Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.mft
File: F84IIXrG5mPAjdFhj0mtpOvk_tw.mft (raw, json)
Hash identifier: hTGA4TR6NNGdEmjfms3aCUFEg4VFHDjOVRYZ7+4q3Dk=
Subject key identifier: 84:F5:11:B4:AA:C7:22:39:CC:85:DC:87:B3:47:D7:D2:D2:9C:15:F0
Authority key identifier: 17:CE:08:21:7A:C6:E6:63:C0:8D:D1:61:8F:49:AD:A4:EB:E4:FE:DC
Certificate issuer: /CN=17ce08217ac6e663c08dd1618f49ada4ebe4fedc
Certificate serial: 01974A7B8412ADFC9580F228EDCCB48943C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F84IIXrG5mPAjdFhj0mtpOvk_tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.mft
Manifest number: 0CCC
Signing time: Sat 07 Jun 2025 13:01:37 +0000
Manifest this update: Sat 07 Jun 2025 13:01:37 +0000
Manifest next update: Sun 08 Jun 2025 13:01:37 +0000
Files and hashes: 1: F84IIXrG5mPAjdFhj0mtpOvk_tw.crl (hash: 13AO8JHtYmDk9HBiEADczZxbVibvyM6Zeme/YgAzRZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F84IIXrG5mPAjdFhj0mtpOvk_tw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:84:12:ad:fc:95:80:f2:28:ed:cc:b4:89:43:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17ce08217ac6e663c08dd1618f49ada4ebe4fedc
Validity
Not Before: Jun 7 13:01:37 2025 GMT
Not After : Jun 8 13:01:37 2025 GMT
Subject: CN=84f511b4aac72239cc85dc87b347d7d2d29c15f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1e:c6:e1:2e:6c:b3:df:3f:d9:7c:f9:91:9b:
1d:06:f0:5f:5e:29:17:aa:9f:91:9e:03:f7:24:b4:
17:3c:04:36:f8:59:fb:74:63:78:a0:81:b8:c6:31:
6f:90:08:b9:52:de:e0:7f:79:85:de:fa:71:57:d5:
24:7f:e4:9b:dd:b2:9a:b9:56:01:e1:9c:8a:1d:68:
33:5f:37:e6:28:3f:b3:1f:23:1c:ac:68:0b:d1:b8:
1f:2e:06:73:90:0e:7d:47:f3:54:a0:e0:d1:23:7d:
c5:c1:ba:09:f9:20:3c:cc:15:84:76:60:cf:5a:3e:
25:57:fa:3f:94:a5:e8:51:be:3e:b4:2c:f2:66:c3:
2f:71:dd:a9:34:99:9d:95:80:fc:53:38:f8:52:81:
33:11:c5:7f:8d:30:7e:22:4f:f5:fd:27:0d:d5:11:
6d:ae:2a:c5:ec:08:18:c6:ab:9a:a8:3f:ec:cc:57:
40:c0:c8:ff:95:0a:01:3f:e2:03:e5:10:11:bc:56:
8e:4d:67:92:da:fc:5c:9b:dc:ec:c6:61:7d:96:b7:
28:29:60:1a:ed:e2:84:bb:a5:65:df:09:9d:13:24:
66:cc:52:b3:dd:2f:0b:d4:3a:41:fa:3a:90:a6:b4:
a8:37:cb:17:dd:4d:e3:3e:4f:ef:dc:35:f8:16:f5:
eb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F5:11:B4:AA:C7:22:39:CC:85:DC:87:B3:47:D7:D2:D2:9C:15:F0
X509v3 Authority Key Identifier:
keyid:17:CE:08:21:7A:C6:E6:63:C0:8D:D1:61:8F:49:AD:A4:EB:E4:FE:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F84IIXrG5mPAjdFhj0mtpOvk_tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d2:15:cd:f3:90:5e:0a:02:45:cf:07:0f:49:ce:d1:fc:8c:
88:45:9b:ef:f8:db:cb:7f:24:ab:c3:94:7f:98:49:ef:ee:3f:
a6:1e:42:8e:5d:78:92:c1:37:29:fc:38:fd:d8:74:29:18:91:
4c:5b:83:aa:65:6b:de:81:16:08:14:06:2d:e9:e4:f4:50:c5:
e9:ef:9c:59:e7:01:19:02:98:9e:8c:92:23:68:eb:ac:bc:40:
ea:c1:1e:20:a9:18:07:3d:ea:4a:97:5e:3f:c1:ec:c4:ad:c3:
66:4f:fe:c7:8e:80:0b:67:79:a3:11:e9:f3:5f:95:4e:28:f7:
f8:7a:b4:1d:08:5c:b2:f3:c9:24:3a:9f:0d:79:77:2d:92:18:
03:8a:8d:84:64:c2:b2:b2:02:a7:c4:90:98:0c:58:6a:75:c8:
86:44:20:0f:05:d1:99:d8:75:7c:92:d6:67:52:6a:38:91:18:
a2:af:72:e0:c9:94:4f:c3:a6:8d:42:b7:7c:15:92:3d:28:d7:
79:f0:f9:d8:d1:73:93:5c:bb:67:9e:7c:9b:6b:8b:54:2d:88:
4d:cc:73:21:e7:95:c6:c6:7c:ed:ab:1d:54:8a:12:96:06:78:
8a:85:35:21:45:ee:3f:30:dd:65:f1:9b:91:8d:55:a7:ac:52:
bf:7e:b6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:27:34 2025 by rpki-client