Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft
File: F42BIe9wTXqXcMPs4eIFYUeQrDk.mft (raw, json)
Hash identifier: 1FncC74gss+8OgFHKWPwdOEnjghTUbIEepqgariSgMs=
Subject key identifier: 19:E9:9B:AF:94:B1:B1:BB:AD:3A:78:73:13:00:DE:76:61:E6:91:DE
Authority key identifier: 17:8D:81:21:EF:70:4D:7A:97:70:C3:EC:E1:E2:05:61:47:90:AC:39
Certificate issuer: /CN=178d8121ef704d7a9770c3ece1e205614790ac39
Certificate serial: 01975C4A084B723418EFB3D8130AC71C1F42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F42BIe9wTXqXcMPs4eIFYUeQrDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft
Manifest number: 04DE
Signing time: Wed 11 Jun 2025 00:00:45 +0000
Manifest this update: Wed 11 Jun 2025 00:00:45 +0000
Manifest next update: Thu 12 Jun 2025 00:00:45 +0000
Files and hashes: 1: F42BIe9wTXqXcMPs4eIFYUeQrDk.crl (hash: /yyvG6rf9fq3TXg3xPNe7hMHtFIXWTaFQWyaeibjMGU=)
2: tQhQQED_2rbtgmsDxQqfycOcoj4.roa (hash: 7QkytynjV9fTl5bHPu2TPRokrjL3zXWtRN7glg7QEBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/F42BIe9wTXqXcMPs4eIFYUeQrDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:4a:08:4b:72:34:18:ef:b3:d8:13:0a:c7:1c:1f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=178d8121ef704d7a9770c3ece1e205614790ac39
Validity
Not Before: Jun 11 00:00:45 2025 GMT
Not After : Jun 12 00:00:45 2025 GMT
Subject: CN=19e99baf94b1b1bbad3a78731300de7661e691de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:19:a9:3f:8b:25:40:15:8f:14:ee:84:5a:4e:
11:0e:90:f2:98:4e:6d:b2:31:6a:0b:85:77:e6:9b:
16:21:29:79:26:96:26:9f:a5:9b:e3:c5:18:1c:b6:
e7:76:e5:9b:53:30:fc:6f:9a:fd:eb:56:e4:82:87:
5b:c6:4c:5b:ce:c1:39:c6:7b:60:49:e3:97:7f:c8:
a8:6b:3a:f1:f6:b1:dd:ce:39:e7:de:d3:1f:a5:0a:
74:86:ab:92:3e:5a:be:51:ac:fc:76:47:3a:fa:e4:
bc:93:d9:7f:21:e6:00:a1:c4:db:61:b6:42:d3:5e:
6b:be:40:1d:54:56:70:ac:b3:aa:72:58:23:bd:d2:
12:86:c0:04:67:e8:6f:24:0c:d2:d5:4f:04:5c:a9:
00:75:cc:d0:6f:91:40:22:6a:c6:11:a9:21:76:b9:
8b:f7:4b:95:80:2e:8c:00:6b:6c:c7:63:18:8c:2d:
2a:8e:19:7f:fd:c3:39:9b:38:77:16:c8:5a:16:12:
8b:d8:64:7a:1f:83:53:3c:e6:68:b2:cd:e4:dd:4d:
86:2e:50:d3:cd:57:c8:95:65:dd:ad:7e:67:96:d9:
97:30:04:c9:68:9b:90:0d:e8:23:21:f5:d9:f4:23:
6c:ec:3b:66:01:d2:b4:fb:af:4f:b5:ca:43:29:a0:
cf:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E9:9B:AF:94:B1:B1:BB:AD:3A:78:73:13:00:DE:76:61:E6:91:DE
X509v3 Authority Key Identifier:
keyid:17:8D:81:21:EF:70:4D:7A:97:70:C3:EC:E1:E2:05:61:47:90:AC:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F42BIe9wTXqXcMPs4eIFYUeQrDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ec:e4:df:c8:b6:27:91:78:42:b6:34:d6:b4:a6:65:ef:e5:
92:55:9a:c0:e5:b2:fd:cc:f9:ea:48:b6:0b:b1:35:5b:ce:ae:
47:a7:d3:06:fd:5b:e2:49:c5:8c:60:a6:60:5a:1c:92:c8:e1:
71:86:29:2a:d9:9f:db:a3:a4:d7:a9:35:ce:90:b4:55:11:f4:
f9:40:33:70:77:f4:25:ab:93:04:15:52:59:ce:48:73:71:52:
1f:54:c8:0c:2b:dd:dd:9e:42:08:1a:5f:fe:c0:ae:cc:68:a9:
fe:dd:0e:72:68:0b:43:49:e8:2a:c8:a1:f7:5b:84:16:45:d5:
cf:6a:02:a2:74:c2:7b:6a:63:8c:79:31:5d:ce:4e:d3:b7:3e:
05:3a:0c:02:9a:f5:41:0d:87:c9:8e:09:98:ae:13:99:b7:4a:
84:5a:09:cd:c0:a8:3c:f5:3a:88:2e:c6:b8:02:05:7d:f1:a4:
6a:f5:2f:7b:6a:20:39:31:ac:45:9e:e0:31:aa:7d:b8:b8:96:
cf:8d:bc:2e:9d:55:0d:84:07:85:42:0c:86:bf:93:84:16:b3:
0e:09:b1:14:84:fe:2f:fe:48:22:6e:db:db:c7:20:b3:c7:0a:
3e:a0:ef:ae:9a:a2:51:00:cc:97:54:78:68:be:97:a7:46:24:
da:4a:58:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 05:48:53 2025 by rpki-client