Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft
File: 17tVI2VJnAeu00tohPWy6TgOvuE.mft (raw, json)
Hash identifier: sH193D2MTFl6BiMT9iwkhdRYK/+3NotXKZIapIw/x+8=
Subject key identifier: 94:CB:D2:62:51:F1:2F:98:A0:69:D0:31:2A:E9:A3:44:CE:18:44:7A
Authority key identifier: D7:BB:55:23:65:49:9C:07:AE:D3:4B:68:84:F5:B2:E9:38:0E:BE:E1
Certificate issuer: /CN=d7bb552365499c07aed34b6884f5b2e9380ebee1
Certificate serial: 019A4DE174731A7928FE19654C07EDE174D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft
Manifest number: 0DF6
Signing time: Tue 04 Nov 2025 08:00:12 +0000
Manifest this update: Tue 04 Nov 2025 08:00:12 +0000
Manifest next update: Wed 05 Nov 2025 08:00:12 +0000
Files and hashes: 1: 17tVI2VJnAeu00tohPWy6TgOvuE.crl (hash: 40aK4vr+WMkFUpM5BnYVKG/sUqRsbtOfgysBgTP+430=)
2: ubg6NcZsNifAT3uvdzYOJRbZDdo.roa (hash: me6K2gKBLKvg7We5se7qwT6OEScp04Vg/6jm+AETwcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:74:73:1a:79:28:fe:19:65:4c:07:ed:e1:74:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7bb552365499c07aed34b6884f5b2e9380ebee1
Validity
Not Before: Nov 4 08:00:12 2025 GMT
Not After : Nov 5 08:00:12 2025 GMT
Subject: CN=94cbd26251f12f98a069d0312ae9a344ce18447a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:80:74:d8:65:cf:72:37:ae:b0:8b:f3:9d:33:
9e:1e:51:dc:21:a2:54:62:bf:18:4c:ff:d0:8a:6b:
f0:97:55:da:b8:3a:15:d7:6c:d3:97:f2:19:95:9b:
0a:8c:10:87:e7:4f:39:13:1e:2c:81:b5:fa:78:74:
24:24:e7:5b:66:16:cf:e5:8d:40:c9:13:8d:62:81:
24:e7:d3:54:4e:12:ed:5e:62:ba:5e:b8:80:23:ae:
d9:05:71:fb:14:38:b8:b4:57:08:cb:98:08:79:ce:
19:6e:91:c9:a1:f3:66:ac:10:95:00:62:f3:e5:01:
17:3b:9f:84:d9:9f:48:39:e2:73:9e:17:0e:5d:78:
af:72:30:ac:d8:b5:d0:fc:a2:c0:26:69:ae:c3:5b:
17:61:af:e5:77:e7:72:8b:9a:37:8f:92:b2:67:64:
3f:80:ca:c2:54:1e:7c:a7:29:16:47:6e:11:b7:f8:
df:e4:fb:9d:e6:6f:c5:27:ca:07:83:72:49:38:92:
d6:40:30:ef:5c:03:5e:23:2b:b5:b7:9c:70:f4:9b:
2c:c5:12:9a:cb:88:c1:8d:98:c6:b6:f6:28:d9:08:
a9:eb:e4:f7:02:b3:62:8b:46:27:0c:2b:29:dd:01:
66:b8:41:83:f4:e8:4a:1a:50:1b:5e:e9:01:b5:b1:
92:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:CB:D2:62:51:F1:2F:98:A0:69:D0:31:2A:E9:A3:44:CE:18:44:7A
X509v3 Authority Key Identifier:
keyid:D7:BB:55:23:65:49:9C:07:AE:D3:4B:68:84:F5:B2:E9:38:0E:BE:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:89:bc:bb:e5:52:bc:db:e4:3e:2a:28:cb:63:cb:97:3a:42:
14:cc:5d:b5:4b:cb:ea:34:34:06:21:ab:a5:06:96:d3:58:fc:
e0:aa:d7:9f:47:0a:b4:21:2f:39:c3:78:fc:7a:0d:92:e2:5a:
15:90:dd:38:3d:cf:d8:9e:44:b8:b9:96:e0:f9:ac:18:87:aa:
1c:19:03:b9:39:45:16:93:7f:cd:ac:62:7b:45:ed:fb:3c:3b:
14:64:ab:15:31:dd:64:c9:19:b0:6f:14:11:f1:8a:f2:06:3b:
2f:51:61:be:1e:94:22:08:74:32:31:95:e4:53:b1:58:a9:3b:
c2:60:5c:87:b4:9f:af:7d:ca:49:d7:ba:0d:83:72:f9:33:34:
d7:4e:80:ae:65:a3:13:70:3c:94:38:ae:3a:b6:bc:90:45:70:
d2:59:c1:68:44:11:23:84:0d:a2:21:30:07:af:b8:45:fc:9e:
a1:b2:15:00:68:a0:d1:7a:7f:76:c3:90:c1:25:1c:ea:31:1e:
bf:41:42:c0:5c:2f:2e:cf:2c:68:00:ef:75:88:cf:90:a4:be:
7b:f2:57:56:16:9e:b8:5f:10:81:29:6e:3a:7c:26:0e:7d:57:
34:47:ab:bc:a8:38:79:5e:19:b8:d8:05:dd:29:9b:72:2d:90:
56:0d:35:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:50:02 2025 by rpki-client