Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.mft
File: F84IIXrG5mPAjdFhj0mtpOvk_tw.mft (raw, json)
Hash identifier: bfFJVBOJhd3+STUWTgMLtC6sUqFDguN/gFZ8qqgsNqM=
Subject key identifier: F9:36:E1:A3:CD:89:DD:B9:6E:76:89:F4:FC:0C:37:60:15:75:0B:D1
Authority key identifier: 17:CE:08:21:7A:C6:E6:63:C0:8D:D1:61:8F:49:AD:A4:EB:E4:FE:DC
Certificate issuer: /CN=17ce08217ac6e663c08dd1618f49ada4ebe4fedc
Certificate serial: 01984965D1A351BE4A29065466383282B86C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F84IIXrG5mPAjdFhj0mtpOvk_tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.mft
Manifest number: 0D50
Signing time: Sun 27 Jul 2025 01:01:06 +0000
Manifest this update: Sun 27 Jul 2025 01:01:06 +0000
Manifest next update: Mon 28 Jul 2025 01:01:06 +0000
Files and hashes: 1: F84IIXrG5mPAjdFhj0mtpOvk_tw.crl (hash: 9mgywq2eOtebRBubrcBqgTAZIpiXv5nXyM9IaYx3Gik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F84IIXrG5mPAjdFhj0mtpOvk_tw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:d1:a3:51:be:4a:29:06:54:66:38:32:82:b8:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17ce08217ac6e663c08dd1618f49ada4ebe4fedc
Validity
Not Before: Jul 27 01:01:06 2025 GMT
Not After : Jul 28 01:01:06 2025 GMT
Subject: CN=f936e1a3cd89ddb96e7689f4fc0c376015750bd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bf:16:9d:e6:1d:a5:e8:c8:54:01:c4:c0:cd:
ec:17:c1:aa:3d:35:2b:c1:7f:06:0f:d3:96:c2:a0:
a5:91:7e:35:9b:24:8b:51:72:0c:a6:2c:ee:75:51:
b0:06:a3:ff:66:e3:12:40:47:b9:f7:c6:08:e7:03:
d7:08:ef:da:b2:2b:47:cb:5c:1e:57:b7:34:9d:c8:
35:c7:b7:0c:1d:02:83:3c:7b:80:15:0a:ae:e5:2d:
50:15:eb:28:a2:c9:49:fb:71:77:56:1a:83:64:53:
a6:28:16:32:e0:85:71:c1:6f:68:b7:e2:28:20:00:
4b:d2:2d:32:04:eb:f4:64:7f:fe:05:71:86:cd:61:
bf:96:12:0b:46:62:47:34:4e:a9:62:2f:83:c8:f8:
bb:85:83:12:f6:3a:6b:7f:ef:e9:47:0e:6f:6e:4a:
25:81:6d:67:13:40:09:f5:5d:93:91:dc:4c:a7:59:
45:6e:f3:9c:89:d1:71:04:a8:3e:4c:6b:ea:a6:9c:
2e:15:da:82:2c:d4:1a:47:9e:f3:92:ff:5d:cc:e6:
30:d8:79:46:d7:06:2e:3a:05:69:a8:68:00:6d:c7:
1f:c7:34:d9:b0:24:4b:c7:79:2a:58:71:3f:e6:62:
bd:99:2d:6f:66:cf:ac:e2:bd:96:f1:a4:71:da:3d:
90:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:36:E1:A3:CD:89:DD:B9:6E:76:89:F4:FC:0C:37:60:15:75:0B:D1
X509v3 Authority Key Identifier:
keyid:17:CE:08:21:7A:C6:E6:63:C0:8D:D1:61:8F:49:AD:A4:EB:E4:FE:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F84IIXrG5mPAjdFhj0mtpOvk_tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:2f:b2:a6:d2:47:ac:c9:61:07:44:bd:b4:17:38:4d:e4:5e:
a4:dc:a3:9e:90:12:b0:85:6a:b5:ca:6b:d0:cc:c1:0e:24:7a:
20:29:9e:ff:e1:e6:a6:8c:2f:8a:f7:6a:3f:68:1f:6f:c8:71:
a3:69:fa:50:8a:7e:d0:a4:0e:09:6f:3c:6a:5e:e9:f8:d2:11:
69:43:05:ae:89:6f:80:b7:99:c0:45:38:9b:a7:a2:a1:37:f5:
f3:83:ab:96:c2:b7:ca:45:3d:50:38:3b:4e:c5:c9:0f:52:bb:
ff:66:d2:89:e7:23:0f:f5:95:14:2c:dc:1f:bf:21:c0:db:ab:
55:9c:b0:5e:b8:06:97:a8:e3:7c:17:5e:7c:e1:72:89:70:1d:
6d:7c:c8:eb:a7:97:bf:6d:ac:b0:6b:18:16:e7:58:78:18:b6:
4c:13:57:51:55:97:21:3a:fb:e5:ae:b9:bb:80:84:cb:c2:b5:
33:80:cd:ee:44:bf:7f:ee:af:7c:ea:2f:7b:07:c2:16:f8:6f:
68:a4:58:80:5c:5d:64:5c:0c:cf:bf:e8:9c:c2:79:04:38:79:
47:80:e4:48:b9:f3:9e:c9:58:98:84:9a:57:99:da:68:30:92:
24:8b:b2:8a:f1:bb:11:76:11:2c:03:f4:b3:f4:28:cd:77:7c:
7a:b0:5c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:08:54 2025 by rpki-client