Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
File: F9LMnguBhrYLJwMTzZaCECLQS5U.mft (raw, json)
Hash identifier: V6I7SGUOAlfQ6wU3hq9h5d3SNhHTkIeNIiAUWpPAxEE=
Subject key identifier: CB:C7:C6:A6:1C:2F:5E:AA:42:A1:5F:FE:FB:E9:C5:D4:F1:A8:81:82
Authority key identifier: 17:D2:CC:9E:0B:81:86:B6:0B:27:03:13:CD:96:82:10:22:D0:4B:95
Certificate issuer: /CN=17d2cc9e0b8186b60b270313cd96821022d04b95
Certificate serial: 0196AC8C8EDABEA4A7982C9052E2E15DE71E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
Manifest number: 0441
Signing time: Wed 07 May 2025 21:00:14 +0000
Manifest this update: Wed 07 May 2025 21:00:14 +0000
Manifest next update: Thu 08 May 2025 21:00:14 +0000
Files and hashes: 1: F9LMnguBhrYLJwMTzZaCECLQS5U.crl (hash: i84Mybups83+1sdsxeYLrStLHqDca0jii3xZ9qrdWGI=)
2: uXgPf_GHZXRnXeYChGwQ6YgTY0A.roa (hash: O3rlazvN4WdAuuqeK4Ye7g2IFvV+XXKOscOrXA6JGjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:8c:8e:da:be:a4:a7:98:2c:90:52:e2:e1:5d:e7:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d2cc9e0b8186b60b270313cd96821022d04b95
Validity
Not Before: May 7 21:00:14 2025 GMT
Not After : May 8 21:00:14 2025 GMT
Subject: CN=cbc7c6a61c2f5eaa42a15ffefbe9c5d4f1a88182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a1:03:d5:41:c6:ce:37:d6:dd:17:1d:79:0e:
2a:ee:ba:6e:5e:b0:6d:88:df:20:11:04:be:bd:8b:
02:7e:7b:06:8d:9d:e8:55:69:ef:cc:ba:81:82:a3:
0f:c2:03:75:b5:b4:83:d6:eb:63:ac:9c:56:a1:aa:
bf:fb:da:72:af:6d:bf:75:23:95:19:d2:dd:bb:b7:
f8:32:e6:61:63:76:20:86:a1:f1:9b:0d:32:eb:30:
e5:48:32:23:e5:cb:05:2d:ca:9a:62:a3:07:81:88:
82:4d:a6:b4:ac:90:a3:f4:d5:42:5b:27:a6:e1:1a:
26:7d:78:55:2d:64:28:db:80:ff:81:24:04:e8:f6:
78:22:2a:f1:d9:92:e9:e2:af:af:c7:94:a2:11:e8:
35:23:e4:a5:74:6c:56:5d:ac:9e:4b:61:3f:1a:3c:
55:13:67:db:58:0f:f8:ba:c5:6e:1c:0d:f6:42:60:
a2:7b:51:fb:18:47:6d:a7:09:e2:83:7a:f5:b2:f4:
47:4b:ef:33:d3:3e:20:82:56:42:eb:14:c7:6b:66:
f8:84:0f:9b:f8:16:ee:fd:56:09:97:a4:b4:12:00:
03:f6:fe:3d:0b:fc:7f:26:e2:56:04:97:12:24:46:
c1:2d:79:8c:cd:49:00:f9:35:25:6d:1e:63:96:1a:
b7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C7:C6:A6:1C:2F:5E:AA:42:A1:5F:FE:FB:E9:C5:D4:F1:A8:81:82
X509v3 Authority Key Identifier:
keyid:17:D2:CC:9E:0B:81:86:B6:0B:27:03:13:CD:96:82:10:22:D0:4B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:45:62:46:7e:24:29:f7:8b:dd:79:49:d1:0f:eb:6f:44:f7:
db:d5:4d:ef:8c:77:18:48:54:87:47:f6:b3:a8:fc:f3:9b:1b:
ff:fd:f7:32:5a:e1:ea:ba:d0:e5:74:47:5c:07:85:92:37:96:
9f:01:f6:d1:a7:ed:4e:84:b5:a3:c4:62:cf:df:e8:af:09:81:
7d:9e:08:54:8d:11:fc:00:2c:67:f0:4d:c2:83:cd:fd:5b:2c:
3d:3b:01:0b:26:da:4c:c6:40:a0:77:ee:91:f8:6a:26:7c:51:
d9:54:1d:e1:f0:25:c6:ca:d5:f6:b4:f1:db:af:78:47:65:33:
c3:5c:a9:a5:b7:5a:62:15:70:12:06:4c:b0:a3:cb:72:90:c3:
c2:ea:7d:5c:52:7b:bf:31:9e:e6:ed:a8:2e:d5:fe:c6:2a:63:
a1:5f:94:db:ae:2b:c4:dc:d8:b3:a1:b5:ab:12:9a:9a:2a:71:
f9:e7:25:3e:aa:76:51:77:6a:ca:01:6e:c4:06:f3:d7:7a:c6:
b5:71:b9:46:ea:71:92:f3:31:65:bf:04:17:b8:e9:d6:cd:b7:
fc:95:72:1b:c8:7c:76:5a:f2:40:e3:db:d9:7e:73:9a:6b:58:
3c:0b:03:ba:92:f6:70:3b:b4:55:ae:cd:37:79:8e:13:94:b9:
42:f3:97:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 03:55:17 2025 by rpki-client