Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
File: TuBDL1Qp2GHXdDv8MdetAZYopes.mft (raw, json)
Hash identifier: BTdDQLpUvNh/6ON8cSmZdqgaYzZSSjuPxXzXSMv+Sdg=
Subject key identifier: 47:8F:FD:48:89:BA:C1:CA:F2:D0:64:61:09:A3:B1:63:DB:5D:C8:3F
Authority key identifier: 4E:E0:43:2F:54:29:D8:61:D7:74:3B:FC:31:D7:AD:01:96:28:A5:EB
Certificate issuer: /CN=4ee0432f5429d861d7743bfc31d7ad019628a5eb
Certificate serial: 0199228D1E562196E5679F905A3577720753
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 05:01:37 +0000
Manifest this update: Sun 07 Sep 2025 05:01:37 +0000
Manifest next update: Mon 08 Sep 2025 05:01:37 +0000
Files and hashes: 1: TuBDL1Qp2GHXdDv8MdetAZYopes.crl (hash: aEBlsu/Ep3vBzPcjYY4K5TkkR05TRQDpym4naJvRVQ8=)
2: V-oDOUzOLBq0RjtBmicPhW9GyFQ.roa (hash: iuJ5R7a61uv63vftS3TPCits4UE3OCvlD1Io0BilMuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:1e:56:21:96:e5:67:9f:90:5a:35:77:72:07:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee0432f5429d861d7743bfc31d7ad019628a5eb
Validity
Not Before: Sep 7 05:01:37 2025 GMT
Not After : Sep 8 05:01:37 2025 GMT
Subject: CN=478ffd4889bac1caf2d0646109a3b163db5dc83f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4b:5d:85:f5:ce:b7:b4:88:2d:81:46:05:8c:
1f:5b:c9:ba:1b:81:01:29:ec:18:e1:39:08:a7:32:
46:4b:25:0b:2a:73:d9:a0:8a:5d:9e:99:3c:45:f9:
12:f6:fa:b5:bc:91:36:f5:77:cf:87:44:c7:b7:b1:
b9:58:fa:2e:a6:4c:a1:fb:60:86:1b:b5:8d:63:f1:
5e:10:40:b2:51:e4:e6:9e:69:f9:af:ea:7e:68:6a:
bc:06:b7:27:ae:9c:32:a4:2c:2a:36:18:ba:e8:b3:
d3:ae:af:c9:ab:ec:91:7e:0c:a5:55:20:7c:5e:8c:
47:d3:c7:e7:2c:db:c4:a7:66:c4:92:c9:cb:b2:79:
25:98:9b:d7:0f:08:e3:e7:95:f5:59:6d:23:dd:f3:
a7:e6:65:a3:62:a9:fd:b4:64:e0:2a:18:0a:9e:11:
0b:b9:94:83:19:dc:76:76:b1:bf:53:dc:b9:20:ba:
a8:2a:08:8e:f3:c0:8b:1a:35:f4:a3:ad:45:97:ff:
07:01:f9:ba:67:bb:0a:29:0d:5a:72:87:6f:41:55:
98:9d:0f:de:d9:cb:f3:a2:16:b8:83:82:d9:c6:1f:
a5:0c:31:1b:0c:fd:2b:8b:ee:bc:41:5c:92:26:37:
35:c4:59:02:e6:2a:ce:ab:db:79:15:e7:19:23:45:
c9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:8F:FD:48:89:BA:C1:CA:F2:D0:64:61:09:A3:B1:63:DB:5D:C8:3F
X509v3 Authority Key Identifier:
keyid:4E:E0:43:2F:54:29:D8:61:D7:74:3B:FC:31:D7:AD:01:96:28:A5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:a4:53:43:95:c9:fc:04:7a:9e:2f:9b:24:e3:98:4b:d9:4b:
ff:a0:01:73:aa:1d:1c:fc:3c:4e:3e:4b:da:27:06:18:63:2d:
29:6f:ff:7a:82:26:57:bc:95:55:c8:9e:06:3b:07:31:1c:3e:
33:84:5e:72:15:c4:1c:c3:35:45:68:da:7a:a7:8e:bc:2a:22:
c4:8e:41:88:40:53:8e:11:e1:9e:00:51:f4:ec:41:f4:79:d2:
eb:73:a0:df:0f:2f:95:f1:7e:f6:04:7a:0a:4a:72:f3:4d:23:
04:55:a5:af:5a:d7:d7:d8:0f:96:40:6d:44:7d:bc:1d:79:8d:
d3:2f:f4:11:4f:86:66:3c:03:ab:f3:04:db:18:c2:70:cd:08:
22:78:54:7a:2a:d0:71:50:67:97:80:db:24:b3:0a:4c:9d:fa:
0c:97:7b:61:66:ec:44:67:78:2e:2e:60:d0:5c:5f:8c:ce:6e:
38:a9:3b:27:57:85:13:c4:38:6d:a1:e8:d7:5b:62:ee:11:0b:
19:ce:41:dc:b4:64:f0:e2:3c:e4:b1:20:1d:4d:a2:7f:92:08:
71:42:b1:cd:b1:30:7e:fc:34:55:61:f5:5c:35:29:4a:6f:53:
be:a8:94:c5:82:10:50:09:16:41:0d:cf:98:14:43:3e:98:6b:
64:9d:26:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:48:33 2025 by rpki-client