Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
File: F9LMnguBhrYLJwMTzZaCECLQS5U.mft (raw, json)
Hash identifier: zzfiCIMSWU3Sr4t8U18ZEgYjfWtkn/H+vR2X4tiB+h8=
Subject key identifier: BA:E4:C4:18:A3:B6:CD:C6:69:9E:3A:6B:6C:EE:88:10:68:AB:0D:DC
Authority key identifier: 17:D2:CC:9E:0B:81:86:B6:0B:27:03:13:CD:96:82:10:22:D0:4B:95
Certificate issuer: /CN=17d2cc9e0b8186b60b270313cd96821022d04b95
Certificate serial: 019A24E57F657F9A3C3B09A86C0722E51D49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
Manifest number: 060D
Signing time: Mon 27 Oct 2025 09:00:11 +0000
Manifest this update: Mon 27 Oct 2025 09:00:11 +0000
Manifest next update: Tue 28 Oct 2025 09:00:11 +0000
Files and hashes: 1: F9LMnguBhrYLJwMTzZaCECLQS5U.crl (hash: hNPurJl/Zde1exz6P2kc8JT1FxQU426sVXfHUpPW1ig=)
2: uXgPf_GHZXRnXeYChGwQ6YgTY0A.roa (hash: O3rlazvN4WdAuuqeK4Ye7g2IFvV+XXKOscOrXA6JGjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:e5:7f:65:7f:9a:3c:3b:09:a8:6c:07:22:e5:1d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d2cc9e0b8186b60b270313cd96821022d04b95
Validity
Not Before: Oct 27 09:00:11 2025 GMT
Not After : Oct 28 09:00:11 2025 GMT
Subject: CN=bae4c418a3b6cdc6699e3a6b6cee881068ab0ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:25:d6:e5:b9:06:ce:7f:cc:c7:a1:fc:69:8b:
7a:ac:c7:1a:6e:af:4b:fa:5b:f3:42:fa:99:57:18:
bc:9f:7f:f4:e1:70:5b:1c:b2:4a:41:2a:35:32:98:
ab:76:cf:d6:05:d5:07:b3:a0:db:12:21:20:03:ca:
22:3a:eb:f7:d0:50:3b:fb:2f:4e:7f:fe:28:61:57:
c0:5c:dc:fe:8b:38:96:19:a7:c4:8e:ce:79:a4:54:
e0:c4:ae:bd:6d:0d:4c:25:f6:e5:7c:37:1a:16:66:
59:e2:7e:cc:d0:4f:6c:8c:d1:a5:b5:b6:f2:bf:ad:
c3:25:2c:dc:7f:67:37:6a:4b:94:91:3c:50:ca:28:
76:ea:8e:de:2f:bf:3e:58:f8:96:22:8a:bb:e6:ed:
a5:39:f0:de:69:9e:35:dc:e3:e4:b4:87:00:5d:01:
9a:f4:94:c9:09:c7:df:4b:51:74:9c:3e:7c:c5:03:
14:ab:f2:af:34:f6:40:5f:62:ff:55:44:3b:ee:dd:
79:0a:b2:7d:44:b2:3c:f5:04:39:d0:5f:0d:16:1d:
b2:90:88:74:d6:27:74:54:3a:27:b8:be:6b:27:80:
aa:c5:a3:dc:7b:cb:c1:81:f7:7d:0e:8d:e1:f4:d2:
1a:a5:df:fe:ad:97:ce:40:4f:70:24:4b:c2:70:90:
e4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E4:C4:18:A3:B6:CD:C6:69:9E:3A:6B:6C:EE:88:10:68:AB:0D:DC
X509v3 Authority Key Identifier:
keyid:17:D2:CC:9E:0B:81:86:B6:0B:27:03:13:CD:96:82:10:22:D0:4B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:89:89:7d:45:e0:7c:a9:10:a4:31:19:0c:a0:5f:8a:16:32:
