Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
File: F9LMnguBhrYLJwMTzZaCECLQS5U.mft (raw, json)
Hash identifier: 7awMw7T01YamTGWpyhLne6OJvSq6rOo88HuB4EuwHVA=
Subject key identifier: 53:69:10:C7:57:7C:51:40:5D:9D:AB:92:E3:A7:73:FF:97:2E:A8:06
Authority key identifier: 17:D2:CC:9E:0B:81:86:B6:0B:27:03:13:CD:96:82:10:22:D0:4B:95
Certificate issuer: /CN=17d2cc9e0b8186b60b270313cd96821022d04b95
Certificate serial: 019855691893AF5345EEDC87C22E1D59BB44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
Manifest number: 051D
Signing time: Tue 29 Jul 2025 09:00:07 +0000
Manifest this update: Tue 29 Jul 2025 09:00:07 +0000
Manifest next update: Wed 30 Jul 2025 09:00:07 +0000
Files and hashes: 1: F9LMnguBhrYLJwMTzZaCECLQS5U.crl (hash: X/sx/2lZQGonrzpT7vr9/jzmWV+FAWMxQVy1jA+ydaU=)
2: uXgPf_GHZXRnXeYChGwQ6YgTY0A.roa (hash: O3rlazvN4WdAuuqeK4Ye7g2IFvV+XXKOscOrXA6JGjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:69:18:93:af:53:45:ee:dc:87:c2:2e:1d:59:bb:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d2cc9e0b8186b60b270313cd96821022d04b95
Validity
Not Before: Jul 29 09:00:07 2025 GMT
Not After : Jul 30 09:00:07 2025 GMT
Subject: CN=536910c7577c51405d9dab92e3a773ff972ea806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c7:dc:0e:be:cc:18:f3:59:45:1c:b4:b1:63:
43:b8:cd:ab:f0:2a:46:c0:f2:08:79:98:60:16:94:
16:d2:1e:39:fd:ba:cf:38:b4:0d:48:2b:28:4e:b2:
3b:e9:c3:3f:2c:e0:3d:af:7c:aa:a8:eb:0d:25:af:
c5:98:e9:64:e2:18:a4:ab:d2:a6:12:55:0b:32:2f:
2c:16:d0:35:15:e4:4d:e7:8b:87:f0:c8:14:b6:8a:
18:79:e9:b1:05:ca:86:18:c1:7e:a2:92:4c:2a:58:
8a:b7:c9:5c:1e:2f:7d:2a:aa:f5:12:d4:3e:5c:2c:
c7:26:5f:4c:5f:26:74:bd:e7:f6:65:ba:75:7e:1e:
7d:fb:c0:29:2d:bf:a1:22:66:a4:00:3e:71:a9:78:
6c:4e:2d:e8:d7:f4:11:e8:24:75:a3:d9:89:c8:46:
94:e9:47:f8:89:57:2b:de:02:bd:bd:11:1d:2b:9f:
24:36:49:83:e6:e5:21:5b:9c:95:ee:6a:ae:fa:fe:
34:56:48:14:12:4d:87:b0:69:99:0d:a6:8e:69:ff:
63:6c:4f:d4:5e:4b:95:8a:73:73:fc:36:2b:af:dd:
a6:40:f8:49:f2:a6:ef:59:c3:a2:5b:89:b7:d1:ae:
d2:5b:46:18:a7:b3:7a:8e:cc:89:37:82:26:71:b9:
d3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:69:10:C7:57:7C:51:40:5D:9D:AB:92:E3:A7:73:FF:97:2E:A8:06
X509v3 Authority Key Identifier:
keyid:17:D2:CC:9E:0B:81:86:B6:0B:27:03:13:CD:96:82:10:22:D0:4B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:f9:88:b4:53:c2:98:ac:dc:89:36:88:ed:f6:7c:a8:8e:44:
57:40:7e:f0:cd:ff:82:68:c5:a4:b6:df:5b:48:56:ff:48:a1:
68:93:a0:fb:b7:b6:5c:0a:25:22:62:dd:50:c1:c4:17:95:64:
3b:89:61:fd:a9:8e:bc:03:23:f3:d2:0b:b1:d1:7d:a4:69:1c:
2c:7b:78:7f:7e:08:f5:2c:fe:e2:40:99:18:fe:cc:43:5c:fe:
fb:2f:22:c3:f6:76:7c:90:5b:7e:78:a7:4a:d9:77:22:2b:19:
fa:d0:1a:41:c8:96:24:36:93:74:12:e8:98:fa:e2:84:c7:5e:
62:21:7e:46:f4:57:aa:08:21:9a:78:32:a5:fd:7c:07:41:e7:
ac:18:d7:93:8e:0a:78:52:1a:89:10:4f:e6:00:a3:ac:ea:8e:
e9:2d:59:29:20:51:68:71:c1:a3:ab:b3:42:c8:82:c2:8d:f5:
df:9d:1b:18:0a:23:d9:bc:f6:1f:14:05:ff:a1:df:cd:24:7a:
6d:15:00:b4:d6:71:0f:91:5d:bc:77:1a:63:51:fd:e4:38:11:
1e:14:dc:b6:b1:5d:46:c5:38:74:aa:7d:92:7e:e2:a0:d2:af:
d7:fb:30:5d:bf:7b:0e:39:87:4d:48:e9:a6:19:31:9e:e9:5d:
71:cb:57:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 12:36:05 2025 by rpki-client