Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.mft
File: F84IIXrG5mPAjdFhj0mtpOvk_tw.mft (raw, json)
Hash identifier: UdbghSYHBeVLl6Lw6LEG6fI4cARIEBtNe3FDKNy1KrM=
Subject key identifier: 64:6F:42:43:B6:7A:93:5B:62:45:E7:32:6D:A6:CF:CB:34:B8:D6:C7
Authority key identifier: 17:CE:08:21:7A:C6:E6:63:C0:8D:D1:61:8F:49:AD:A4:EB:E4:FE:DC
Certificate issuer: /CN=17ce08217ac6e663c08dd1618f49ada4ebe4fedc
Certificate serial: 0197B6A05B2080CBA354288C26E30A17823C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F84IIXrG5mPAjdFhj0mtpOvk_tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.mft
Manifest number: 0D04
Signing time: Sat 28 Jun 2025 13:00:51 +0000
Manifest this update: Sat 28 Jun 2025 13:00:51 +0000
Manifest next update: Sun 29 Jun 2025 13:00:51 +0000
Files and hashes: 1: F84IIXrG5mPAjdFhj0mtpOvk_tw.crl (hash: vLNLDYGFHwgy5WADWpM+8b4Ia5HMRhxXjbLofftyAzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F84IIXrG5mPAjdFhj0mtpOvk_tw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:5b:20:80:cb:a3:54:28:8c:26:e3:0a:17:82:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17ce08217ac6e663c08dd1618f49ada4ebe4fedc
Validity
Not Before: Jun 28 13:00:51 2025 GMT
Not After : Jun 29 13:00:51 2025 GMT
Subject: CN=646f4243b67a935b6245e7326da6cfcb34b8d6c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9b:a5:a7:60:56:9e:79:75:0f:6f:7e:3f:ac:
2f:50:ae:46:ad:bd:f6:c2:9c:a6:1e:86:71:27:7c:
7c:54:50:2b:cf:c4:d1:20:b6:fb:4c:10:8e:da:96:
64:13:99:90:b0:93:88:66:66:67:7f:d7:d2:42:9c:
92:04:e5:0e:74:d9:27:c0:4f:f3:1d:db:2d:84:6a:
6e:eb:b8:15:da:0e:50:89:35:ac:0c:8b:44:86:8f:
50:bf:32:20:e5:14:75:f2:63:52:2b:5a:64:e1:64:
f1:ea:08:ca:da:4e:8c:89:2c:92:56:7a:cf:96:32:
86:60:ee:98:f9:d1:6f:13:58:a6:0a:b0:cc:2e:cf:
e5:e3:a8:67:0d:fe:36:b1:45:f0:e2:6a:09:b0:ce:
c5:ef:65:3c:67:4e:46:8a:88:76:d8:9f:57:3c:77:
31:a7:d6:6c:c9:f7:ed:7e:c5:1f:8a:d3:81:c6:92:
25:e1:c9:8d:3f:e1:65:41:81:48:5b:7f:a6:4b:46:
4d:41:e7:95:a1:09:c9:d5:ce:2e:fd:5d:0b:86:d1:
5d:5b:23:05:03:ed:e0:84:dc:f5:2f:68:86:9c:8d:
84:5f:9a:6a:a3:b6:a6:d2:d4:72:8f:84:b0:b8:4c:
73:89:c3:f4:70:b2:aa:bd:5d:02:d7:ea:b6:95:f3:
7e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:6F:42:43:B6:7A:93:5B:62:45:E7:32:6D:A6:CF:CB:34:B8:D6:C7
X509v3 Authority Key Identifier:
keyid:17:CE:08:21:7A:C6:E6:63:C0:8D:D1:61:8F:49:AD:A4:EB:E4:FE:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F84IIXrG5mPAjdFhj0mtpOvk_tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:5e:44:b4:a9:0e:d0:56:e5:e6:31:81:bd:d4:39:69:84:3b:
5a:1b:d2:cd:1b:0d:03:87:1f:c1:8c:ed:2c:0d:5d:f2:7a:f6:
76:9a:7d:33:86:d7:cc:32:72:27:f2:c9:eb:dd:67:a8:e9:08:
00:6c:06:30:28:3a:35:dc:3f:3c:b4:31:a8:d9:4a:aa:d5:66:
dd:67:40:52:6b:d9:f3:3e:54:67:cd:eb:95:33:42:65:1a:46:
9d:bc:29:27:17:03:9b:f4:58:a5:9e:91:71:e0:ce:f7:e8:67:
39:58:3d:3c:c2:e6:0b:f3:db:12:b1:08:33:19:b9:b3:13:4b:
aa:57:fe:87:ee:9c:c0:aa:89:a5:fb:75:ec:1b:68:ed:be:6d:
19:b5:7b:35:0f:3e:d7:56:ed:57:55:16:40:d4:4f:2f:c5:7d:
be:2c:ae:a1:e7:09:70:44:71:ce:26:17:37:89:0b:9d:12:27:
71:c3:6a:63:9e:8c:b6:34:01:da:7d:3b:4d:2d:78:43:e5:40:
f5:60:c3:29:a9:65:f5:71:c2:f5:1b:2b:0b:51:f0:9a:56:2d:
2f:ba:3a:0b:31:50:85:fa:f1:90:7d:cb:f3:ca:99:d2:da:b7:
7a:9e:04:b7:06:9a:32:2b:14:91:ed:6c:89:f4:6d:e5:dd:f6:
f1:f2:1a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:45:21 2025 by rpki-client