
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.mft
File: F84IIXrG5mPAjdFhj0mtpOvk_tw.mft (raw, json)
Hash identifier: 8IauZomD/0IXdq4BeZ9EJZEcF2NI01xXIa0sKo8Huv8=
Subject key identifier: 8F:81:08:8C:B7:BF:35:60:9C:5B:91:CC:93:69:C8:F6:8F:79:6F:E8
Authority key identifier: 17:CE:08:21:7A:C6:E6:63:C0:8D:D1:61:8F:49:AD:A4:EB:E4:FE:DC
Certificate issuer: /CN=17ce08217ac6e663c08dd1618f49ada4ebe4fedc
Certificate serial: 01988EEB3A0B2BDFADD4AB3D7BFA8A03AC5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F84IIXrG5mPAjdFhj0mtpOvk_tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.mft
Manifest number: 0D74
Signing time: Sat 09 Aug 2025 13:00:37 +0000
Manifest this update: Sat 09 Aug 2025 13:00:37 +0000
Manifest next update: Sun 10 Aug 2025 13:00:37 +0000
Files and hashes: 1: F84IIXrG5mPAjdFhj0mtpOvk_tw.crl (hash: Vufe9+CWAMAcGHNg656u216Mfq99PwXTVkItHbUCgu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F84IIXrG5mPAjdFhj0mtpOvk_tw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:eb:3a:0b:2b:df:ad:d4:ab:3d:7b:fa:8a:03:ac:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17ce08217ac6e663c08dd1618f49ada4ebe4fedc
Validity
Not Before: Aug 9 13:00:37 2025 GMT
Not After : Aug 10 13:00:37 2025 GMT
Subject: CN=8f81088cb7bf35609c5b91cc9369c8f68f796fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:29:57:e7:71:d8:f4:86:ff:7f:31:5d:c9:c0:
fd:6c:05:a1:7e:e3:5c:f4:c7:28:e8:7e:f3:40:d7:
fb:5a:69:56:24:25:11:21:63:84:28:58:39:e8:80:
27:99:0c:99:f5:9c:6e:c4:2d:c7:11:1c:2e:68:32:
e8:f9:55:4d:3a:e4:f4:80:83:03:4b:95:17:3c:9c:
7e:d0:91:4f:7c:c1:d5:be:d5:fb:82:d0:f3:36:8e:
f7:c2:ef:86:71:10:5d:81:be:76:7a:1f:38:11:8c:
89:c3:ee:53:e1:2c:29:36:d7:79:a0:73:2a:a8:0e:
3e:e5:9a:29:33:aa:28:ef:b9:51:87:aa:69:e7:c0:
44:ce:c9:53:1f:47:e9:fc:0e:d1:5b:71:b4:21:7d:
fb:38:92:4e:7b:e3:07:e2:af:f4:b2:b6:9d:47:26:
da:df:c4:81:b8:f5:67:aa:a0:a2:9d:03:87:97:56:
78:b1:71:1e:13:b2:7e:c1:ef:5a:19:57:a4:77:bf:
3b:41:4c:0f:cd:2f:55:6a:46:fe:b4:d3:17:ee:cf:
65:5a:54:86:8e:9e:5a:39:e9:00:09:bd:e5:ba:47:
85:02:fa:d5:f4:ed:09:10:e7:1e:fe:9a:a8:2b:a3:
a8:ea:7a:b7:96:33:d0:1f:08:38:f2:80:eb:57:89:
c7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:81:08:8C:B7:BF:35:60:9C:5B:91:CC:93:69:C8:F6:8F:79:6F:E8
X509v3 Authority Key Identifier:
keyid:17:CE:08:21:7A:C6:E6:63:C0:8D:D1:61:8F:49:AD:A4:EB:E4:FE:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F84IIXrG5mPAjdFhj0mtpOvk_tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:36:28:a6:25:7d:17:c7:92:e7:29:72:13:c4:47:1e:a1:4d:
