Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
File: TdbneabA8LCSFmIjgEZ9zi0Roxg.mft (raw, json)
Hash identifier: +DmYCRXL070BOYFXBN9r5AtGbOzbD2jpoDpZrS9Hoy0=
Subject key identifier: 00:D0:35:B4:F8:68:F2:99:63:5A:7E:FC:19:94:2C:AB:A0:37:0C:FD
Authority key identifier: 4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18
Certificate issuer: /CN=4dd6e779a6c0f0b09216622380467dce2d11a318
Certificate serial: 01984B8AB16DB06CFF3FB76D8513992A66D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
Manifest number: 1594
Signing time: Sun 27 Jul 2025 11:00:37 +0000
Manifest this update: Sun 27 Jul 2025 11:00:37 +0000
Manifest next update: Mon 28 Jul 2025 11:00:37 +0000
Files and hashes: 1: TdbneabA8LCSFmIjgEZ9zi0Roxg.crl (hash: /awLeVJ0dnKYo7P3/T+LDo5WvLcyNlgCxSu9pwZ/+Ps=)
2: gjoyy0FPdmf2zrdNnLaoUXfqkA8.roa (hash: RTgHJsDHudCpwL05o4vGq9BVppolqh2KaIXjwJZDWfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:8a:b1:6d:b0:6c:ff:3f:b7:6d:85:13:99:2a:66:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd6e779a6c0f0b09216622380467dce2d11a318
Validity
Not Before: Jul 27 11:00:37 2025 GMT
Not After : Jul 28 11:00:37 2025 GMT
Subject: CN=00d035b4f868f299635a7efc19942caba0370cfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ac:d4:38:65:2c:a4:89:36:ab:83:b1:a4:a7:
01:ba:e9:31:59:f5:99:1c:2b:5e:ed:a1:6e:42:43:
ed:d6:5a:00:0a:db:70:12:55:b4:b5:15:ae:7e:39:
5e:91:05:74:d2:fc:b5:1f:5f:96:52:2a:3d:99:22:
60:0b:61:e9:53:3c:30:d2:a1:11:37:eb:ba:5a:ad:
63:14:42:7a:a3:95:72:14:67:25:0e:18:35:7e:0e:
2a:a9:ed:18:ef:cc:e4:b2:9e:6c:23:c7:f1:2b:45:
3b:48:57:87:c0:2e:7d:98:9f:b7:8c:a9:36:03:a4:
95:6d:30:2d:a6:59:f7:12:4e:a4:dd:7e:da:37:df:
ad:cc:13:ef:ed:d1:5b:80:b6:f8:e3:85:12:0a:1a:
08:42:e5:7b:ea:e8:d3:a1:76:34:93:48:cb:5b:f7:
68:8f:0c:90:03:e8:26:52:21:ab:0a:e8:b3:80:a1:
6f:a6:d8:2d:9c:3d:ee:c3:72:0b:ee:b8:aa:e2:3b:
25:88:0f:b7:9e:37:cd:8f:2f:f8:7b:2e:3a:61:a3:
39:2f:2b:3f:ff:57:45:4f:31:dc:c1:8e:4e:16:7a:
ce:ab:aa:16:46:fb:23:20:93:f7:c7:d0:31:69:c4:
95:3c:00:3e:ae:63:cf:a4:a8:63:50:15:27:ff:c8:
9c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D0:35:B4:F8:68:F2:99:63:5A:7E:FC:19:94:2C:AB:A0:37:0C:FD
X509v3 Authority Key Identifier:
keyid:4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:1a:03:10:3d:e7:08:70:8e:8c:8a:f3:d0:79:fc:38:70:3d:
46:dd:a3:0c:7c:9d:4c:69:c5:36:7f:ff:17:ce:73:53:7a:5e:
a2:7b:40:3b:00:3d:11:9d:27:69:22:f8:b0:3b:ce:74:ba:02:
e8:6c:99:4f:25:49:2d:53:ec:3b:a3:63:06:9a:82:5a:11:43:
fc:92:db:ac:a9:9c:36:ab:90:fd:28:cb:93:5a:b4:73:a9:4a:
21:43:5c:59:3a:25:9a:83:8d:c8:62:c9:39:9a:ba:52:b1:d1:
1e:dc:31:d0:d4:14:76:ab:81:35:37:0f:0b:ac:8d:71:2d:cc:
87:a9:c9:4a:55:03:a2:e9:6c:21:bf:66:c4:a3:14:97:c6:ee:
a8:1d:09:e9:36:0a:24:23:bf:3e:ca:64:d8:94:f4:19:c1:e1:
1e:bf:9c:06:85:1a:84:1a:68:6c:3b:ac:16:84:f1:10:75:98:
a2:4b:00:e1:37:d9:c9:12:26:07:ef:e4:4c:6d:80:41:b0:80:
69:af:f1:93:86:47:99:31:7a:e6:48:1b:0a:8c:50:a5:19:4d:
ff:0b:1e:92:b0:a4:52:f4:4a:df:52:1f:8c:80:00:b9:90:b9:
63:67:cc:e4:0d:bc:50:2f:44:39:5a:b4:80:16:1a:d2:f3:df:
4b:61:4a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:08:49 2025 by rpki-client