Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.mft
File: F6yAsO71cIxkOQVF0acTkCRLbRs.mft (raw, json)
Hash identifier: vhjEQA6fekNZSYu/k2Xhr2g/mYCehD2E9Yur/krWqnU=
Subject key identifier: 40:B4:0F:01:06:59:AD:50:30:CE:4F:4C:FA:5F:95:B7:30:DB:E5:E1
Authority key identifier: 17:AC:80:B0:EE:F5:70:8C:64:39:05:45:D1:A7:13:90:24:4B:6D:1B
Certificate issuer: /CN=17ac80b0eef5708c64390545d1a71390244b6d1b
Certificate serial: 019922FA57BB275B5A1D66D7C64B6D2A62A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F6yAsO71cIxkOQVF0acTkCRLbRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.mft
Manifest number: 139A
Signing time: Sun 07 Sep 2025 07:00:55 +0000
Manifest this update: Sun 07 Sep 2025 07:00:55 +0000
Manifest next update: Mon 08 Sep 2025 07:00:55 +0000
Files and hashes: 1: F6yAsO71cIxkOQVF0acTkCRLbRs.crl (hash: zLZTsoKojMqKpWFAgsbSLe3CZAuxUezRz5UfAhBe7G0=)
2: zSUjlVA_3mzAMpyrhKZAaPLaNJs.roa (hash: 72zL3nwgCvbu+myGvWOjXCnDMo56NxzjVOkIDgx8eQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/F6yAsO71cIxkOQVF0acTkCRLbRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:57:bb:27:5b:5a:1d:66:d7:c6:4b:6d:2a:62:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17ac80b0eef5708c64390545d1a71390244b6d1b
Validity
Not Before: Sep 7 07:00:55 2025 GMT
Not After : Sep 8 07:00:55 2025 GMT
Subject: CN=40b40f010659ad5030ce4f4cfa5f95b730dbe5e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7c:22:15:d9:b2:4c:92:40:64:24:a9:22:2d:
90:79:ae:50:17:8d:0a:2e:74:da:1b:bd:2e:40:dc:
ed:17:a3:b9:c7:4f:d7:cc:42:1f:e3:ec:f0:07:bb:
ae:1d:4d:59:8c:2c:11:54:73:c3:88:7f:4f:f7:60:
1f:1b:50:6d:d1:0c:b1:6f:f0:2c:85:1f:eb:84:d2:
9a:0f:36:3f:af:65:3c:ac:4b:ef:ee:7a:d5:0f:01:
ba:b5:34:68:50:8a:34:db:a2:e0:ea:7d:a5:a8:56:
80:8d:24:a1:2a:2f:ea:fd:05:76:b4:8a:de:c0:75:
52:9c:14:a6:6f:4d:86:58:ce:d3:72:2b:8a:03:bf:
2b:3f:34:12:c2:e2:3b:91:bf:c8:ea:5d:4a:32:59:
d5:88:ef:47:d5:e4:84:e5:98:76:8e:35:93:10:52:
f3:8e:22:bd:be:e2:49:7f:db:61:88:9e:31:dc:2e:
4b:f4:43:c7:49:cb:10:4f:84:75:93:a0:69:2d:84:
d7:88:fe:40:e4:a0:85:f0:8b:b2:00:55:8b:44:53:
71:1c:27:16:5a:18:f6:22:9d:c9:47:c1:3d:55:d5:
d9:85:de:c0:03:a1:68:ed:d6:06:d9:0f:e3:e1:25:
d7:0d:7e:14:db:f7:a0:b1:ed:8f:90:5b:94:36:18:
f4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B4:0F:01:06:59:AD:50:30:CE:4F:4C:FA:5F:95:B7:30:DB:E5:E1
X509v3 Authority Key Identifier:
keyid:17:AC:80:B0:EE:F5:70:8C:64:39:05:45:D1:A7:13:90:24:4B:6D:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6yAsO71cIxkOQVF0acTkCRLbRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:94:f0:87:51:f3:3f:12:14:d2:c2:84:92:9b:3a:d4:3a:d8:
85:a0:a4:80:b4:3f:16:4f:84:8c:40:f0:b6:e7:aa:d6:c7:fb:
98:83:37:41:12:0c:98:03:48:cc:62:ab:5f:a6:05:c6:b7:47:
92:9a:e0:e8:66:31:1e:a0:46:70:f4:d3:92:f6:4b:6d:28:37:
e6:d7:2a:cf:b2:36:97:7e:59:1c:e6:43:84:ea:fd:ad:3c:4b:
4e:44:1b:bb:bf:25:00:6b:19:19:fc:cb:0a:82:86:ad:99:5c:
c2:d7:a1:7a:32:05:29:07:0d:30:17:82:9a:d0:8e:1c:86:3f:
c6:69:80:45:4f:05:3a:94:64:fa:b5:38:55:9a:79:4a:d6:5b:
b5:07:7e:25:cb:d7:63:7f:26:1e:2e:45:f9:7c:6e:9d:15:5b:
fb:27:df:fc:9f:a9:cc:23:c2:41:ea:db:6b:71:89:c5:3d:7d:
4d:9d:de:09:49:22:7a:24:58:94:31:94:ca:3b:ad:33:d0:47:
89:d7:9b:4d:b5:7e:0a:b2:b8:28:a6:2c:ec:f3:df:5c:b8:bf:
ca:38:08:88:d1:89:24:0b:4f:2c:8f:14:78:09:10:54:2b:71:
9a:27:cc:c7:61:4b:84:52:c6:71:e2:ef:88:91:49:44:28:5c:
f9:73:17:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:34:14 2025 by rpki-client