Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
File: TDJWN81N6a_lO9TxIav2IkX2cU8.mft (raw, json)
Hash identifier: Al/18s2v85E5Bm3n7uf9Artbv5joR34HyhxPrcePQNI=
Subject key identifier: 77:74:FC:84:48:BD:53:91:93:24:FA:AE:64:B6:B9:A8:6B:BE:EE:A6
Authority key identifier: 4C:32:56:37:CD:4D:E9:AF:E5:3B:D4:F1:21:AB:F6:22:45:F6:71:4F
Certificate issuer: /CN=4c325637cd4de9afe53bd4f121abf62245f6714f
Certificate serial: 019849D3BC5838DE4E72B6064DCD18D3F7BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
Manifest number: 06F6
Signing time: Sun 27 Jul 2025 03:01:09 +0000
Manifest this update: Sun 27 Jul 2025 03:01:09 +0000
Manifest next update: Mon 28 Jul 2025 03:01:09 +0000
Files and hashes: 1: LYDDQOnitFMTtAyGKwDs2TyB_cA.roa (hash: sjSPKMVEsY4HYjeMnDvZAekbl4IrY01T9jduMhK7Jbc=)
2: TDJWN81N6a_lO9TxIav2IkX2cU8.crl (hash: xhPXBbMXcX7K5yEuevIbq35U3w8kW4zGX7aOb/b7150=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:bc:58:38:de:4e:72:b6:06:4d:cd:18:d3:f7:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c325637cd4de9afe53bd4f121abf62245f6714f
Validity
Not Before: Jul 27 03:01:09 2025 GMT
Not After : Jul 28 03:01:09 2025 GMT
Subject: CN=7774fc8448bd53919324faae64b6b9a86bbeeea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:13:b7:16:62:cd:83:bf:27:c7:02:2b:bb:e5:
4a:a0:2d:34:c2:ef:02:5b:46:07:b9:b5:4c:18:1e:
3c:bd:3e:d9:b0:7f:aa:69:bb:68:ef:7e:69:cf:7f:
ab:29:d6:cb:54:18:42:b7:22:5b:74:80:92:9e:1e:
55:db:92:d4:6d:06:f1:9e:5e:9c:ba:87:63:63:5b:
31:46:79:12:49:f2:00:09:3f:02:57:db:e4:de:34:
7d:8f:eb:40:9f:44:a3:ae:08:f8:84:a8:bf:7e:6f:
78:28:d2:66:36:d7:7e:b1:25:dc:9d:45:45:1c:0f:
c5:e5:4b:6d:36:d0:6e:bc:89:1b:8b:ab:6d:9e:fe:
67:e8:8c:bd:c0:0f:14:bf:cf:e4:b3:f3:fa:c2:a3:
53:df:6d:ec:73:a0:56:55:8c:9d:fd:7e:b4:4f:ae:
48:d3:69:3b:60:e6:64:b2:a7:0a:30:82:59:a8:c8:
f0:a5:36:f4:fb:9b:54:56:ae:a2:8b:e1:7d:5d:72:
6d:09:fb:e7:f5:c1:cb:70:87:c1:41:50:38:2c:d7:
43:b2:a4:f8:fe:ad:a1:ec:00:36:da:d6:7c:49:84:
21:37:e3:a3:7f:57:33:5a:aa:0b:30:09:e4:28:64:
58:f2:c2:dd:35:07:98:29:89:44:21:b3:ba:c5:23:
54:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:74:FC:84:48:BD:53:91:93:24:FA:AE:64:B6:B9:A8:6B:BE:EE:A6
X509v3 Authority Key Identifier:
keyid:4C:32:56:37:CD:4D:E9:AF:E5:3B:D4:F1:21:AB:F6:22:45:F6:71:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:53:6f:eb:a9:95:26:a1:65:71:63:49:35:27:3b:c0:73:69:
ee:c3:5a:ca:01:d6:82:b4:79:81:a7:53:3d:cc:66:5b:e3:12:
8c:7a:de:2b:01:4c:e0:25:fc:48:7a:8b:e8:09:22:a4:0b:5e:
0b:bf:27:46:b9:34:7a:d4:0c:96:63:3e:07:d5:de:37:be:13:
a9:7b:13:d0:19:86:3d:8b:e8:72:27:65:bc:6c:49:82:47:8b:
94:ea:a0:56:a8:35:51:e9:0f:c7:16:1b:ba:19:dc:55:15:03:
c6:79:56:2d:de:de:d2:d4:29:a6:c2:0d:38:71:8b:e6:9e:dd:
64:43:64:29:ac:86:23:ef:98:98:e0:26:05:64:7b:e2:ef:c0:
d7:d9:11:46:70:7d:8a:a2:bc:50:69:bd:1f:25:10:c7:8e:86:
a2:08:39:a3:52:d1:ed:46:58:cf:45:47:0e:34:b3:ee:57:40:
b8:cb:6b:81:2f:ae:ee:98:3c:cb:db:b4:b2:d4:19:2b:d7:31:
b1:46:e9:09:3c:d8:3b:3e:35:0b:df:98:4d:48:a5:70:6c:22:
79:8b:c6:35:45:89:88:76:71:cd:e4:75:77:7d:40:0b:29:ec:
2e:e3:5c:bd:52:8f:b6:76:97:5c:34:e8:a9:51:15:e0:45:a2:
8c:c7:0c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:39:19 2025 by rpki-client