Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
File: F9LMnguBhrYLJwMTzZaCECLQS5U.mft (raw, json)
Hash identifier: UZLwuDhrqrOhYNapfTdQNsQnaje5TJdqyPItntlcPVM=
Subject key identifier: F3:67:26:BE:7C:FC:10:29:C1:97:E2:F6:27:B1:4C:50:A6:6B:A2:5D
Authority key identifier: 17:D2:CC:9E:0B:81:86:B6:0B:27:03:13:CD:96:82:10:22:D0:4B:95
Certificate issuer: /CN=17d2cc9e0b8186b60b270313cd96821022d04b95
Certificate serial: 01964BFD8E131B637CDEBFB4B3A66B3E46AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
Manifest number: 040F
Signing time: Sat 19 Apr 2025 03:00:30 +0000
Manifest this update: Sat 19 Apr 2025 03:00:30 +0000
Manifest next update: Sun 20 Apr 2025 03:00:30 +0000
Files and hashes: 1: F9LMnguBhrYLJwMTzZaCECLQS5U.crl (hash: Bk+q8Z6xTCdauvgE5Gv1Y0qmmnpR3B8zB1Env0H0+1Y=)
2: uXgPf_GHZXRnXeYChGwQ6YgTY0A.roa (hash: O3rlazvN4WdAuuqeK4Ye7g2IFvV+XXKOscOrXA6JGjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 03:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:fd:8e:13:1b:63:7c:de:bf:b4:b3:a6:6b:3e:46:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d2cc9e0b8186b60b270313cd96821022d04b95
Validity
Not Before: Apr 19 03:00:30 2025 GMT
Not After : Apr 20 03:00:30 2025 GMT
Subject: CN=f36726be7cfc1029c197e2f627b14c50a66ba25d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f0:ae:a8:18:a2:28:3b:51:37:25:21:f1:70:
cc:a9:b4:07:63:ce:b9:02:8a:b5:52:96:ac:b4:f1:
c1:89:e3:20:61:9a:99:d1:19:85:22:ea:a0:79:d9:
c3:2c:9a:3f:3f:a0:f5:47:69:95:e6:67:c0:02:5a:
6d:f6:87:4b:36:77:12:4e:81:75:1f:86:f3:f8:8b:
85:7c:48:f5:b9:e0:aa:bf:9a:3b:96:bc:f8:aa:7c:
c5:82:5f:ba:27:cc:97:9f:0e:88:c5:b4:06:71:c9:
f9:3e:d5:18:5b:32:22:bd:8b:9f:c8:c6:12:c6:5b:
3f:f8:b7:c6:da:ba:42:8b:ec:d0:b7:a9:77:bc:f2:
6c:6b:20:3e:d5:b5:b4:c8:3b:54:02:89:bb:2f:08:
bd:2a:03:be:bc:ff:99:a9:1c:0b:00:29:6f:86:90:
16:15:3f:38:b3:68:f2:5e:09:d1:a0:63:34:47:8a:
62:f7:99:d7:da:f8:2c:6e:ff:0d:18:46:bc:12:d3:
ed:1a:d6:0a:c6:44:a4:f5:03:b0:26:80:d6:12:78:
18:69:bf:71:06:94:21:f1:57:20:82:0a:70:c0:3f:
89:22:ce:68:7c:5e:57:05:f3:10:a4:fc:24:01:ad:
f8:f2:42:a0:65:51:5c:64:85:82:09:f3:56:2f:12:
a8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:67:26:BE:7C:FC:10:29:C1:97:E2:F6:27:B1:4C:50:A6:6B:A2:5D
X509v3 Authority Key Identifier:
keyid:17:D2:CC:9E:0B:81:86:B6:0B:27:03:13:CD:96:82:10:22:D0:4B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:0d:56:98:dc:d4:dd:37:92:c7:5f:6c:eb:36:ee:02:28:f0:
7f:da:d2:8d:8a:d4:a1:b0:fe:da:3f:e2:0e:80:e6:89:a5:41:
4f:9d:60:be:f5:78:c1:dd:23:36:ed:6e:1b:b1:b0:ab:5a:2d:
ba:33:5e:52:05:d4:ea:52:78:a9:e5:90:f7:13:fa:52:f7:33:
28:ee:f9:90:b0:f5:1a:ce:4f:cd:d6:af:8e:d5:81:82:d4:a2:
24:41:41:bc:b9:85:fa:9c:3a:72:69:99:30:e9:9e:55:67:d9:
7e:2a:92:bc:e6:f6:d5:7b:3b:73:ab:a8:67:4b:d4:71:95:b4:
2f:e8:0e:7d:e4:23:a1:fe:1e:12:7a:5c:59:da:21:75:a9:93:
d5:8b:06:06:cb:85:8c:b1:ae:aa:ba:80:88:39:5d:ac:3d:fa:
0c:29:96:8d:cf:d2:e9:53:3e:a5:e7:0e:4c:57:95:ff:47:76:
10:81:4d:2f:22:83:47:e9:56:1a:58:b0:db:fa:51:9c:8f:ac:
ef:18:41:c5:79:e8:50:a0:a4:cc:81:69:90:5f:f0:e3:4c:94:
ad:72:83:df:cc:9b:69:bf:53:29:d6:0d:98:62:90:cb:39:a4:
3d:48:7f:b2:65:02:e6:96:a6:c2:da:21:74:5c:34:6a:b0:bb:
da:b8:f7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:07:16 2025 by rpki-client