Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
File: TOdM9jcjwCadUoOxBlghrzhKmiY.mft (raw, json)
Hash identifier: M3iwcHLfDXagi5Vf7QbiuweR6wCqEQgP3KTn+QiWLRs=
Subject key identifier: 93:AF:DC:04:2F:4A:65:80:C0:54:93:D3:21:C9:30:E7:05:A5:65:1D
Authority key identifier: 4C:E7:4C:F6:37:23:C0:26:9D:52:83:B1:06:58:21:AF:38:4A:9A:26
Certificate issuer: /CN=4ce74cf63723c0269d5283b1065821af384a9a26
Certificate serial: 01982823531765CACDB0DA2CB66C3BBBBAC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
Manifest number: 0684
Signing time: Sun 20 Jul 2025 14:01:00 +0000
Manifest this update: Sun 20 Jul 2025 14:01:00 +0000
Manifest next update: Mon 21 Jul 2025 14:01:00 +0000
Files and hashes: 1: SILoOgzFVVKXYr4BeO1iAtaShUA.roa (hash: dPpD4jLPayYBOVInoYbVqKqufem4sI8eQUfot03I5EY=)
2: TOdM9jcjwCadUoOxBlghrzhKmiY.crl (hash: YlLvuiHhSS5pcLY7584JQMUKPh4CjoHFMTaUMDcgdpk=)
3: ysuILm8GTM9rr0tx4VWy1ub_M3Y.roa (hash: wnzsKo97TxUOdXYRLd6GXvYrsFQQtPcVycGoHAT6hoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:28:23:53:17:65:ca:cd:b0:da:2c:b6:6c:3b:bb:ba:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce74cf63723c0269d5283b1065821af384a9a26
Validity
Not Before: Jul 20 14:01:00 2025 GMT
Not After : Jul 21 14:01:00 2025 GMT
Subject: CN=93afdc042f4a6580c05493d321c930e705a5651d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:91:f9:ff:c8:40:65:6c:96:94:4e:fd:46:49:
07:39:41:4f:5f:d0:41:2c:93:3c:21:20:66:38:a0:
5a:5e:63:ae:be:75:ac:c5:63:3e:5d:c9:4f:08:9c:
7a:62:19:6e:4f:79:ff:53:1e:eb:c8:84:6e:15:38:
e6:33:ab:7a:8b:54:e8:85:1a:f8:16:a8:3e:7e:7e:
a9:7d:21:84:d8:23:ee:cb:ce:15:e1:72:23:b9:a3:
99:c6:a3:b9:96:7f:b9:f4:70:9f:a0:9a:28:96:41:
e9:e1:ba:0a:3a:4d:fa:9d:87:98:92:2e:92:e7:63:
1f:04:17:48:43:94:76:49:d5:15:eb:c8:b6:30:68:
ff:3e:db:53:ce:e2:00:92:27:02:ac:ce:09:d7:e6:
17:bd:93:3d:03:66:48:61:ff:bb:24:01:c6:af:28:
74:99:98:04:7e:f0:c6:ca:2a:03:a3:15:43:03:d6:
82:17:e2:86:c6:1b:bf:65:5d:85:cb:ae:66:5a:66:
48:34:02:e2:13:66:f8:e4:07:a1:a6:93:e3:24:57:
4d:94:05:85:33:bd:25:3b:50:91:75:3a:94:07:98:
ab:07:30:44:94:6e:07:56:e9:32:37:5b:ee:56:d8:
d9:0b:67:5f:aa:48:52:19:f5:e3:4b:29:70:bc:70:
b1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:AF:DC:04:2F:4A:65:80:C0:54:93:D3:21:C9:30:E7:05:A5:65:1D
X509v3 Authority Key Identifier:
keyid:4C:E7:4C:F6:37:23:C0:26:9D:52:83:B1:06:58:21:AF:38:4A:9A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:a0:ba:b6:4a:5b:7c:e2:16:c4:6b:58:67:06:7a:48:1b:72:
67:83:c2:2b:3a:e0:96:1f:22:c9:4e:47:cf:e7:68:de:97:04:
c5:5a:52:97:f0:db:dd:a0:40:81:da:56:72:46:07:4e:e4:e7:
ec:ed:9a:e9:39:53:31:e4:23:e6:b2:bb:43:a0:5f:e3:a0:df:
73:c8:3f:eb:92:89:9c:5c:30:0e:e6:4e:e4:37:d3:67:87:7a:
4e:3c:3e:9e:14:2f:a1:44:a9:f9:d7:f7:55:c7:d7:fe:81:44:
62:05:60:a4:c3:3b:ef:fc:c0:b6:2d:29:09:5d:30:48:54:89:
c7:ca:77:2d:98:10:8b:37:2a:68:21:6d:67:b3:45:bb:e8:40:
0e:65:24:8e:10:58:1e:f3:c4:bf:fb:0e:7e:d3:57:bd:e3:42:
1e:08:a0:ea:74:96:9d:87:4f:20:b2:62:9b:fd:50:af:3b:dc:
89:fe:72:8c:21:b7:25:f3:02:d1:c6:1b:be:40:33:7a:7b:59:
91:fe:70:38:06:e0:fb:1d:6b:c9:1d:50:be:70:3c:7c:19:62:
f5:1f:0d:b4:13:b8:75:bd:9f:4d:63:d5:c4:0b:57:e3:b1:6f:
d8:71:d9:9b:59:b5:34:66:0a:9b:48:8b:f5:bf:c3:ff:ed:d3:
df:ae:e5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:29:22 2025 by rpki-client