Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.mft
File: F84IIXrG5mPAjdFhj0mtpOvk_tw.mft (raw, json)
Hash identifier: ABRqMGJLvRzBkJOTJnorC3rY/4C8rL27lxIc+27URzs=
Subject key identifier: 38:4C:0A:E5:75:FD:16:50:90:54:D8:00:06:AB:B4:9C:DD:BD:EA:77
Authority key identifier: 17:CE:08:21:7A:C6:E6:63:C0:8D:D1:61:8F:49:AD:A4:EB:E4:FE:DC
Certificate issuer: /CN=17ce08217ac6e663c08dd1618f49ada4ebe4fedc
Certificate serial: 019A71B77343D2C28784C4790D8EBE3CE544
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F84IIXrG5mPAjdFhj0mtpOvk_tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.mft
Manifest number: 0E6E
Signing time: Tue 11 Nov 2025 07:00:39 +0000
Manifest this update: Tue 11 Nov 2025 07:00:39 +0000
Manifest next update: Wed 12 Nov 2025 07:00:39 +0000
Files and hashes: 1: F84IIXrG5mPAjdFhj0mtpOvk_tw.crl (hash: jQ8bAF6fT515OKQCf/3/HGjxk8umGOs37TjlNYs0C6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F84IIXrG5mPAjdFhj0mtpOvk_tw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:73:43:d2:c2:87:84:c4:79:0d:8e:be:3c:e5:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17ce08217ac6e663c08dd1618f49ada4ebe4fedc
Validity
Not Before: Nov 11 07:00:39 2025 GMT
Not After : Nov 12 07:00:39 2025 GMT
Subject: CN=384c0ae575fd16509054d80006abb49cddbdea77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c3:c4:d3:a7:cd:4d:76:ac:07:8a:34:54:0f:
9e:68:51:bf:7a:e0:7a:5f:8d:1d:9c:59:e4:50:ed:
26:ad:47:b9:6e:42:6d:2a:6a:de:dc:36:16:30:b1:
02:39:de:fb:a2:eb:64:d0:f7:06:5f:3b:68:db:95:
ce:92:8a:76:01:38:e3:6a:b2:2b:f2:16:0c:a2:26:
5a:eb:f7:13:7b:9e:bc:29:c7:c8:17:ee:96:cc:00:
03:65:1c:7e:d1:04:69:b8:71:a6:4e:cb:13:57:44:
f7:69:7e:1e:eb:3e:52:07:55:41:76:e2:2d:11:7a:
70:36:57:7e:44:02:40:7e:2e:d2:5e:b4:0b:41:b3:
66:b3:ba:44:f4:86:49:15:08:9f:2b:17:5d:48:f0:
41:af:6c:a0:fb:5d:f0:4e:4c:97:b7:26:a9:93:87:
29:fd:56:8a:29:6c:b1:d7:92:7c:7b:95:c0:a2:fc:
9b:8c:8d:a8:05:05:5b:de:bb:1e:a7:84:19:21:45:
ba:2c:f3:04:f6:16:23:b4:0b:9f:7d:fc:3b:29:99:
b9:40:8c:df:68:49:4c:c1:1b:42:ba:69:39:d9:80:
b3:70:fc:ab:72:7b:f9:a0:9e:49:58:be:e2:3d:e4:
8a:fc:10:de:7a:48:a1:43:5c:f4:03:4c:8a:7c:8c:
75:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4C:0A:E5:75:FD:16:50:90:54:D8:00:06:AB:B4:9C:DD:BD:EA:77
X509v3 Authority Key Identifier:
keyid:17:CE:08:21:7A:C6:E6:63:C0:8D:D1:61:8F:49:AD:A4:EB:E4:FE:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F84IIXrG5mPAjdFhj0mtpOvk_tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:02:0b:b5:9b:6f:cb:4c:9e:4b:53:bf:25:12:e8:0b:4d:4b:
1e:9b:c2:aa:a2:3a:a3:ff:ce:4f:6e:fd:ad:58:67:19:7f:d6:
be:3c:e4:0e:46:40:aa:5a:f3:8f:78:07:02:33:c4:f7:e1:03:
02:95:19:d8:39:fa:bb:54:13:36:24:a2:f9:eb:c2:f3:d2:46:
48:03:72:f3:ab:84:a6:19:70:1e:04:fe:20:e4:a1:46:a7:7a:
4d:af:ed:29:66:4e:52:0b:3d:9d:e9:27:ee:66:35:08:61:ce:
56:bb:c6:dd:21:ec:b3:de:64:1d:36:36:b2:42:2d:6a:e9:d4:
6f:3f:e7:6d:63:73:5f:30:e6:6a:5a:13:96:c4:27:5c:5e:c5:
8f:87:f7:0e:fd:86:06:06:56:11:8b:9f:41:ed:69:0f:6f:21:
42:06:67:39:ff:b9:c4:80:89:7b:5a:b2:40:25:83:2f:e1:ba:
96:b8:13:f0:4f:0f:f1:bb:93:c2:8b:b4:04:a4:38:b5:f9:70:
b7:d8:8d:af:21:6c:3b:94:9f:cb:68:d3:6a:8e:31:aa:40:56:
bf:be:51:af:6b:e9:23:56:6e:38:82:82:f9:6f:e2:f4:df:21:
da:84:61:8c:a3:32:2e:22:d1:07:b5:8e:c2:39:19:14:57:62:
f0:ad:31:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:08 2025 by rpki-client