Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft
File: TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft (raw, json)
Hash identifier: 1cb1KTRVgLFpJ0PKbk8TxkhKdgk3aLCpL49Gqduy48M=
Subject key identifier: 8F:42:3E:63:39:FD:A1:C5:E8:82:79:00:E3:FC:8B:B4:95:AE:16:1F
Authority key identifier: 4C:33:C0:E1:4D:57:EA:BC:3B:65:E3:8A:77:36:BE:BE:49:09:2E:9E
Certificate issuer: /CN=4c33c0e14d57eabc3b65e38a7736bebe49092e9e
Certificate serial: 019827108C90ADB751A3F9A9ACECFB310011
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDPA4U1X6rw7ZeOKdza-vkkJLp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft
Manifest number: 0D34
Signing time: Sun 20 Jul 2025 09:00:52 +0000
Manifest this update: Sun 20 Jul 2025 09:00:52 +0000
Manifest next update: Mon 21 Jul 2025 09:00:52 +0000
Files and hashes: 1: TDPA4U1X6rw7ZeOKdza-vkkJLp4.crl (hash: p75DQXUJZv2sW7itHu0gVOZva8bqB54MgLysKBFmSt8=)
2: k_nIf6wVx1Xdxat4zYtnBqTL13Y.roa (hash: HaoM7rJ6dUREUsX3C7dLkVUY9dcgJCaHV1PnH/ISMtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDPA4U1X6rw7ZeOKdza-vkkJLp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 09:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:10:8c:90:ad:b7:51:a3:f9:a9:ac:ec:fb:31:00:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c33c0e14d57eabc3b65e38a7736bebe49092e9e
Validity
Not Before: Jul 20 09:00:52 2025 GMT
Not After : Jul 21 09:00:52 2025 GMT
Subject: CN=8f423e6339fda1c5e8827900e3fc8bb495ae161f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6c:d8:be:61:15:ec:35:14:fa:b5:4b:08:f6:
91:98:fe:8a:05:3a:72:49:c9:3b:d9:9f:12:ff:76:
11:7a:10:d6:aa:d2:4c:63:75:08:f6:83:96:67:99:
43:4f:ad:ab:23:e0:ef:b9:59:3c:af:3f:92:66:8f:
33:71:1b:2e:e5:a1:d5:e8:84:51:05:82:de:23:84:
30:45:7c:43:f4:73:80:90:1f:4e:56:05:7c:7d:6a:
2b:5f:df:7e:ca:bc:8e:d8:09:41:2a:54:e6:23:ed:
8e:c5:fb:b0:36:62:c8:19:9a:5f:1f:fe:6f:33:a4:
87:ea:e7:c5:d9:5d:43:04:cd:24:cf:e2:df:4b:a8:
08:df:81:cd:12:09:e1:9c:5e:67:aa:e1:a4:4e:fb:
88:32:52:4d:eb:a0:3c:4c:ab:b8:7e:4a:88:30:53:
3d:4d:e6:01:55:e5:27:b8:85:ff:8a:d6:e2:20:f0:
60:57:6a:5f:c0:88:74:ef:25:08:18:ab:08:1b:4c:
64:3e:9e:07:5f:6b:30:c9:8d:85:39:de:ce:f0:54:
b3:01:2d:a8:03:d8:5d:eb:0c:52:52:ff:15:d9:1f:
bf:81:43:1e:95:a4:e5:d9:9b:63:37:e0:55:52:b6:
c9:db:e8:b8:b6:97:0f:b2:2c:9a:8a:28:a8:aa:99:
25:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:42:3E:63:39:FD:A1:C5:E8:82:79:00:E3:FC:8B:B4:95:AE:16:1F
X509v3 Authority Key Identifier:
keyid:4C:33:C0:E1:4D:57:EA:BC:3B:65:E3:8A:77:36:BE:BE:49:09:2E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDPA4U1X6rw7ZeOKdza-vkkJLp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:34:ac:de:a3:0a:75:f9:94:dd:24:f0:5f:8e:0e:67:6e:9c:
63:0c:67:a8:b3:b9:ae:d3:22:3b:b3:1f:46:ab:7f:d7:56:90:
d0:fa:0d:87:2f:6b:2b:44:e1:d3:23:fa:01:2d:70:37:15:de:
a7:7e:42:bf:79:81:7c:af:b7:e9:48:0e:7a:5b:19:7e:d5:07:
2e:d3:ce:98:28:07:28:27:55:ea:22:4f:1c:9c:d9:f7:60:1f:
a2:7b:26:a8:ae:47:84:c2:6f:00:6f:37:15:4c:e1:8d:d1:fa:
fc:c0:05:1d:05:1e:e1:ff:03:18:9e:05:77:19:af:cd:08:17:
04:99:45:6d:28:08:6a:54:9b:b9:dc:44:3b:98:ca:14:c5:ea:
74:ac:35:f7:37:7a:aa:a6:48:8a:a5:92:20:98:49:08:37:03:
5c:a6:75:1f:16:11:af:61:df:e8:8d:1f:7a:58:c8:fa:92:36:
fb:90:c6:ce:22:59:ce:a4:07:dd:e6:13:17:0f:ff:fc:5d:42:
1e:d5:02:47:55:a2:a0:34:f3:1b:c5:86:7b:94:1a:7a:60:73:
26:d5:3e:c7:43:06:f6:32:11:f5:88:a0:ca:a8:51:ed:b2:95:
db:28:f1:6b:f0:ae:fa:4a:39:66:b4:98:25:2a:0f:a7:28:e3:
9b:c8:a0:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:21:08 2025 by rpki-client