Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
File: TdbneabA8LCSFmIjgEZ9zi0Roxg.mft (raw, json)
Hash identifier: dmAFngOtIAJU5F/8kP6JauYCDBkUCGzpZbCuvJsLP/0=
Subject key identifier: 32:37:8C:EE:7B:60:BF:D8:C8:83:9B:8A:EE:3A:04:F6:E1:59:8A:20
Authority key identifier: 4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18
Certificate issuer: /CN=4dd6e779a6c0f0b09216622380467dce2d11a318
Certificate serial: 019746D4E60CE778C55A1932352E05837E3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
Manifest number: 150D
Signing time: Fri 06 Jun 2025 20:00:46 +0000
Manifest this update: Fri 06 Jun 2025 20:00:46 +0000
Manifest next update: Sat 07 Jun 2025 20:00:46 +0000
Files and hashes: 1: TdbneabA8LCSFmIjgEZ9zi0Roxg.crl (hash: tIxUHk1HY+rlo2U8nfik8AzM9yvivwWoKojKTbHVOLk=)
2: gjoyy0FPdmf2zrdNnLaoUXfqkA8.roa (hash: RTgHJsDHudCpwL05o4vGq9BVppolqh2KaIXjwJZDWfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d4:e6:0c:e7:78:c5:5a:19:32:35:2e:05:83:7e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd6e779a6c0f0b09216622380467dce2d11a318
Validity
Not Before: Jun 6 20:00:46 2025 GMT
Not After : Jun 7 20:00:46 2025 GMT
Subject: CN=32378cee7b60bfd8c8839b8aee3a04f6e1598a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6d:b9:af:10:5d:0b:f0:6c:d7:ce:7e:2e:95:
f5:cd:10:3d:fd:7b:7c:cb:12:a9:b0:99:30:0d:76:
18:3d:52:16:59:53:e1:68:32:ba:d5:c6:3c:1f:5c:
07:5e:54:72:37:b4:22:15:69:9f:9b:48:9e:d0:9e:
02:e6:b7:97:bb:5f:e7:a8:b1:6c:2b:01:cc:f5:e6:
a6:77:02:d5:82:e2:d6:36:92:d3:59:69:20:a0:c7:
a6:10:d7:88:da:c4:e2:65:7e:c6:84:59:fb:5b:62:
47:e3:93:9b:d2:aa:6a:dc:85:4b:eb:26:ee:38:41:
98:81:0e:13:ca:00:8d:f7:bd:68:14:cd:bd:0c:8a:
24:36:bd:7a:af:93:27:9a:cc:48:93:a1:20:d0:0d:
4c:67:54:f2:86:8b:85:61:e9:bf:44:b9:08:a5:ad:
27:64:ae:95:68:45:f4:2c:6a:e2:d4:51:7a:c2:d3:
bd:b2:46:42:07:98:a1:4e:01:3f:c2:8a:69:44:cd:
ab:e5:95:03:62:29:66:ae:fc:bd:21:ed:80:4c:ae:
e5:5b:e9:5a:e4:fd:fc:1b:ac:26:26:fa:d8:9a:0e:
e8:27:cd:82:73:2a:e0:e2:2d:e7:9a:a7:6f:6e:47:
a4:4a:67:fb:8e:88:b6:b1:5c:e1:b3:4d:1d:d2:00:
12:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:37:8C:EE:7B:60:BF:D8:C8:83:9B:8A:EE:3A:04:F6:E1:59:8A:20
X509v3 Authority Key Identifier:
keyid:4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:fa:f7:3c:7b:ef:6e:f2:c4:7f:0d:2f:d4:d6:7c:2d:fa:77:
87:5b:f8:18:c6:1b:f2:73:31:68:c3:5d:fb:20:5b:ea:d1:36:
bf:50:9a:78:9b:08:55:66:f4:b3:6d:e3:4f:0a:17:6a:b6:b6:
2e:6f:62:0e:36:be:10:31:f6:57:92:c3:df:dd:74:12:df:30:
75:8d:33:d7:b9:a9:58:9b:03:84:05:f2:51:d6:0c:42:b1:15:
ff:69:3e:c1:34:25:54:f4:cc:c8:cb:00:ca:1b:00:58:c1:84:
4e:b7:58:ea:83:b6:12:e8:8e:97:51:c8:10:af:7b:9a:fa:0e:
bf:1f:92:42:3a:ff:db:d9:c0:54:a6:9c:18:cb:b7:99:14:ef:
7d:d1:22:23:ab:99:8b:c6:06:7e:8d:3b:48:be:3f:b0:e1:8b:
fa:91:dd:96:8b:db:62:0b:a8:68:57:b0:c6:9d:ab:d0:1c:f5:
81:7e:b4:14:5e:68:d4:70:4d:5a:d8:12:87:5e:09:00:4b:08:
d6:ee:d7:58:98:b0:cb:aa:3e:6a:9a:e0:87:17:be:3a:8d:1d:
86:c7:e6:29:87:1a:15:1e:64:7a:86:41:34:35:d6:9e:84:77:
8e:91:f4:0a:0f:5a:1e:93:5a:f3:00:90:51:37:d6:ac:8e:35:
fb:8b:b9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:11:46 2025 by rpki-client