
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
File: F9LMnguBhrYLJwMTzZaCECLQS5U.mft (raw, json)
Hash identifier: ByFhxuKxhV6IT+j+ytPAvGpwPmSAC26gZQ7wSFOvL/M=
Subject key identifier: AE:85:6E:94:84:64:9F:8C:D7:A0:8E:FF:FA:9C:58:64:6A:72:3B:94
Authority key identifier: 17:D2:CC:9E:0B:81:86:B6:0B:27:03:13:CD:96:82:10:22:D0:4B:95
Certificate issuer: /CN=17d2cc9e0b8186b60b270313cd96821022d04b95
Certificate serial: 0199FC58AAB8BD37CC9DC79CCFFF2993F33F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
Manifest number: 05F8
Signing time: Sun 19 Oct 2025 12:01:33 +0000
Manifest this update: Sun 19 Oct 2025 12:01:33 +0000
Manifest next update: Mon 20 Oct 2025 12:01:33 +0000
Files and hashes: 1: F9LMnguBhrYLJwMTzZaCECLQS5U.crl (hash: dpUZsB6A8bWT6nz8SYl5y83PkJItMKfhvaqpL7Ejz84=)
2: uXgPf_GHZXRnXeYChGwQ6YgTY0A.roa (hash: O3rlazvN4WdAuuqeK4Ye7g2IFvV+XXKOscOrXA6JGjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:aa:b8:bd:37:cc:9d:c7:9c:cf:ff:29:93:f3:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d2cc9e0b8186b60b270313cd96821022d04b95
Validity
Not Before: Oct 19 12:01:33 2025 GMT
Not After : Oct 20 12:01:33 2025 GMT
Subject: CN=ae856e9484649f8cd7a08efffa9c58646a723b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3e:54:6f:c7:06:b3:c0:6a:50:75:ce:03:c1:
92:41:fe:b5:28:9e:80:24:40:1e:a0:64:bc:56:d0:
ce:4d:e7:74:20:7a:06:52:02:1e:7a:5a:96:2e:3f:
b4:03:35:76:e3:c2:53:74:fe:eb:bd:fa:cb:74:18:
3f:97:f5:ec:14:52:d9:5c:da:24:43:c9:a7:e2:2e:
c2:6d:dd:96:5c:8b:f8:b8:5d:3d:4e:6a:20:b0:a6:
e4:f6:99:8b:12:a0:8b:f0:d8:5a:31:c6:6a:0f:1a:
be:a8:f4:0f:c3:f7:2e:a0:99:9d:ac:47:23:a9:dd:
4c:63:71:24:ae:65:23:48:92:a9:0a:97:24:1d:ba:
60:65:96:06:16:97:eb:33:82:2e:25:ab:b5:33:8d:
3e:a8:65:76:96:2e:2d:47:f6:e2:e0:4b:32:8d:67:
60:c3:a8:77:75:4e:4d:15:a4:3e:da:9d:4a:2e:63:
53:c4:86:e1:c2:e2:c0:9f:be:0b:e5:1d:af:3b:f2:
59:bd:47:a0:ff:4a:e8:f3:11:db:a5:29:eb:0e:77:
b3:38:a3:14:a4:cc:14:f4:1f:51:ba:d0:96:82:fc:
ce:a9:8f:69:d5:c5:1c:e8:17:2f:2f:58:65:c1:5b:
3e:ed:64:5f:4c:96:25:0f:0f:0c:f1:3c:7c:87:86:
6c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:85:6E:94:84:64:9F:8C:D7:A0:8E:FF:FA:9C:58:64:6A:72:3B:94
X509v3 Authority Key Identifier:
keyid:17:D2:CC:9E:0B:81:86:B6:0B:27:03:13:CD:96:82:10:22:D0:4B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:7a:1c:51:f2:44:cb:82:0c:53:67:08:28:a2:a8:ca:48:82:
75:d4:4d:53:98:d5:cb:07:23:22:11:62:d6:3d:90:8f:e0:03:
57:65:d4:ef:22:36:c3:1c:d2:34:83:4c:13:96:8a:e8:a1:83:
26:9c:df:ee:ba:f5:ef:f5:ed:f4:4d:0d:7d:10:23:65:a2:73:
57:d3:7c:bb:06:6c:10:65:af:df:d3:db:22:fa:72:e0:03:50:
1f:fb:04:29:c0:ac:14:21:0d:be:32:17:de:8c:93:22:01:46:
83:00:89:50:93:93:91:d0:37:d4:1f:29:aa:61:d6:50:e0:1c:
90:8e:47:de:7a:a8:3b:cb:66:74:f4:db:92:03:a1:52:82:c1:
c7:af:ef:f9:8d:c7:48:ec:80:7f:15:ec:a6:0b:ae:da:c6:0c:
8b:67:40:be:8d:01:9d:b7:85:13:da:fe:3f:08:fe:ae:87:41:
1f:2b:2f:85:a0:a2:cd:4c:ae:20:0f:f9:69:44:fd:58:7c:23:
45:72:84:d0:ed:7e:e0:d2:1e:41:52:c5:db:55:f3:5e:7c:c8:
0c:90:d5:d0:bf:8c:2e:cd:15:4d:0a:09:d5:7c:27:65:9e:22:
19:77:84:86:02:80:9b:4d:64:59:70:c9:fb:ba:8a:92:20:09:
65:e6:1c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:29 2025 by rpki-client