Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/a5832b-789a-40bf-a712-628d950137f2/1/F9elKrbseLxKdZt8RmMqo-Jgsug.mft
File: F9elKrbseLxKdZt8RmMqo-Jgsug.mft (raw, json)
Hash identifier: RXGHTZuZVWxySq9P/0OoRDB3DfUXaoMOfH9vGWRg+EQ=
Subject key identifier: FF:2F:B9:C8:8A:0A:82:B6:A8:F5:E3:EF:BD:AA:F6:F2:3B:59:9F:34
Authority key identifier: 17:D7:A5:2A:B6:EC:78:BC:4A:75:9B:7C:46:63:2A:A3:E2:60:B2:E8
Certificate issuer: /CN=17d7a52ab6ec78bc4a759b7c46632aa3e260b2e8
Certificate serial: 019922554878D4DF8188AF1CFFA697137C08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9elKrbseLxKdZt8RmMqo-Jgsug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/a5832b-789a-40bf-a712-628d950137f2/1/F9elKrbseLxKdZt8RmMqo-Jgsug.mft
Manifest number: 36
Signing time: Sun 07 Sep 2025 04:00:38 +0000
Manifest this update: Sun 07 Sep 2025 04:00:38 +0000
Manifest next update: Mon 08 Sep 2025 04:00:38 +0000
Files and hashes: 1: F9elKrbseLxKdZt8RmMqo-Jgsug.crl (hash: ZnIK1TDdnCu2L6SEjhsRJBT0VNhPl5wVcZp5eJdJJuY=)
2: sbMYQYJxwfNPp6440gILA9mzbx0.roa (hash: RnVE2MTd07RWpWjHS41qs+TCVp95W8O0zBW8ou5pEzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/a5832b-789a-40bf-a712-628d950137f2/1/F9elKrbseLxKdZt8RmMqo-Jgsug.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/a5832b-789a-40bf-a712-628d950137f2/1/F9elKrbseLxKdZt8RmMqo-Jgsug.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9elKrbseLxKdZt8RmMqo-Jgsug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:48:78:d4:df:81:88:af:1c:ff:a6:97:13:7c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d7a52ab6ec78bc4a759b7c46632aa3e260b2e8
Validity
Not Before: Sep 7 04:00:38 2025 GMT
Not After : Sep 8 04:00:38 2025 GMT
Subject: CN=ff2fb9c88a0a82b6a8f5e3efbdaaf6f23b599f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1a:7c:59:3a:2a:2a:4d:8e:b0:47:e5:d8:cc:
86:12:7c:00:7c:f1:16:53:ec:3d:fa:ef:fa:b3:e7:
a7:5f:b3:91:36:25:59:7d:a6:83:dd:7d:23:9a:88:
43:f3:0b:79:45:0f:a0:e4:f7:30:3d:d3:88:82:52:
55:29:e7:26:e6:25:58:f5:59:00:86:65:34:5c:ef:
04:27:5a:3c:c8:31:13:29:5c:ff:5b:20:8d:1e:f4:
11:00:8a:46:6c:25:a8:90:b0:dc:e4:f9:0e:4f:74:
53:5b:57:34:0d:87:61:45:c0:47:a8:68:94:66:35:
d1:7d:2b:6b:e2:90:2f:6c:4e:20:6f:c4:48:bb:13:
4f:61:da:20:62:bf:14:b5:27:d2:a1:fb:b3:23:f8:
37:42:0e:aa:7a:fe:04:b7:ca:75:b8:27:9e:21:e3:
d2:1f:a5:2c:b1:e7:70:e3:7d:7f:eb:ae:1d:b1:20:
e9:33:79:0f:ca:ce:7e:fa:25:38:fd:ae:a4:40:28:
dc:53:5e:89:0a:c6:7f:81:e4:c8:f8:14:d5:b1:7d:
e8:4b:9c:79:d8:4e:2b:02:fd:f2:d5:49:bf:8f:42:
9d:f1:45:ad:25:73:d7:9f:61:c9:3a:36:45:fa:9c:
4d:75:fb:f9:1d:87:9f:8f:74:30:c6:cb:57:17:a6:
6d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:2F:B9:C8:8A:0A:82:B6:A8:F5:E3:EF:BD:AA:F6:F2:3B:59:9F:34
X509v3 Authority Key Identifier:
keyid:17:D7:A5:2A:B6:EC:78:BC:4A:75:9B:7C:46:63:2A:A3:E2:60:B2:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9elKrbseLxKdZt8RmMqo-Jgsug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a5832b-789a-40bf-a712-628d950137f2/1/F9elKrbseLxKdZt8RmMqo-Jgsug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a5832b-789a-40bf-a712-628d950137f2/1/F9elKrbseLxKdZt8RmMqo-Jgsug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:db:75:7d:ad:c9:49:35:1a:34:73:1d:5b:19:e1:26:5a:5f:
e9:41:6b:46:22:eb:09:85:a0:f3:bc:77:df:76:88:32:a9:e8:
3f:b3:7e:de:97:8e:cd:8f:49:ad:68:49:74:d9:c9:55:e8:16:
15:f2:4c:b4:35:05:cf:51:39:2a:aa:bf:63:49:c2:61:54:49:
a5:46:e3:77:4e:ca:94:12:44:78:df:95:10:a2:bc:b5:ea:05:
cb:e5:86:04:e7:b3:6a:9d:69:c7:1a:e0:dd:f7:ad:79:f8:a8:
4c:e8:61:62:10:c9:6f:cd:cd:5f:df:b9:ba:1c:ec:09:23:e9:
bf:89:c7:25:58:4f:e9:90:87:ea:b7:2d:94:ed:8b:36:a5:de:
9d:69:38:46:10:e3:36:7e:d2:92:00:07:4b:67:8c:7e:65:41:
d7:1b:05:f6:00:97:2f:ee:5a:de:dc:5c:fd:6c:a8:15:a1:47:
d4:98:0c:81:75:36:49:4d:59:86:80:ea:a7:48:c2:de:ee:de:
87:d3:77:6e:3b:51:05:af:6c:0e:09:18:75:7c:e1:40:10:1d:
c5:3b:71:8e:f1:28:43:5e:61:8d:df:47:45:13:3c:67:7b:62:
6b:41:af:e5:21:da:40:f9:ce:03:b4:25:9a:80:1f:19:0e:82:
2b:67:14:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:08 2025 by rpki-client