Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.mft
File: F6yAsO71cIxkOQVF0acTkCRLbRs.mft (raw, json)
Hash identifier: ttXGdqzSyUYRlqiel+REQLGDR5KA5Pu2ieP9x1LILf0=
Subject key identifier: AD:C6:AC:46:E5:F3:A8:00:63:F2:FF:8E:92:44:4C:43:AD:FC:94:6B
Authority key identifier: 17:AC:80:B0:EE:F5:70:8C:64:39:05:45:D1:A7:13:90:24:4B:6D:1B
Certificate issuer: /CN=17ac80b0eef5708c64390545d1a71390244b6d1b
Certificate serial: 01987CE4E7AF3E4FFB3D89EBA7A5811E53D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F6yAsO71cIxkOQVF0acTkCRLbRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.mft
Manifest number: 1344
Signing time: Wed 06 Aug 2025 01:00:32 +0000
Manifest this update: Wed 06 Aug 2025 01:00:32 +0000
Manifest next update: Thu 07 Aug 2025 01:00:32 +0000
Files and hashes: 1: F6yAsO71cIxkOQVF0acTkCRLbRs.crl (hash: xyeKIlUsf0bgeRmQ93puCndvT4ghNTdKi1igMdv3ZFU=)
2: zSUjlVA_3mzAMpyrhKZAaPLaNJs.roa (hash: 72zL3nwgCvbu+myGvWOjXCnDMo56NxzjVOkIDgx8eQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/F6yAsO71cIxkOQVF0acTkCRLbRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e4:e7:af:3e:4f:fb:3d:89:eb:a7:a5:81:1e:53:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17ac80b0eef5708c64390545d1a71390244b6d1b
Validity
Not Before: Aug 6 01:00:32 2025 GMT
Not After : Aug 7 01:00:32 2025 GMT
Subject: CN=adc6ac46e5f3a80063f2ff8e92444c43adfc946b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a0:99:15:37:cc:68:88:e2:8e:29:8e:85:e9:
1c:55:f0:1d:dc:ad:7d:df:34:ca:48:75:5e:b7:d4:
bc:ce:b0:0b:28:c6:28:1d:47:77:3c:4b:e6:8f:cb:
aa:66:1d:6b:96:d9:c2:0a:68:bf:a7:cb:27:57:a1:
6d:6c:c3:dc:f7:2e:d5:58:ef:e9:66:95:77:a8:65:
03:ad:79:98:ea:13:ca:c2:fe:5d:08:29:1b:52:30:
a2:04:85:8d:63:c5:c2:ca:c0:b6:c7:8a:1e:9d:c0:
1a:48:78:90:be:8f:73:2d:f7:e7:da:dc:98:74:20:
82:f6:8e:29:35:d1:72:95:75:27:f9:1f:aa:78:cb:
fd:b2:11:93:c5:27:2b:52:3e:ef:f1:6c:e2:74:79:
16:68:13:09:c4:c6:64:3e:a4:6d:40:da:1c:73:3c:
ca:55:5b:d6:40:cb:4a:df:07:c9:5f:6b:37:29:b5:
81:6c:a8:aa:34:05:96:da:0f:e9:2d:20:d3:a4:ab:
bc:a1:04:b1:7f:20:11:fc:08:80:40:6b:6a:85:d3:
dd:88:6b:13:16:a7:b7:4b:0f:e3:ae:05:31:94:9c:
c4:d4:bd:19:31:41:eb:55:4d:78:c5:91:59:56:63:
76:db:1d:5d:0c:4a:2d:3e:0b:87:41:60:46:2c:33:
0a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C6:AC:46:E5:F3:A8:00:63:F2:FF:8E:92:44:4C:43:AD:FC:94:6B
X509v3 Authority Key Identifier:
keyid:17:AC:80:B0:EE:F5:70:8C:64:39:05:45:D1:A7:13:90:24:4B:6D:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6yAsO71cIxkOQVF0acTkCRLbRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:97:60:a8:ae:b0:37:3c:75:9a:35:c6:b0:e9:c6:d4:f2:cf:
f6:71:03:27:55:f6:6d:b6:99:b4:de:cf:a5:f3:bf:5d:cd:9a:
2e:18:3c:8d:0d:8e:4a:bf:bc:0c:a6:aa:54:f3:be:1c:03:b4:
f3:75:7b:14:51:61:16:41:7e:7f:df:15:d5:be:4a:05:46:4c:
9b:64:2c:5e:08:56:18:9e:53:2f:66:68:3c:53:52:72:b8:99:
8a:98:f5:ee:c8:5e:6d:ca:09:cf:94:3d:b7:ef:ca:fe:91:94:
df:e7:bb:36:50:07:97:64:d7:1d:52:07:30:18:b4:84:62:35:
28:03:cc:fc:3c:ab:27:50:6c:6d:dd:52:dc:28:5d:a0:4e:a8:
df:22:7a:8f:73:93:66:e5:d9:42:0d:aa:b8:b5:54:64:c7:3d:
c4:49:10:4a:db:51:ef:0f:d2:ab:1e:5f:f0:95:61:66:fc:ce:
0c:8d:1a:5e:2e:cb:ff:52:78:53:7a:0a:b2:7b:1f:e4:e8:58:
73:ba:68:5a:d2:f8:27:25:37:12:e7:90:44:9e:0b:8a:1d:16:
ee:81:89:4b:eb:68:28:a8:6b:be:cf:bd:ea:4d:4b:1b:20:d5:
36:f1:84:c5:9b:0e:23:e3:60:3c:6f:18:39:ad:79:94:a5:cd:
73:1f:18:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:24:10 2025 by rpki-client