a7:47:ec:9b:23:89:cd:ad:17:8b:7c:f8:2e:ba:e2:8b:f9:9e:
80:0d:c2:d5:de:ea:69:15:4e:33:f1:c3:2e:36:e5:fe:1c:ec:
93:e1:d3:26:c5:ad:39:1e:30:ab:a7:a8:ed:4a:53:bf:6c:f0:
62:ea:6f:16:7b:e1:14:b6:fe:2b:87:d2:c8:36:ac:b3:12:f2:
68:0d:93:02:15:98:12:67:ab:5b:4c:cc:15:da:d1:28:06:4b:
ce:e0:1e:e7:26:11:fc:74:44:f3:e3:e9:c8:ea:66:15:50:01:
56:4d:17:04:70:e9:3b:4a:b6:68:52:fa:14:93:08:ec:68:2a:
5a:c5:4f:4f:82:ed:e1:36:91:2e:e0:79:ad:b6:b0:bd:49:c1:
d5:ad:7d:e2:d7:3d:1b:a8:ed:a1:61:db:1d:e4:3f:12:e5:cb:
31:b2:4d:a4:be:06:1e:3d:ee:77:b1:8d:89:ed:1c:7f:9a:6d:
6e:84:09:6f:38:69:7e:ef:87:c7:ea:a2:ca:c9:f1:41:55:76:
e1:74:0b:75:03:bc:98:8e:bf:17:95:a8:67:6d:ae:28:c2:74:
6e:61:fd:ee:9c:4f:2b:8c:b4:1e:a8:f2:ef:71:58:d6:d2:6d:
54:8b:f7:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiO6zoLK9+t1Ks9e/qKA6xfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3Y2UwODIxN2FjNmU2NjNjMDhkZDE2MThmNDlhZGE0ZWJl
NGZlZGMwHhcNMjUwODA5MTMwMDM3WhcNMjUwODEwMTMwMDM3WjAzMTEwLwYDVQQD
Eyg4ZjgxMDg4Y2I3YmYzNTYwOWM1YjkxY2M5MzY5YzhmNjhmNzk2ZmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsClX53HY9Ib/fzFdycD9bAWhfuNc
9Mco6H7zQNf7WmlWJCURIWOEKFg56IAnmQyZ9ZxuxC3HERwuaDLo+VVNOuT0gIMD
S5UXPJx+0JFPfMHVvtX7gtDzNo73wu+GcRBdgb52eh84EYyJw+5T4SwpNtd5oHMq
qA4+5ZopM6oo77lRh6pp58BEzslTH0fp/A7RW3G0IX37OJJOe+MH4q/0sradRyba
38SBuPVnqqCinQOHl1Z4sXEeE7J+we9aGVekd787QUwPzS9Vakb+tNMX7s9lWlSG
jp5aOekACb3lukeFAvrV9O0JEOce/pqoK6Oo6nq3ljPQHwg48oDrV4nHGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI+BCIy3vzVgnFuRzJNpyPaPeW/oMB8GA1UdIwQY
MBaAFBfOCCF6xuZjwI3RYY9JraTr5P7cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjg0SUlYckc1bVBBamRGaGowbXRwT3ZrX3R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9kNzBlOTItYjBjZC00OGI3LWEzMGQt
YTgxMTczODdlYTM0LzEvRjg0SUlYckc1bVBBamRGaGowbXRwT3ZrX3R3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9kNzBlOTItYjBjZC00OGI3LWEzMGQtYTgxMTczODdlYTM0
LzEvRjg0SUlYckc1bVBBamRGaGowbXRwT3ZrX3R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWjYopiV9
F8eS5ylyE8RHHqFNp0fsmyOJza0Xi3z4Lrrii/megA3C1d7qaRVOM/HDLjbl/hzs
k+HTJsWtOR4wq6eo7UpTv2zwYupvFnvhFLb+K4fSyDassxLyaA2TAhWYEmerW0zM
FdrRKAZLzuAe5yYR/HRE8+PpyOpmFVABVk0XBHDpO0q2aFL6FJMI7GgqWsVPT4Lt
4TaRLuB5rbawvUnB1a194tc9G6jtoWHbHeQ/EuXLMbJNpL4GHj3ud7GNie0cf5pt
boQJbzhpfu+Hx+qiysnxQVV24XQLdQO8mI6/F5WoZ22uKMJ0bmH97pxPK4y0Hqjy
73FY1tJtVIv30A==
-----END CERTIFICATE-----
Generated at Sat Aug 9 22:38:48 2025 by rpki-client