Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft
File: 17tVI2VJnAeu00tohPWy6TgOvuE.mft (raw, json)
Hash identifier: BlHO9KNgB3Ul6zw7bg9O5ll5UL+4xdRUAy/o/WyR35s=
Subject key identifier: B8:F4:F1:4A:BF:68:F5:3A:C7:D0:FC:40:79:AD:C3:2F:D3:FE:56:D7
Authority key identifier: D7:BB:55:23:65:49:9C:07:AE:D3:4B:68:84:F5:B2:E9:38:0E:BE:E1
Certificate issuer: /CN=d7bb552365499c07aed34b6884f5b2e9380ebee1
Certificate serial: 0197B77C56EBFC0D4A6640140A108460747B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft
Manifest number: 0C9F
Signing time: Sat 28 Jun 2025 17:01:08 +0000
Manifest this update: Sat 28 Jun 2025 17:01:08 +0000
Manifest next update: Sun 29 Jun 2025 17:01:08 +0000
Files and hashes: 1: 17tVI2VJnAeu00tohPWy6TgOvuE.crl (hash: R6MhpKHsF2anmv1fKxQ9blcBv1vgXMi0HZL8yl/DFz4=)
2: ubg6NcZsNifAT3uvdzYOJRbZDdo.roa (hash: me6K2gKBLKvg7We5se7qwT6OEScp04Vg/6jm+AETwcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:56:eb:fc:0d:4a:66:40:14:0a:10:84:60:74:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7bb552365499c07aed34b6884f5b2e9380ebee1
Validity
Not Before: Jun 28 17:01:08 2025 GMT
Not After : Jun 29 17:01:08 2025 GMT
Subject: CN=b8f4f14abf68f53ac7d0fc4079adc32fd3fe56d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:39:a9:7c:28:7b:2d:60:db:f1:62:92:16:29:
61:3c:2b:71:d5:c5:9a:af:c4:76:4a:9b:d9:14:fd:
f6:32:cd:0a:e7:e8:97:1a:81:1a:68:f5:a4:5a:45:
68:be:f0:37:c5:57:b7:6b:1b:7a:17:90:f1:db:79:
b1:1d:6d:58:54:4f:8e:93:90:b7:16:4b:2f:4c:20:
51:b3:e0:e0:98:66:0c:a2:0e:a7:9b:d3:ac:de:38:
19:7c:d3:ed:ac:27:b8:ae:d8:b3:c7:11:e0:e6:f5:
ea:fa:66:88:c8:5a:5d:5e:c3:19:72:23:e2:e9:d0:
09:10:2f:2b:5f:a2:e1:3f:5d:de:ed:fd:1e:93:54:
55:21:ce:e6:fa:66:8c:c2:d5:26:f2:10:4a:19:ff:
31:88:25:6a:65:c5:8a:d5:3d:5f:9c:51:9f:11:0e:
cb:fc:9a:02:1e:cf:08:71:0b:9f:0e:eb:05:86:30:
5d:1c:41:80:9e:c8:ea:59:ab:e5:2a:79:7b:ce:c0:
37:5a:92:ad:c6:d7:ff:0e:78:e5:80:93:cf:72:5d:
a4:f7:af:07:d7:3e:15:42:96:85:8e:e3:56:5f:8d:
26:8c:8d:56:ff:81:02:45:d3:c3:88:63:42:f1:7e:
fb:03:19:65:5d:c2:dc:c4:f1:d2:71:da:6f:2f:f2:
0b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F4:F1:4A:BF:68:F5:3A:C7:D0:FC:40:79:AD:C3:2F:D3:FE:56:D7
X509v3 Authority Key Identifier:
keyid:D7:BB:55:23:65:49:9C:07:AE:D3:4B:68:84:F5:B2:E9:38:0E:BE:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:df:70:5a:b3:3c:7a:d1:95:89:cb:4d:1c:f9:69:45:05:5c:
86:15:79:b3:e7:c4:bb:3a:c7:c4:67:5a:b2:e5:ff:65:c2:77:
3b:62:4b:cf:72:1a:98:66:58:ef:6c:6f:55:6f:50:06:c7:3d:
c0:a8:cb:5c:6b:2d:c1:6c:39:13:28:37:26:dd:fe:11:bc:72:
a0:a5:ce:a9:1f:72:69:d0:31:6e:74:11:02:3f:94:b6:27:6c:
64:cb:19:a9:52:6c:07:98:e6:f3:46:f2:51:ea:2a:13:7d:f7:
4f:e1:ab:61:43:3b:b3:f3:2e:9b:9c:ce:08:9c:12:92:d1:79:
a7:0f:bf:38:35:0a:e0:8a:b8:46:ef:6d:df:f0:55:a6:0a:95:
d0:0e:0c:42:34:78:3c:ed:78:0f:00:34:a8:79:b4:90:3e:84:
a1:48:db:52:cd:be:05:ee:ea:d4:3b:c1:c8:d8:82:a9:7c:dc:
1f:b6:55:3d:9c:d2:0c:22:2e:be:fd:ec:23:55:6d:ea:c1:67:
d4:e9:a2:5d:a6:7d:e0:73:02:ae:1b:0d:93:c6:3b:34:81:36:
66:db:27:3f:dd:c8:67:8f:27:bc:37:c0:2c:22:46:5b:5a:42:
4e:63:ae:e0:b1:0e:02:4b:94:33:b4:ff:e1:aa:93:29:63:36:
fd:33:82:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:11 2025 by rpki-client