Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
File: F2clVphEFbeOnRVGF4TIxOaR0BA.mft (raw, json)
Hash identifier: za4GjaGZUh8WOSOWXqkY8sQVBZ8lFK4CMMKggh1qlqk=
Subject key identifier: B9:B1:01:1E:60:B4:D9:78:D4:1C:D5:9F:8E:33:C3:B9:C3:2C:E6:E5
Authority key identifier: 17:67:25:56:98:44:15:B7:8E:9D:15:46:17:84:C8:C4:E6:91:D0:10
Certificate issuer: /CN=17672556984415b78e9d15461784c8c4e691d010
Certificate serial: 0197B77BF20AB2BC5D589CA43885844726F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F2clVphEFbeOnRVGF4TIxOaR0BA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
Manifest number: 144D
Signing time: Sat 28 Jun 2025 17:00:42 +0000
Manifest this update: Sat 28 Jun 2025 17:00:42 +0000
Manifest next update: Sun 29 Jun 2025 17:00:42 +0000
Files and hashes: 1: F2clVphEFbeOnRVGF4TIxOaR0BA.crl (hash: stX0FRAXbk2XAr8f8ZnIkUoLtnxiJMoDPqsvdZkkCos=)
2: uO9dPxlx5kbryFMIrW1wZfHfrqc.roa (hash: NrkTIYE8RmX0UUZREQe1a/gFtR2Be/h3baezRNBfbZg=)
3: vMfYAVSQ4CaJ9hqOmmUhZmVM_Xc.roa (hash: HKXHwGN9LbH+lPLcsRDtqfOhE6nZDez5q/T7yrcmTHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
rsync://rpki.ripe.net/repository/DEFAULT/F2clVphEFbeOnRVGF4TIxOaR0BA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7b:f2:0a:b2:bc:5d:58:9c:a4:38:85:84:47:26:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17672556984415b78e9d15461784c8c4e691d010
Validity
Not Before: Jun 28 17:00:42 2025 GMT
Not After : Jun 29 17:00:42 2025 GMT
Subject: CN=b9b1011e60b4d978d41cd59f8e33c3b9c32ce6e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:dd:e7:1a:23:da:1e:a0:56:d8:7a:86:15:3b:
a1:28:d9:8c:bf:24:37:f5:aa:94:e7:40:b2:e0:94:
01:fd:ce:12:76:2e:f6:f4:88:b3:a2:72:f4:e8:9e:
cf:d7:f6:42:64:06:ce:c1:2a:cf:93:93:70:45:a0:
5d:a5:1a:47:dc:a3:99:5c:13:ec:64:08:30:72:e5:
5e:d2:83:19:39:ef:80:3d:82:6e:57:ea:45:11:82:
73:8f:69:9c:8e:c5:cc:93:66:e2:56:52:3d:8a:8d:
01:d1:91:d2:51:62:42:6e:16:41:15:b3:0f:be:bd:
bd:bc:e1:4b:d6:74:e3:5d:95:43:95:80:41:62:31:
ca:40:be:d6:5b:b5:bf:9a:1a:3c:37:69:c3:e7:c2:
84:8d:d0:53:a1:b1:bc:6b:05:f9:a8:91:4b:4a:64:
4a:69:cd:d7:90:dd:89:42:d6:13:37:e3:29:89:62:
ba:f6:d4:f0:4c:7f:41:b1:92:bb:d2:ab:74:d0:9f:
b3:eb:a8:b8:12:9d:b1:d0:3c:72:59:d8:dd:bf:6b:
81:00:92:4c:0c:f7:7e:1b:cc:bf:47:2d:0b:12:4e:
74:66:64:bf:1d:92:8d:9b:f1:b5:e8:ac:3b:22:8a:
65:a5:db:c4:95:44:29:a4:02:89:44:f6:6b:ee:7b:
1e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B1:01:1E:60:B4:D9:78:D4:1C:D5:9F:8E:33:C3:B9:C3:2C:E6:E5
X509v3 Authority Key Identifier:
keyid:17:67:25:56:98:44:15:B7:8E:9D:15:46:17:84:C8:C4:E6:91:D0:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2clVphEFbeOnRVGF4TIxOaR0BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:78:b6:58:15:db:94:44:e0:4c:07:40:d0:0c:fd:32:5f:07:
01:aa:9f:cc:66:7e:9d:ad:67:2c:a5:df:9c:e9:20:e6:a0:09:
79:52:3b:44:19:ad:16:99:be:09:22:b7:5e:b3:34:a1:d7:e2:
9d:cd:31:5a:c1:87:60:4d:38:df:ec:29:bd:bf:37:83:2a:10:
78:de:af:66:2c:76:99:ae:bc:b2:f9:26:17:aa:ba:55:9f:24:
2d:d5:19:f2:09:fd:77:28:47:69:79:5c:07:8d:41:e0:b6:af:
bd:2c:91:c2:8f:14:b2:c4:d8:db:44:4a:c0:ad:48:6d:4c:4a:
a4:49:57:4e:08:a8:a5:19:bc:2e:cb:84:72:34:80:0f:0c:6c:
32:01:5f:d0:8a:d1:0a:c1:11:38:c2:be:83:4b:22:02:72:e7:
58:2e:68:bf:3f:72:a3:1b:d2:3d:67:e5:73:bd:3e:23:99:0f:
a5:3e:2f:3a:db:5c:9a:ea:7f:13:8c:59:d9:db:15:8d:a2:de:
2c:bf:eb:ec:78:69:ff:01:47:99:7d:07:bf:c8:98:f7:56:e5:
5d:ba:11:88:64:6b:03:b0:d5:cb:87:ef:09:a7:71:30:2c:d8:
cf:ee:bc:58:8d:3f:8f:c0:8d:cc:12:ed:e6:24:f0:da:9d:23:
55:02:96:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:26:16 2025 by rpki-client