Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
File: TDn4uP66ttIJokmB45n9YEMuHMk.mft (raw, json)
Hash identifier: i/p9HTwj9TxO4RXKe0E6l31edHsHA8orEAxYm7tYnjw=
Subject key identifier: 1B:DF:68:AA:B1:61:AD:91:11:40:79:F9:B0:E7:D8:3B:3F:74:F2:BB
Authority key identifier: 4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
Certificate issuer: /CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Certificate serial: 01983E3D7A514BA46F2673E3B818B3DC2474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
Manifest number: 0A67
Signing time: Thu 24 Jul 2025 21:01:13 +0000
Manifest this update: Thu 24 Jul 2025 21:01:13 +0000
Manifest next update: Fri 25 Jul 2025 21:01:13 +0000
Files and hashes: 1: BGPcLkk4F9FLxsMbGn-M_F2CXto.roa (hash: PqbiTHE+O2cRLL+2/Q85oltHntGJN/X4GOAuPJ95eug=)
2: TDn4uP66ttIJokmB45n9YEMuHMk.crl (hash: LNthPS10qi3MMKSbLeaohBoPTEmWPtSL82I8A8MweJs=)
3: nGObtVTwcFKea1knaujpvqhbims.roa (hash: l9jwJiOaQQcxbUJC1OWeTnOmsW+JZFElguXsrGzJSD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 21:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3e:3d:7a:51:4b:a4:6f:26:73:e3:b8:18:b3:dc:24:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Validity
Not Before: Jul 24 21:01:13 2025 GMT
Not After : Jul 25 21:01:13 2025 GMT
Subject: CN=1bdf68aab161ad91114079f9b0e7d83b3f74f2bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:eb:0c:1e:8f:bb:48:3f:69:69:e3:36:c5:56:
78:38:1c:6c:48:32:2f:98:83:23:ee:94:33:40:9f:
83:a9:c9:5c:67:4b:be:4e:ff:7b:57:89:07:0c:66:
d8:14:6f:97:7a:9c:0d:29:37:80:66:6f:b8:f2:98:
2b:3f:7e:ac:6f:c6:4b:02:6a:c8:03:cb:4c:67:f2:
a6:49:50:bf:1c:b4:d8:59:3c:94:65:60:9f:93:27:
da:c8:a7:95:71:fe:96:ac:fe:2b:5a:d8:aa:72:81:
98:fc:f1:dc:8a:66:f1:61:60:fe:5e:5a:21:19:d2:
0e:68:3d:29:0f:36:5e:3c:0e:65:5c:bc:1e:79:3a:
ee:7d:f9:91:e8:ad:93:1e:46:16:61:82:38:25:a3:
7f:c8:8a:de:50:56:cd:cb:90:50:02:34:56:81:eb:
95:61:e2:d2:ad:f1:ef:35:bd:f8:a0:90:c5:68:71:
c6:8e:f7:25:5b:f2:68:b3:92:a3:fe:02:bc:b2:09:
79:19:7e:4d:89:f1:ac:6a:f0:ca:82:21:f8:7a:97:
c0:5e:b4:93:64:4f:a4:4b:eb:95:b4:1d:01:2f:9f:
5c:c3:18:9a:cb:b6:00:61:b8:63:0d:1d:15:79:aa:
d7:60:72:ea:7a:22:24:50:58:0d:bd:0f:bd:55:27:
68:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:DF:68:AA:B1:61:AD:91:11:40:79:F9:B0:E7:D8:3B:3F:74:F2:BB
X509v3 Authority Key Identifier:
keyid:4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ee:f9:2d:17:34:d6:d2:39:0f:f5:75:ab:72:23:8e:ca:df:
f9:eb:bb:df:aa:88:20:5e:a1:82:1f:4d:3c:14:e1:a5:d8:a2:
fc:d6:9c:ed:60:c0:f7:c7:fd:33:a5:e5:93:6d:bb:a9:a2:e7:
42:03:73:0e:0f:ed:75:1d:e0:5c:6a:7d:58:ee:f5:89:6e:93:
75:ef:13:74:ee:7c:c0:47:93:18:f4:a9:52:b2:e8:d8:fd:03:
22:21:40:96:06:14:f5:f3:30:a6:49:a6:49:75:af:fa:a1:e5:
c3:5e:2a:46:8d:d4:96:40:a9:32:ee:73:60:10:58:f0:b7:56:
c7:99:0a:26:4e:b3:24:d9:aa:5d:17:4f:2c:d3:26:c3:e1:55:
5d:b8:bd:22:48:60:f0:3b:9f:16:91:21:8c:0e:7a:94:65:04:
d4:4b:41:22:3f:ba:c4:e9:04:29:e9:2f:87:53:ad:ee:a8:0d:
d8:7c:bd:a6:f8:f7:5a:1a:57:3a:e2:2a:10:bf:58:ea:af:08:
08:55:ae:c5:8b:6e:86:e3:ca:07:ca:2a:52:77:ef:6e:2e:dc:
96:ea:71:e5:c0:4c:b8:f9:f9:7f:62:65:cb:38:09:8a:55:21:
47:e7:43:cc:19:ac:cf:e5:a0:72:32:62:ec:5c:63:e2:69:24:
0e:d1:56:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:55:47 2025 by rpki-client