Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft
File: 17tVI2VJnAeu00tohPWy6TgOvuE.mft (raw, json)
Hash identifier: i2UbWtiiZUjBn8tjVwlzcjZ37yzEFOmH9PvrxEMNbB0=
Subject key identifier: AD:B5:DD:9A:4B:66:43:56:D9:D6:18:8B:C6:3F:81:99:AB:7B:DD:78
Authority key identifier: D7:BB:55:23:65:49:9C:07:AE:D3:4B:68:84:F5:B2:E9:38:0E:BE:E1
Certificate issuer: /CN=d7bb552365499c07aed34b6884f5b2e9380ebee1
Certificate serial: 0196808FA3FDB85BB63B826EAA16D8C2D425
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft
Manifest number: 0BFE
Signing time: Tue 29 Apr 2025 08:00:19 +0000
Manifest this update: Tue 29 Apr 2025 08:00:19 +0000
Manifest next update: Wed 30 Apr 2025 08:00:19 +0000
Files and hashes: 1: 17tVI2VJnAeu00tohPWy6TgOvuE.crl (hash: WrjFt9V/X+rWeZeTr8ZdlHHih1ltMkO3zlFRs7Rq+1E=)
2: ubg6NcZsNifAT3uvdzYOJRbZDdo.roa (hash: me6K2gKBLKvg7We5se7qwT6OEScp04Vg/6jm+AETwcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 08:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:8f:a3:fd:b8:5b:b6:3b:82:6e:aa:16:d8:c2:d4:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7bb552365499c07aed34b6884f5b2e9380ebee1
Validity
Not Before: Apr 29 08:00:19 2025 GMT
Not After : Apr 30 08:00:19 2025 GMT
Subject: CN=adb5dd9a4b664356d9d6188bc63f8199ab7bdd78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0d:6b:88:98:12:22:e7:3f:7f:d6:9d:aa:2e:
04:1c:48:30:24:ff:0d:c1:82:13:2f:3e:17:c7:81:
34:65:8f:c6:75:bf:ce:32:1d:c6:27:22:3d:a1:00:
2e:57:a7:34:b3:be:ab:80:b9:11:70:bf:8a:6d:96:
7f:e5:50:8e:da:3d:42:16:0e:da:da:58:ae:c1:37:
61:74:0d:2b:c7:ea:c8:49:95:20:f2:e7:24:ae:5d:
44:c9:77:5c:7a:86:5a:6d:66:1a:dd:5e:af:df:b7:
86:5a:3b:bc:4b:e3:66:66:20:25:1a:a8:e5:13:cb:
82:29:a0:2d:ad:1f:25:d7:4f:4d:c1:5f:1c:a1:e8:
5e:b0:b8:32:5c:ae:93:e5:4b:e7:54:5f:aa:8e:fc:
2c:92:a0:12:d5:d9:3c:5f:01:2d:bb:48:89:e5:c8:
fb:e3:07:c3:8c:b1:79:56:3b:9a:9b:f2:2b:0f:6e:
93:34:4b:95:08:27:1b:1d:64:4c:0f:2a:77:c9:dd:
e4:76:da:aa:d6:01:a0:ce:0f:36:e9:a4:d7:2a:5c:
60:18:8c:0f:70:9d:6b:e8:dc:0f:c1:67:5d:c5:30:
3c:5b:1d:a8:d7:d5:a5:01:0e:bb:13:ce:1e:8c:5f:
32:a1:5c:9c:9b:1d:58:84:71:48:71:c1:cc:0a:e7:
27:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B5:DD:9A:4B:66:43:56:D9:D6:18:8B:C6:3F:81:99:AB:7B:DD:78
X509v3 Authority Key Identifier:
keyid:D7:BB:55:23:65:49:9C:07:AE:D3:4B:68:84:F5:B2:E9:38:0E:BE:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:d6:d6:dc:ec:70:23:8c:37:c1:db:b0:11:34:77:1c:c2:e1:
41:69:e8:dd:a9:56:5c:36:38:a4:c1:c6:58:14:bf:57:60:b4:
69:d0:ef:58:3d:7a:47:9c:87:31:ba:95:3c:e7:54:cb:3b:1b:
b7:c5:3f:21:2b:f0:ea:df:a0:27:ab:e5:4d:f5:bc:37:d9:08:
e5:27:e2:3a:22:f1:60:54:bb:76:30:80:e9:d9:74:a4:09:46:
df:f8:3b:47:0a:d2:a2:3b:89:23:78:a4:48:33:a8:5a:29:65:
19:13:0d:89:72:05:c3:c1:de:e7:f6:0a:be:88:d3:c0:2a:3a:
e1:e5:3f:1f:fc:38:1e:86:c2:61:1c:08:07:09:37:c0:d8:5a:
2a:4b:2d:a3:c0:dd:70:29:b5:f5:43:e5:35:a4:4a:28:18:da:
d9:33:2e:00:1a:b9:22:07:18:c0:23:82:70:53:f4:c2:b7:a2:
94:6e:ed:7d:ab:cc:79:a0:41:97:a6:7b:8f:2e:8d:67:90:a3:
24:83:28:a5:ca:d2:f1:eb:40:02:37:a1:c1:64:03:60:6a:00:
1a:5f:c2:3c:64:21:68:df:78:a5:fd:5b:d5:5a:b7:34:9c:31:
6f:eb:17:6f:09:81:f8:97:ed:f9:8e:64:b0:73:c8:82:27:80:
c9:06:1e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:31:31 2025 by rpki-client