Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/3a7e49-9d27-4e4e-aa36-6f6ccb6e2cda/1/Td0Pnc2IlJuPOjdxBjVioFdnkpA.mft
File: Td0Pnc2IlJuPOjdxBjVioFdnkpA.mft (raw, json)
Hash identifier: DOEUQ4NXiPMrR8E1UD3X9uel/tJKUD6QhWT6NjadNrs=
Subject key identifier: F5:2A:68:E6:4D:80:4E:1E:F1:3A:BA:EA:34:0B:6F:9C:0D:2F:B9:3B
Authority key identifier: 4D:DD:0F:9D:CD:88:94:9B:8F:3A:37:71:06:35:62:A0:57:67:92:90
Certificate issuer: /CN=4ddd0f9dcd88949b8f3a3771063562a057679290
Certificate serial: 019853B1F320F8A711C4E2BF62B93B5CAAB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Td0Pnc2IlJuPOjdxBjVioFdnkpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/3a7e49-9d27-4e4e-aa36-6f6ccb6e2cda/1/Td0Pnc2IlJuPOjdxBjVioFdnkpA.mft
Manifest number: 1608
Signing time: Tue 29 Jul 2025 01:00:27 +0000
Manifest this update: Tue 29 Jul 2025 01:00:27 +0000
Manifest next update: Wed 30 Jul 2025 01:00:27 +0000
Files and hashes: 1: Td0Pnc2IlJuPOjdxBjVioFdnkpA.crl (hash: L+OP0XQiXMnk8S05jiH8MxaXQD7nF9qMGb57BV+Wtp8=)
2: j2scll5jpWJtbLkshsiLm7lQWV4.roa (hash: oBr/N8q4deuJLs5MxsiKxc5IMYfXJKPf/aAvK/FNRFg=)
3: kZMSHFwhjt5ByeIL4QTKEiDJjZQ.roa (hash: WpstqOcmslj7HDAeoS/gg7u0eBQmjbTvTylTqyOzeKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/3a7e49-9d27-4e4e-aa36-6f6ccb6e2cda/1/Td0Pnc2IlJuPOjdxBjVioFdnkpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/3a7e49-9d27-4e4e-aa36-6f6ccb6e2cda/1/Td0Pnc2IlJuPOjdxBjVioFdnkpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Td0Pnc2IlJuPOjdxBjVioFdnkpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:b1:f3:20:f8:a7:11:c4:e2:bf:62:b9:3b:5c:aa:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ddd0f9dcd88949b8f3a3771063562a057679290
Validity
Not Before: Jul 29 01:00:27 2025 GMT
Not After : Jul 30 01:00:27 2025 GMT
Subject: CN=f52a68e64d804e1ef13abaea340b6f9c0d2fb93b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:28:ed:0d:71:13:b2:bf:61:b3:c8:4d:7b:34:
88:64:08:55:ae:15:b2:46:4d:3e:64:6d:c2:74:14:
4c:c6:c3:3c:4a:42:fe:27:01:2d:3b:ef:80:5a:a6:
2a:c7:50:18:64:69:fa:5c:d7:83:60:26:f1:12:16:
5a:8e:3d:ed:b0:1a:de:c1:66:90:33:35:1a:69:a7:
43:da:ef:d7:b6:9f:d7:3a:00:c6:df:40:4e:19:11:
16:ef:8e:63:fe:4d:28:e9:f0:6d:01:21:d6:0d:12:
27:8c:2e:c4:32:30:f8:d6:e5:ac:64:5b:34:78:df:
d0:d6:0d:9b:3e:8a:c6:ef:f8:9e:ba:d8:41:49:ce:
50:0a:91:77:06:4e:81:7d:a4:2e:08:be:75:5b:54:
cf:58:e3:b0:3a:c9:2e:e7:0c:50:9b:04:7c:10:db:
3d:76:73:0c:6a:90:a5:7a:4f:2a:5c:4e:91:e1:ce:
62:20:86:45:7f:9c:49:07:64:d6:68:42:12:70:4b:
fd:06:10:e6:c6:df:7f:36:cf:5b:9d:1a:aa:4d:96:
20:63:56:d5:4a:ea:39:7a:7e:ca:2a:96:bf:7f:f6:
40:73:e2:43:1e:6b:ab:d8:85:23:cb:d6:74:87:d2:
5b:2c:d1:20:45:dd:10:18:13:00:af:e5:6d:9d:43:
44:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:2A:68:E6:4D:80:4E:1E:F1:3A:BA:EA:34:0B:6F:9C:0D:2F:B9:3B
X509v3 Authority Key Identifier:
keyid:4D:DD:0F:9D:CD:88:94:9B:8F:3A:37:71:06:35:62:A0:57:67:92:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Td0Pnc2IlJuPOjdxBjVioFdnkpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3a7e49-9d27-4e4e-aa36-6f6ccb6e2cda/1/Td0Pnc2IlJuPOjdxBjVioFdnkpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3a7e49-9d27-4e4e-aa36-6f6ccb6e2cda/1/Td0Pnc2IlJuPOjdxBjVioFdnkpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ca:31:4d:41:56:50:cd:10:80:d2:8b:ba:4f:94:9b:30:b2:
31:77:90:b0:d4:9a:46:1b:56:1d:4b:50:15:d0:c7:af:30:cf:
d4:f7:a4:7d:42:0c:3d:2e:ee:9d:11:34:c4:4b:f8:94:ce:09:
a7:25:60:81:93:5d:2f:2f:06:1c:49:a4:57:2f:29:34:ba:66:
7a:d9:11:1d:17:9b:39:e6:20:c3:79:79:a4:a4:64:67:64:44:
7d:4b:93:18:ce:98:be:9c:05:cd:8c:bd:7c:eb:eb:56:0d:79:
83:30:91:29:3a:b9:bf:4c:17:fc:25:6f:17:11:59:87:7b:ae:
35:a6:51:b0:cc:48:d7:28:2a:ad:04:22:a4:7b:d1:70:32:b5:
12:bb:36:63:9a:b8:56:77:cb:85:42:d3:d0:90:cb:29:14:ad:
9c:08:99:da:98:14:5c:10:9a:f9:82:f4:10:21:27:d2:b6:a8:
bb:16:2c:15:85:34:90:03:af:c1:2f:be:e2:9f:0a:d9:0b:6f:
3c:f6:ba:45:b0:80:4d:e6:b6:da:ed:c3:55:2b:9c:96:f1:8c:
09:a2:fc:aa:e9:a0:a8:25:46:5c:f6:a3:94:06:80:2e:c3:5e:
c4:0b:ca:d1:b0:b0:9f:75:a3:cc:ca:ef:8b:95:63:0d:05:91:
cd:d1:ea:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:24:58 2025 by rpki-client