Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft
File: 17tVI2VJnAeu00tohPWy6TgOvuE.mft (raw, json)
Hash identifier: Ah4uv0vKEIw2zriCRiApWpT+Apy5yOUbgaeJVEVKJJI=
Subject key identifier: 1F:57:0C:43:FE:7A:8B:46:24:F4:63:39:A4:F9:A4:91:BB:F9:5B:4D
Authority key identifier: D7:BB:55:23:65:49:9C:07:AE:D3:4B:68:84:F5:B2:E9:38:0E:BE:E1
Certificate issuer: /CN=d7bb552365499c07aed34b6884f5b2e9380ebee1
Certificate serial: 019654252949316247ED0406EEA5DA618407
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft
Manifest number: 0BE7
Signing time: Sun 20 Apr 2025 17:00:43 +0000
Manifest this update: Sun 20 Apr 2025 17:00:43 +0000
Manifest next update: Mon 21 Apr 2025 17:00:43 +0000
Files and hashes: 1: 17tVI2VJnAeu00tohPWy6TgOvuE.crl (hash: 2XRTGZONNY21jhqltTo7Q07U53sOQI8M9CX/L22cTKg=)
2: ubg6NcZsNifAT3uvdzYOJRbZDdo.roa (hash: me6K2gKBLKvg7We5se7qwT6OEScp04Vg/6jm+AETwcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:25:29:49:31:62:47:ed:04:06:ee:a5:da:61:84:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7bb552365499c07aed34b6884f5b2e9380ebee1
Validity
Not Before: Apr 20 17:00:43 2025 GMT
Not After : Apr 21 17:00:43 2025 GMT
Subject: CN=1f570c43fe7a8b4624f46339a4f9a491bbf95b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c3:e9:43:0b:b9:0d:10:16:55:e0:38:d6:8c:
35:85:38:74:f1:0f:d7:f3:fc:5c:58:13:d5:c7:30:
c1:2a:30:14:01:d2:3c:55:da:34:67:97:7f:a6:c6:
a3:d2:72:a5:0a:62:db:b4:bc:59:2e:83:fe:c7:1c:
3b:10:af:b6:ac:9a:44:0c:3a:41:38:80:c3:01:44:
6d:d1:45:f9:1b:50:c0:d7:7c:b4:bf:ec:02:82:3a:
f5:42:7b:41:f0:e7:66:36:fb:d9:58:92:1f:7e:21:
22:0b:2d:77:0b:a3:53:05:32:24:60:e2:76:c1:5c:
8c:5b:21:0c:14:3a:56:8c:6d:17:d6:68:d0:18:a5:
04:ff:0b:6d:36:1a:30:48:5c:04:33:0f:d0:b9:55:
d7:9e:93:f6:75:d9:c8:18:0b:1b:8b:dd:c1:79:10:
c8:57:8f:26:2e:8f:4b:23:fe:b1:87:91:31:21:e4:
27:a9:46:2d:08:11:62:39:ea:15:6d:8a:9c:2c:ec:
30:a2:90:27:b7:2a:47:03:d0:36:ca:af:88:60:0d:
cf:c9:65:06:12:25:68:2c:f2:16:2b:ae:87:50:52:
3d:8f:04:6f:b2:19:f7:13:09:8c:4b:0c:78:69:50:
a8:be:b5:a3:42:06:f1:cf:b7:49:09:73:ed:a1:4d:
ca:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:57:0C:43:FE:7A:8B:46:24:F4:63:39:A4:F9:A4:91:BB:F9:5B:4D
X509v3 Authority Key Identifier:
keyid:D7:BB:55:23:65:49:9C:07:AE:D3:4B:68:84:F5:B2:E9:38:0E:BE:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:34:52:c8:34:f0:27:82:9c:a9:46:f7:ba:ce:c1:09:3c:30:
