Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
File: F2clVphEFbeOnRVGF4TIxOaR0BA.mft (raw, json)
Hash identifier: RyXDzKeBuKlCz6ZBZWjSp12wc3lzQ5YmJk5EHxbrhL0=
Subject key identifier: 75:FE:D0:1E:28:91:BF:D2:CF:01:B0:A3:82:AC:3B:B8:B7:B2:51:25
Authority key identifier: 17:67:25:56:98:44:15:B7:8E:9D:15:46:17:84:C8:C4:E6:91:D0:10
Certificate issuer: /CN=17672556984415b78e9d15461784c8c4e691d010
Certificate serial: 019749686E91AF829A4292759CBB0D1CB602
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F2clVphEFbeOnRVGF4TIxOaR0BA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
Manifest number: 1414
Signing time: Sat 07 Jun 2025 08:01:10 +0000
Manifest this update: Sat 07 Jun 2025 08:01:10 +0000
Manifest next update: Sun 08 Jun 2025 08:01:10 +0000
Files and hashes: 1: F2clVphEFbeOnRVGF4TIxOaR0BA.crl (hash: WghvXB5pQOng5MgeUQOX/iyrbXq1Y7uzxZUyWqRpQ6c=)
2: uO9dPxlx5kbryFMIrW1wZfHfrqc.roa (hash: NrkTIYE8RmX0UUZREQe1a/gFtR2Be/h3baezRNBfbZg=)
3: vMfYAVSQ4CaJ9hqOmmUhZmVM_Xc.roa (hash: HKXHwGN9LbH+lPLcsRDtqfOhE6nZDez5q/T7yrcmTHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
rsync://rpki.ripe.net/repository/DEFAULT/F2clVphEFbeOnRVGF4TIxOaR0BA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:6e:91:af:82:9a:42:92:75:9c:bb:0d:1c:b6:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17672556984415b78e9d15461784c8c4e691d010
Validity
Not Before: Jun 7 08:01:10 2025 GMT
Not After : Jun 8 08:01:10 2025 GMT
Subject: CN=75fed01e2891bfd2cf01b0a382ac3bb8b7b25125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d6:82:8b:96:87:a6:a9:27:a9:93:3d:65:1c:
18:b1:9e:76:7d:0b:fb:37:ae:79:25:85:e8:80:10:
7d:8b:39:c0:05:c0:29:77:f6:bf:61:40:dc:c2:6a:
bd:fb:7c:51:6d:56:7d:25:a1:75:41:ca:17:11:bf:
29:7f:57:7f:4b:cc:1d:7b:6a:95:e4:a7:52:99:63:
2b:d1:3e:e0:74:b3:d9:cc:a9:2d:60:ae:4b:4d:91:
41:e7:00:4b:c3:a2:cf:40:44:49:84:20:13:2c:98:
db:fe:c5:03:36:70:b2:8d:2a:4b:02:1a:19:57:1a:
62:59:ab:ea:ba:ea:ca:62:8d:37:7a:95:c4:2c:02:
77:69:74:aa:59:96:f5:7d:7a:17:88:f0:ff:c3:3f:
a7:59:ec:59:8a:df:48:f8:c6:57:14:7f:40:40:68:
79:05:dc:a9:c8:63:56:e6:8a:e1:52:ae:f8:67:8b:
a4:93:ad:75:8b:5a:00:bc:cf:ec:64:c5:62:d1:06:
53:50:51:0c:b5:98:0d:2f:7e:ef:7f:7e:79:9c:01:
a5:f4:3c:ff:38:54:06:ff:89:18:ba:a9:6b:d5:7a:
7d:e1:0f:c4:fd:57:f1:13:ae:b5:0f:d3:e5:9c:1c:
a2:76:1f:e8:99:78:06:35:c0:72:40:83:4f:10:93:
bc:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:FE:D0:1E:28:91:BF:D2:CF:01:B0:A3:82:AC:3B:B8:B7:B2:51:25
X509v3 Authority Key Identifier:
keyid:17:67:25:56:98:44:15:B7:8E:9D:15:46:17:84:C8:C4:E6:91:D0:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2clVphEFbeOnRVGF4TIxOaR0BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:8a:11:5d:f0:79:3f:f8:b3:d3:99:bd:6c:8d:50:2e:cf:18:
27:4d:67:77:cd:3e:5c:50:c8:ba:52:5c:df:49:d6:64:91:7c:
b6:3e:75:e3:12:db:31:86:9d:b2:b5:5b:73:35:1c:5e:82:23:
6a:1b:5c:93:e2:6a:34:aa:c4:d4:4f:2e:13:9e:95:5c:0f:b9:
ee:2b:c1:30:06:ed:63:6c:ce:55:d1:2c:ef:57:6f:14:5e:4b:
ef:6f:ce:32:3e:58:35:0d:1b:b0:18:d4:b9:a2:82:9d:82:3d:
2d:a3:e1:34:9f:50:d8:41:e2:50:5f:9b:61:ee:a0:37:52:48:
05:af:11:5c:e0:7a:ba:7a:70:e9:3e:b4:30:f6:f3:0b:17:58:
97:a4:b9:72:c6:df:83:f8:04:03:f3:ec:7d:46:01:76:72:76:
d4:4f:c3:17:a5:73:db:da:56:52:35:d6:bb:28:7a:60:cc:3c:
96:6a:b2:f5:2b:03:e8:ca:99:42:a4:29:ab:48:28:9f:6b:b2:
7f:9f:d5:06:71:82:cb:04:fd:a3:f6:4e:0d:55:82:9a:3f:7b:
86:64:93:3a:7c:e1:ce:2b:c5:93:d2:e1:be:80:46:ac:87:21:
46:2a:f6:1a:cc:d1:08:38:70:e7:7f:63:a4:17:3e:c0:2c:3b:
c2:be:06:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:50:29 2025 by rpki-client