:97:f6:a6:1a:1d:
19:dc:10:55:28:1b:64:19:36:63:c2:30:3b:af:75:
4d:ba:36:67:e5:2c:b6:f8:06:a3:c9:2f:72:54:db:
39:db:d5:13:75:32:4d:32:35:eb:15:69:47:5a:57:
6c:8d:56:a7:9c:79:af:e8:9c:76:82:14:94:9b:b4:
db:db:07:7c:a2:b7:8c:ba:ae:1f:e1:ad:7c:7c:66:
4b:76:fa:b8:6c:17:46:54:24:6c:dd:d2:50:ec:fe:
f4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:07:DE:CF:B5:6D:A3:3A:9D:88:97:5B:AE:FD:1F:6B:E2:83:68:8B
X509v3 Authority Key Identifier:
keyid:17:8D:81:21:EF:70:4D:7A:97:70:C3:EC:E1:E2:05:61:47:90:AC:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F42BIe9wTXqXcMPs4eIFYUeQrDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:e1:e8:fd:4c:4d:ca:b7:d0:fa:95:5d:43:12:3d:c7:28:9f:
66:73:70:92:01:4e:00:fc:e9:b7:c9:a8:71:94:e1:3c:69:a5:
66:d9:2e:2a:e3:09:4e:d0:87:0a:d9:5f:41:02:34:74:e5:72:
f6:31:ee:b1:c1:28:a9:9a:ab:26:f5:8d:6e:f9:bf:ce:31:27:
7d:d1:d9:59:9e:5d:58:47:5b:12:69:f7:54:14:67:7d:3a:93:
49:3c:c0:44:c1:24:9b:c0:7f:03:82:c8:54:52:19:bd:05:b2:
f8:79:33:3f:64:a1:67:a4:fb:02:49:01:ff:f6:e8:18:f9:57:
f3:bf:16:41:53:90:cd:38:a7:97:90:4e:7a:91:04:ef:b8:e5:
84:bd:76:ce:97:16:21:c7:e0:26:31:ab:77:0c:69:b7:a2:55:
64:b0:71:8f:77:c4:5b:61:28:a6:cd:db:24:02:0b:7e:e7:f3:
47:1b:91:d8:c2:f9:a2:81:61:87:18:01:17:f5:d7:7d:8e:fa:
ee:6d:fb:c3:79:56:9c:c2:35:3a:30:fb:3e:8d:f2:96:66:02:
7d:2a:a2:14:62:9e:5a:26:55:98:27:b9:8c:e1:70:10:f6:55:
06:e1:ab:97:df:ab:3e:cd:ce:4b:a3:f4:93:94:f7:ed:64:a7:
16:70:ea:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:47:12 2025 by rpki-client