be:7b:b0:82:48:d2:42:7c:21:9f:36:f1:92:6b:a6:f8:21:c9:
1e:50:05:ba:39:a8:05:21:78:80:1a:1e:b7:0c:a2:22:42:ed:
d9:d3:e9:b5:b5:12:2c:b9:40:ba:5b:cf:fc:06:e8:d8:0f:b7:
06:c2:73:3d:c6:be:89:ea:8a:a4:19:ae:5b:a4:af:be:d4:6e:
37:77:59:45:0d:00:16:69:bb:dc:79:99:17:4c:4d:58:1e:c6:
ad:b6:76:e2:79:d6:e2:43:38:d0:84:a0:cd:cd:79:d0:ee:1d:
28:ec:24:f8:b9:3f:fe:a3:4b:e7:01:a0:05:24:52:91:fa:e3:
ba:15:20:ea:fc:a9:f2:14:ed:de:27:c3:e7:80:61:c1:b3:88:
e8:fa:71:a7:61:66:8a:df:38:9d:ce:6a:a1:fe:f3:b7:df:72:
b7:eb:27:71:4b:a4:cd:dc:b3:3c:0a:2f:53:81:72:16:0d:8c:
b8:99:16:cd:89:b3:6a:0c:a8:fb:f8:45:ff:76:06:38:ec:a7:
ac:46:1b:45:93:0a:e1:fb:8b:79:c0:11:d1:3c:c5:b8:8f:75:
df:7a:b5:f1:49:bc:b5:7b:07:0a:2c:a0:25:e4:b4:a9:f5:63:
5f:f8:61:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUJSlJMWJH7QQG7qXaYYQHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3YmI1NTIzNjU0OTljMDdhZWQzNGI2ODg0ZjViMmU5Mzgw
ZWJlZTEwHhcNMjUwNDIwMTcwMDQzWhcNMjUwNDIxMTcwMDQzWjAzMTEwLwYDVQQD
EygxZjU3MGM0M2ZlN2E4YjQ2MjRmNDYzMzlhNGY5YTQ5MWJiZjk1YjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMPpQwu5DRAWVeA41ow1hTh08Q/X
8/xcWBPVxzDBKjAUAdI8Vdo0Z5d/psaj0nKlCmLbtLxZLoP+xxw7EK+2rJpEDDpB
OIDDAURt0UX5G1DA13y0v+wCgjr1QntB8OdmNvvZWJIffiEiCy13C6NTBTIkYOJ2
wVyMWyEMFDpWjG0X1mjQGKUE/wttNhowSFwEMw/QuVXXnpP2ddnIGAsbi93BeRDI
V48mLo9LI/6xh5ExIeQnqUYtCBFiOeoVbYqcLOwwopAntypHA9A2yq+IYA3PyWUG
EiVoLPIWK66HUFI9jwRvshn3EwmMSwx4aVCovrWjQgbxz7dJCXPtoU3KiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB9XDEP+eotGJPRjOaT5pJG7+VtNMB8GA1UdIwQY
MBaAFNe7VSNlSZwHrtNLaIT1suk4Dr7hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTd0VkkyVkpuQWV1MDB0b2hQV3k2VGdPdnVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82ZTY3MjgtZmYwNS00OTQ2LWIwOGUt
M2ViZDQ1NWFjMmFlLzEvMTd0VkkyVkpuQWV1MDB0b2hQV3k2VGdPdnVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC82ZTY3MjgtZmYwNS00OTQ2LWIwOGUtM2ViZDQ1NWFjMmFl
LzEvMTd0VkkyVkpuQWV1MDB0b2hQV3k2VGdPdnVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAazRSyDTw
J4KcqUb3us7BCTwwvnuwgkjSQnwhnzbxkmum+CHJHlAFujmoBSF4gBoetwyiIkLt
2dPptbUSLLlAulvP/Abo2A+3BsJzPca+ieqKpBmuW6SvvtRuN3dZRQ0AFmm73HmZ
F0xNWB7GrbZ24nnW4kM40ISgzc150O4dKOwk+Lk//qNL5wGgBSRSkfrjuhUg6vyp
8hTt3ifD54BhwbOI6Ppxp2Fmit84nc5qof7zt99yt+sncUukzdyzPAovU4FyFg2M
uJkWzYmzagyo+/hF/3YGOOynrEYbRZMK4fuLecAR0TzFuI9133q18Um8tXsHCiyg
JeS0qfVjX/hhwQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:08:40 2025 by rpki-client