Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft
File: 17tVI2VJnAeu00tohPWy6TgOvuE.mft (raw, json)
Hash identifier: ufvgD0ZUmMXIvEtSMReODXtx5M+sXDkDoIpAqW5D124=
Subject key identifier: FB:42:DE:D2:7E:BE:A8:99:D6:E1:C4:55:94:35:B9:98:9C:9E:EB:DD
Authority key identifier: D7:BB:55:23:65:49:9C:07:AE:D3:4B:68:84:F5:B2:E9:38:0E:BE:E1
Certificate issuer: /CN=d7bb552365499c07aed34b6884f5b2e9380ebee1
Certificate serial: 0198D54DC1D6C1B2620082C061DD6B1AD46F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft
Manifest number: 0D33
Signing time: Sat 23 Aug 2025 05:01:39 +0000
Manifest this update: Sat 23 Aug 2025 05:01:39 +0000
Manifest next update: Sun 24 Aug 2025 05:01:39 +0000
Files and hashes: 1: 17tVI2VJnAeu00tohPWy6TgOvuE.crl (hash: GAtmwAfhvmUui6NbwH9xfXKsTR+S7T/P/KJLuDJaCXY=)
2: ubg6NcZsNifAT3uvdzYOJRbZDdo.roa (hash: me6K2gKBLKvg7We5se7qwT6OEScp04Vg/6jm+AETwcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:c1:d6:c1:b2:62:00:82:c0:61:dd:6b:1a:d4:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7bb552365499c07aed34b6884f5b2e9380ebee1
Validity
Not Before: Aug 23 05:01:39 2025 GMT
Not After : Aug 24 05:01:39 2025 GMT
Subject: CN=fb42ded27ebea899d6e1c4559435b9989c9eebdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:50:b2:c1:40:13:0d:3c:21:7a:d3:b9:0f:aa:
82:6c:22:e9:0f:9c:48:24:a9:d2:8a:0a:88:f8:3f:
70:64:5c:aa:5a:e4:2c:14:cc:1d:d8:3a:47:02:c9:
46:5c:a1:2c:20:ab:2a:ae:29:08:dd:42:4c:f0:57:
d3:a7:b9:be:6b:74:54:59:cf:9e:af:3d:b2:2f:09:
47:50:00:44:fb:eb:c6:33:e0:48:42:d7:a2:50:3b:
8d:22:4d:4d:ef:8e:35:ac:39:aa:9b:92:d9:72:60:
d3:5f:06:69:26:0a:ac:24:d8:fc:64:a8:b2:ca:8e:
b1:b7:c3:b8:0a:26:a3:41:6a:a7:2b:e7:37:4d:94:
5e:99:82:68:c4:9c:ad:fe:7c:51:bf:32:19:4f:0b:
72:0b:ea:10:16:bd:51:c3:07:1e:81:d9:a8:25:53:
7a:45:d9:63:92:12:72:58:f8:b4:ea:a6:e3:0c:bf:
3f:b0:d7:62:5a:da:5c:5e:59:94:19:1e:a9:5e:ba:
c1:f4:e5:ec:1d:16:70:92:14:80:8e:27:0e:63:61:
3b:dd:26:13:4c:4e:d0:ef:9a:d7:f2:50:fd:bf:81:
99:3f:3c:27:5f:3d:59:60:35:bd:21:ef:4d:89:f7:
ff:66:de:8e:28:cd:4a:24:f3:ec:69:03:99:54:a5:
39:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:42:DE:D2:7E:BE:A8:99:D6:E1:C4:55:94:35:B9:98:9C:9E:EB:DD
X509v3 Authority Key Identifier:
keyid:D7:BB:55:23:65:49:9C:07:AE:D3:4B:68:84:F5:B2:E9:38:0E:BE:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:17:f6:c9:b6:00:46:25:58:0f:37:15:16:69:89:22:3c:59:
c9:b8:24:31:c9:29:8b:0d:a5:d4:b7:aa:a8:d3:f2:78:f9:ad:
d0:a7:15:6d:0a:ce:20:41:f8:ab:5e:9b:97:8a:1c:aa:08:6d:
77:5e:0c:52:ae:0e:65:01:c1:f2:3c:1d:4b:9d:3e:b8:a9:c8:
52:89:af:6c:8f:32:9c:c2:07:de:a7:ee:ea:20:0b:71:25:8b:
06:de:11:80:d3:4a:52:9f:66:5f:dd:86:f7:d7:7d:04:73:97:
58:41:94:bb:1e:e0:72:40:85:f2:b2:8b:22:0d:ff:4c:b7:e6:
f5:9d:a1:ea:13:af:ae:c9:92:17:e9:3c:66:d2:15:0a:8c:76:
bd:a9:cb:6d:d8:b6:53:3e:a9:f6:94:93:5a:09:d8:aa:f2:45:
37:09:6d:40:22:a5:56:37:14:d4:1f:db:f1:86:3c:f9:41:ea:
dc:49:3a:ad:8f:8b:96:a6:61:1a:82:85:4b:77:cc:c1:24:36:
19:ea:eb:08:c4:ff:b0:32:6b:bf:d2:98:5c:f8:47:9a:47:cd:
b2:8b:fa:a4:52:6f:3c:e5:c2:73:09:b2:be:ca:3c:33:2b:81:
d6:40:d9:34:40:1f:8d:2e:c2:09:17:56:93:0e:a5:4f:74:6e:
e5:14:ac:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:40 2025 by rpki-client