f7:d7:c8:7e:f7:b7:1f:94:56:ca:3d:b1:0b:09:58:2b:74:7d:
5c:3d:e3:2a:a8:e3:e6:a8:45:be:20:38:64:33:e1:8e:85:7a:
46:1b:bc:88:6e:2e:42:1a:6c:9a:c1:f3:01:df:71:4a:06:44:
ec:2d:f6:e1:4d:23:c7:ee:9d:ee:a6:d9:24:87:b1:2a:b9:6b:
78:bf:f3:b2:e5:ee:53:1e:4b:da:02:cc:6d:b5:ab:85:21:07:
70:b5:cf:d7:23:97:e2:6e:db:dc:1f:71:fc:e1:89:b6:d8:b7:
f3:81:8c:fc:39:8c:f2:bd:9d:30:02:f6:04:07:89:45:98:c3:
bc:49:24:97:1e:85:aa:1c:66:3a:34:21:da:5a:2f:f2:37:7b:
bb:56:37:45:74:36:67:aa:be:40:16:48:70:e0:57:c7:67:ba:
6b:18:e9:ae:8e:73:33:bc:9e:1b:d1:8f:37:e4:fa:a4:a3:89:
c1:75:6d:b0:61:3f:43:bc:7b:c7:b6:9a:62:3c:40:87:f8:a0:
83:92:c7:9e:b5:7d:6b:49:30:21:95:a9:eb:6e:25:b9:33:fb:
76:a8:a7:c3:25:21:9e:59:0b:72:91:1f:73:fc:14:46:c4:f1:
07:bc:3a:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZok5X9lf5o8OwmobAci5R1JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZDJjYzllMGI4MTg2YjYwYjI3MDMxM2NkOTY4MjEwMjJk
MDRiOTUwHhcNMjUxMDI3MDkwMDExWhcNMjUxMDI4MDkwMDExWjAzMTEwLwYDVQQD
EyhiYWU0YzQxOGEzYjZjZGM2Njk5ZTNhNmI2Y2VlODgxMDY4YWIwZGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSXW5bkGzn/Mx6H8aYt6rMcabq9L
+lvzQvqZVxi8n3/04XBbHLJKQSo1Mpirds/WBdUHs6DbEiEgA8oiOuv30FA7+y9O
f/4oYVfAXNz+iziWGafEjs55pFTgxK69bQ1MJfblfDcaFmZZ4n7M0E9sjNGltbby
v63DJSzcf2c3akuUkTxQyih26o7eL78+WPiWIoq75u2lOfDeaZ413OPktIcAXQGa
9JTJCcffS1F0nD58xQMUq/KvNPZAX2L/VUQ77t15CrJ9RLI89QQ50F8NFh2ykIh0
1id0VDonuL5rJ4CqxaPce8vBgfd9Do3h9NIapd/+rZfOQE9wJEvCcJDkgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLrkxBijts3GaZ46a2zuiBBoqw3cMB8GA1UdIwQY
MBaAFBfSzJ4LgYa2CycDE82WghAi0EuVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjlMTW5ndUJocllMSndNVHpaYUNFQ0xRUzVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8wZDM4ZjktZTBjMS00NmNjLTlhMjIt
ZGZiYjZlYzM0MzBlLzEvRjlMTW5ndUJocllMSndNVHpaYUNFQ0xRUzVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8wZDM4ZjktZTBjMS00NmNjLTlhMjItZGZiYjZlYzM0MzBl
LzEvRjlMTW5ndUJocllMSndNVHpaYUNFQ0xRUzVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf4mJfUXg
fKkQpDEZDKBfihYy99fIfve3H5RWyj2xCwlYK3R9XD3jKqjj5qhFviA4ZDPhjoV6
Rhu8iG4uQhpsmsHzAd9xSgZE7C324U0jx+6d7qbZJIexKrlreL/zsuXuUx5L2gLM
bbWrhSEHcLXP1yOX4m7b3B9x/OGJtti384GM/DmM8r2dMAL2BAeJRZjDvEkklx6F
qhxmOjQh2lov8jd7u1Y3RXQ2Z6q+QBZIcOBXx2e6axjpro5zM7yeG9GPN+T6pKOJ
wXVtsGE/Q7x7x7aaYjxAh/igg5LHnrV9a0kwIZWp624luTP7dqinwyUhnlkLcpEf
c/wURsTxB7w6Eg==
-----END CERTIFICATE-----
Generated at Mon Oct 27 12:01:44 2025 by rpki-client