Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
File: TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft (raw, json)
Hash identifier: 9brOXc3bjSpew2IKcyMBSErCybfF5ls7V+lN4Jd1MIc=
Subject key identifier: 4D:72:CD:06:41:B1:51:64:14:B0:B0:E5:58:6E:BF:3A:73:48:A5:54
Authority key identifier: 4C:39:05:5A:69:90:B8:24:08:CF:1A:BF:29:31:37:80:E2:49:A4:C9
Certificate issuer: /CN=4c39055a6990b82408cf1abf29313780e249a4c9
Certificate serial: 019845BF7C7C8638CE0E06F3AAC7FFFA8708
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
Manifest number: 1168
Signing time: Sat 26 Jul 2025 08:00:33 +0000
Manifest this update: Sat 26 Jul 2025 08:00:33 +0000
Manifest next update: Sun 27 Jul 2025 08:00:33 +0000
Files and hashes: 1: 0Y15xTEGHWqAVJeDnj84hoOI0tg.roa (hash: x9AqfYccJqcsHyWL4/sbLsYAD4D5JWU2OTOL9ya8Qzo=)
2: IYab2KOA6Rs-FvpcDRNq2DIlRwA.roa (hash: IVe8cPHTrjQPMjYgTeQH7fMCvrM38QVBDNRacJOqgtc=)
3: TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl (hash: DRguWbt2NMc14XeraGeqa6QwAVtP2Wj2Vq8QjsC0wbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:bf:7c:7c:86:38:ce:0e:06:f3:aa:c7:ff:fa:87:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c39055a6990b82408cf1abf29313780e249a4c9
Validity
Not Before: Jul 26 08:00:33 2025 GMT
Not After : Jul 27 08:00:33 2025 GMT
Subject: CN=4d72cd0641b1516414b0b0e5586ebf3a7348a554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f0:6e:74:63:76:74:2d:15:5e:26:30:df:9c:
ed:cd:04:04:cf:d2:1f:be:24:a8:8d:70:07:9e:d7:
27:a0:dc:26:10:8a:cd:34:6c:ec:7d:e8:27:2b:c7:
38:e2:3b:df:d9:a6:4b:b6:a7:73:47:6f:aa:03:50:
f6:be:79:62:d3:fc:fa:0f:e8:a0:b1:73:78:cc:fe:
bf:b6:f0:37:3b:a9:d8:70:1a:8d:95:4f:f5:e6:6c:
6a:e9:2d:69:96:1b:c0:6d:2c:0a:23:95:f3:b9:a9:
c7:b6:9e:ca:f9:c4:3d:46:f9:ab:f3:79:f1:52:47:
87:cd:93:46:90:4c:0a:d2:05:e7:a9:01:e7:8e:32:
f3:14:f5:8a:81:da:ec:fc:12:90:e3:6d:e6:88:65:
16:a7:4b:89:41:90:64:6b:13:29:f7:20:74:df:a5:
55:cf:83:54:3d:07:88:38:9d:5a:a9:ea:62:72:a0:
2d:0f:0a:1c:86:f4:7b:23:da:0e:ae:bc:07:2a:43:
64:70:ce:93:01:fb:01:c8:dd:25:ba:7b:40:3d:84:
31:28:83:27:ec:8b:4f:f7:11:87:2b:bd:cb:c7:13:
0c:af:7e:91:1b:de:13:27:07:48:dc:17:9b:cc:26:
2f:fa:43:6c:f0:00:87:f0:7d:2e:63:66:64:b5:6c:
3c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:72:CD:06:41:B1:51:64:14:B0:B0:E5:58:6E:BF:3A:73:48:A5:54
X509v3 Authority Key Identifier:
keyid:4C:39:05:5A:69:90:B8:24:08:CF:1A:BF:29:31:37:80:E2:49:A4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:d7:07:75:d3:ee:81:4a:4d:39:9f:e4:d7:7c:eb:4c:8a:a1:
be:fc:4e:91:ac:96:e7:83:28:77:4d:b6:eb:42:6b:33:e2:be:
fa:1e:65:0c:bf:47:6a:22:8f:7e:a2:08:95:61:88:39:44:96:
2d:e8:e6:91:b4:5d:0b:9f:bc:5a:ac:c6:9d:4d:61:08:4f:18:
e6:2a:8e:37:e2:6d:9e:b1:8e:f4:40:dc:02:3a:26:a3:2d:c2:
44:26:b3:3e:70:8b:17:f4:c3:92:ae:1a:4b:5d:ea:e2:d1:09:
b7:3e:fd:ef:71:20:42:db:c5:f5:1f:62:06:06:91:94:f1:b1:
f3:fb:4a:9f:6f:ce:15:d3:1f:85:37:67:aa:ad:e7:ce:9c:d9:
a2:91:f8:95:0b:02:42:05:b1:07:8a:6e:58:74:60:39:18:b7:
63:a2:f6:20:18:6f:75:86:2a:ae:e4:9a:4d:54:85:88:97:e4:
58:6e:87:c5:d1:73:ee:ba:89:d1:e4:2f:1f:fc:9e:0e:f5:fc:
6a:4c:0c:92:f0:bf:ec:50:46:b0:cc:79:fc:30:66:30:f8:b1:
09:40:5b:60:df:3d:1a:d1:0a:7b:a6:97:8f:3f:4b:87:e7:d3:
15:52:3c:f6:05:b5:2c:17:ab:60:02:3b:82:b5:93:a3:32:ce:
13:21:40:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:57:43 2025 by rpki-client