Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft
File: tuD-D69oRJiK8vdE1RbtucXf5xw.mft (raw, json)
Hash identifier: sS6o0GEbAk9abio/j2m3aRdIcMV46FJdtA/BGarI1PY=
Subject key identifier: 88:E9:23:91:E0:F1:4D:1C:97:80:2D:5A:D7:A3:F2:24:D8:E3:BE:C7
Authority key identifier: B6:E0:FE:0F:AF:68:44:98:8A:F2:F7:44:D5:16:ED:B9:C5:DF:E7:1C
Certificate issuer: /CN=b6e0fe0faf6844988af2f744d516edb9c5dfe71c
Certificate serial: 0199233128E62A6926858C21D318C0787637
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tuD-D69oRJiK8vdE1RbtucXf5xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft
Manifest number: 0DF9
Signing time: Sun 07 Sep 2025 08:00:48 +0000
Manifest this update: Sun 07 Sep 2025 08:00:48 +0000
Manifest next update: Mon 08 Sep 2025 08:00:48 +0000
Files and hashes: 1: a_PNkPnx5ou35JrpXNK2_iqC5Yc.roa (hash: iMkdGKK1MTR9CDFy5rjVtC+a2w/5myXmTmA9XTMLkJo=)
2: tuD-D69oRJiK8vdE1RbtucXf5xw.crl (hash: UTz15bp3Kgvm6L/LoykRkfBufSj1KxGPCX2JMtkpcrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tuD-D69oRJiK8vdE1RbtucXf5xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:28:e6:2a:69:26:85:8c:21:d3:18:c0:78:76:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6e0fe0faf6844988af2f744d516edb9c5dfe71c
Validity
Not Before: Sep 7 08:00:48 2025 GMT
Not After : Sep 8 08:00:48 2025 GMT
Subject: CN=88e92391e0f14d1c97802d5ad7a3f224d8e3bec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f7:d2:8c:17:de:c7:7c:ad:5f:91:06:0a:92:
03:07:13:7a:49:95:c6:4c:35:9e:aa:30:60:b9:ea:
3f:6d:3b:a5:72:1d:1b:7d:dd:75:23:3b:22:7d:77:
d1:9a:bb:df:c0:5a:4d:19:e7:ed:6e:9f:4c:9a:6c:
04:f2:20:35:40:9a:6f:43:c5:ed:7a:b5:e6:cc:0a:
36:f6:43:af:4a:ea:b0:df:32:d6:2f:4f:86:24:52:
71:10:62:24:2c:44:06:bd:2f:9d:22:99:45:b8:46:
a4:19:34:c8:fc:fd:fe:b1:67:b7:11:8d:7f:26:ec:
d5:cf:78:49:a0:0a:4e:ea:e0:5b:69:d0:eb:69:48:
25:33:37:4f:52:30:06:05:47:64:c6:29:ad:b5:90:
ce:24:79:69:c8:db:e4:4f:db:23:55:9d:fd:73:5f:
9c:5e:62:a8:0c:e6:87:dc:7a:0a:f8:e7:c9:81:c9:
38:ab:7d:a6:29:9e:00:64:db:62:a3:b5:c8:69:9e:
a2:7b:7b:01:7a:4d:6c:96:ff:01:9c:24:90:ee:40:
7b:cf:3d:c0:25:2c:96:89:8f:39:a8:14:21:87:7e:
0b:52:56:ae:b0:97:e6:84:11:7a:d4:a8:13:4a:f9:
c8:49:86:a6:c7:44:11:2f:ca:e7:e0:fe:ac:98:b7:
b5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E9:23:91:E0:F1:4D:1C:97:80:2D:5A:D7:A3:F2:24:D8:E3:BE:C7
X509v3 Authority Key Identifier:
keyid:B6:E0:FE:0F:AF:68:44:98:8A:F2:F7:44:D5:16:ED:B9:C5:DF:E7:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tuD-D69oRJiK8vdE1RbtucXf5xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:4d:c0:17:51:28:fb:15:95:12:21:84:56:5c:7b:b4:f4:90:
05:b6:17:ac:ac:2f:d6:2e:74:69:3f:44:82:44:29:e1:bc:b9:
97:b0:08:0c:48:c1:4f:12:06:37:5b:a2:c6:e0:5a:03:a7:9f:
4d:c0:ea:6f:d8:95:e2:48:b8:16:7d:f7:cd:f1:a4:72:d7:16:
04:a4:fb:b1:0c:66:7c:77:48:7b:ba:5c:8a:b1:55:c5:07:2e:
b9:6d:0e:0e:be:6f:9c:14:73:33:ff:61:83:fa:61:e6:8d:08:
39:6a:17:ef:6c:bc:67:25:c1:26:be:b2:23:3f:ae:e0:e3:07:
e1:8c:d5:20:94:83:db:3e:aa:ff:f7:66:ec:f7:6e:a2:ac:35:
b3:fe:88:20:cb:98:95:58:7a:1b:d5:17:54:aa:12:6b:9f:82:
a4:24:4c:57:8c:00:de:07:78:6e:19:4b:c9:69:cd:34:1d:ad:
9d:32:07:44:6b:23:00:82:9e:27:b0:3f:88:92:9c:24:50:ce:
1f:a4:f6:53:c1:64:ff:f6:2e:32:70:d8:41:89:66:73:55:dd:
37:1e:7d:ae:59:2c:8d:8f:6a:95:58:25:79:0c:52:52:4a:86:
1b:1c:79:9f:73:2f:c2:bf:d3:8d:22:3e:0f:d3:96:1f:b5:b7:
57:d3:f7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:27 2025 by rpki-client