Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft
File: 17tVI2VJnAeu00tohPWy6TgOvuE.mft (raw, json)
Hash identifier: pejEmAai4Q7+fK4y0gHTYhAfLC9xNnPWYxiM1LmgmXs=
Subject key identifier: 1B:5E:12:4A:79:91:61:4F:96:8F:A1:39:2F:FA:6F:5D:06:0D:C3:86
Authority key identifier: D7:BB:55:23:65:49:9C:07:AE:D3:4B:68:84:F5:B2:E9:38:0E:BE:E1
Certificate issuer: /CN=d7bb552365499c07aed34b6884f5b2e9380ebee1
Certificate serial: 019A729333B2A165CC0153BC5ABCD46543C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft
Manifest number: 0E09
Signing time: Tue 11 Nov 2025 11:00:40 +0000
Manifest this update: Tue 11 Nov 2025 11:00:40 +0000
Manifest next update: Wed 12 Nov 2025 11:00:40 +0000
Files and hashes: 1: 17tVI2VJnAeu00tohPWy6TgOvuE.crl (hash: iyxAOPbBiyzs3CCv8Xlt1rrVOGDVnE1K2oey5GsPwQE=)
2: ubg6NcZsNifAT3uvdzYOJRbZDdo.roa (hash: me6K2gKBLKvg7We5se7qwT6OEScp04Vg/6jm+AETwcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:33:b2:a1:65:cc:01:53:bc:5a:bc:d4:65:43:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7bb552365499c07aed34b6884f5b2e9380ebee1
Validity
Not Before: Nov 11 11:00:40 2025 GMT
Not After : Nov 12 11:00:40 2025 GMT
Subject: CN=1b5e124a7991614f968fa1392ffa6f5d060dc386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d2:c5:86:4c:f6:f8:0d:e8:50:fa:33:1a:04:
f8:29:0b:84:a2:36:44:5d:2e:e0:a9:52:ae:b5:fc:
c2:68:6e:19:1b:b0:b4:2a:3b:58:0a:67:56:cf:ed:
2a:23:2a:a1:dd:f9:18:5d:5a:d2:a5:ba:7c:90:99:
e1:95:67:39:c9:0b:b5:ae:40:7e:b7:19:aa:ef:7e:
59:b0:45:77:84:b6:ea:b2:58:f3:fd:ae:ac:96:74:
fd:30:7c:3d:35:b3:a3:98:50:8b:75:19:79:34:96:
9b:8e:f6:d6:ce:3c:e8:02:1b:4a:a5:91:b2:cb:f9:
1e:40:2e:6e:50:69:98:b5:5d:52:70:51:a9:90:86:
2e:e5:b4:2f:7a:a4:99:41:77:f6:74:74:e0:1d:37:
11:c7:99:cd:50:fd:45:2a:5d:2b:06:f0:12:32:48:
38:5e:b3:3e:fe:64:de:d4:f4:ec:ed:fd:31:44:bd:
1b:1b:72:16:d6:fe:d8:60:9e:ab:1d:b7:6a:11:cf:
81:a5:e3:e4:5c:00:fc:72:57:2e:b4:5f:5b:61:51:
97:d8:40:b9:48:ab:90:3d:09:a6:b1:e5:a8:a9:c3:
cf:f2:d3:10:dc:16:bb:f7:9f:06:53:f5:e3:d5:09:
ea:66:cc:9a:c1:1e:ad:82:aa:9a:ac:2c:16:7f:ed:
53:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:5E:12:4A:79:91:61:4F:96:8F:A1:39:2F:FA:6F:5D:06:0D:C3:86
X509v3 Authority Key Identifier:
keyid:D7:BB:55:23:65:49:9C:07:AE:D3:4B:68:84:F5:B2:E9:38:0E:BE:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:aa:f7:e6:d8:81:5e:60:3c:42:b4:8d:13:90:c3:5c:21:ae:
45:4d:a6:bd:3b:c6:ec:dc:86:7c:dc:90:ad:9c:50:2a:ab:c0:
ca:99:74:ae:7a:51:20:63:83:19:cf:87:97:78:36:f7:3f:bd:
71:da:da:3a:cf:95:8d:9b:07:f1:b3:d4:f7:de:18:bb:ad:7b:
7e:e8:3c:da:f2:b2:89:e4:5c:e0:f0:16:9c:83:44:a9:f2:b3:
7d:ae:7d:27:06:99:09:26:53:e0:5f:fb:96:c7:01:29:9a:d7:
14:76:1f:9f:b5:57:da:c0:69:8c:19:00:19:82:e9:c9:0d:3d:
48:4f:ba:06:ab:af:2d:dc:d3:db:1f:05:96:b2:80:7b:99:40:
76:45:cf:c2:41:4d:0d:09:a0:06:77:a3:c8:1d:13:b8:6d:80:
ef:61:b1:37:80:82:98:53:9f:ba:30:aa:fb:40:10:51:d4:5a:
a3:07:3e:06:5d:f4:c0:55:44:7f:ff:3f:2e:1f:6b:05:e1:f4:
eb:11:03:28:bf:fa:50:cd:46:5a:ff:86:27:33:84:a1:0d:83:
b4:0b:b6:09:c7:81:a0:19:e6:7d:9e:a0:7d:fd:50:63:e4:50:
80:8e:f6:76:db:41:29:6b:c3:41:c8:ba:66:03:4e:ce:75:95:
c0:d4:98:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:54:24 2025 by rpki-client