Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
File: tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft (raw, json)
Hash identifier: B1Vq9X1RYP+sxLmLRYkvfrOBV8JAmOU5cSZhwlTlgh0=
Subject key identifier: B5:02:A9:88:5E:D4:18:6C:A1:65:2F:6E:9A:BD:40:ED:DF:5B:EE:B3
Authority key identifier: B4:33:42:F1:7D:54:A8:A3:DA:0C:E4:D3:18:B3:B4:C3:FA:05:93:E4
Certificate issuer: /CN=b43342f17d54a8a3da0ce4d318b3b4c3fa0593e4
Certificate serial: 019922FAD4EB0ADA3B350CF3F9EF1B5727AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 07:01:27 +0000
Manifest this update: Sun 07 Sep 2025 07:01:27 +0000
Manifest next update: Mon 08 Sep 2025 07:01:27 +0000
Files and hashes: 1: E5ldtRDNq7PF5yZrAMEvxowWuR0.roa (hash: 4L7DIoeLgHz0Qv5KkaEDn/KJszMLQY8xsxtNREAtJGQ=)
2: tDNC8X1UqKPaDOTTGLO0w_oFk-Q.crl (hash: 3m/3jY5gTaENxaT29dqbwogMbLF4jPRNMQQGACZJ2xU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:d4:eb:0a:da:3b:35:0c:f3:f9:ef:1b:57:27:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43342f17d54a8a3da0ce4d318b3b4c3fa0593e4
Validity
Not Before: Sep 7 07:01:27 2025 GMT
Not After : Sep 8 07:01:27 2025 GMT
Subject: CN=b502a9885ed4186ca1652f6e9abd40eddf5beeb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:49:96:c2:84:5c:cc:16:8c:3a:88:87:6a:5b:
70:33:0b:7c:88:0d:99:8d:eb:3b:71:63:9c:54:8c:
08:9d:4c:b5:42:ec:61:c8:70:2a:f1:30:ea:5e:ae:
75:d7:f3:1c:aa:55:8a:ca:29:37:ca:51:b9:ce:1c:
1a:b4:af:ed:b6:84:58:86:43:19:92:72:76:d7:2a:
5c:2e:db:66:be:f8:d3:ae:b5:1c:79:74:9b:93:91:
8b:07:ce:a0:67:a4:4b:cc:a9:4e:14:38:8c:0a:a6:
8d:e5:46:5c:7f:4b:28:7b:72:3c:19:c1:79:7e:aa:
db:7b:ab:be:91:0e:db:75:a2:14:9b:52:81:02:15:
b0:7b:91:e5:9d:a7:ec:8e:1d:d2:5a:28:75:36:05:
54:c7:89:4d:38:c2:7d:3a:ff:84:1b:c5:28:03:c0:
1d:14:40:9f:06:bf:0d:33:f1:0a:f1:12:c4:17:24:
6f:4e:e0:a1:aa:30:3c:a5:ff:9e:1c:97:92:0e:48:
c8:d0:49:9a:d0:4a:e3:28:75:77:20:38:43:e3:55:
a9:80:fa:74:4f:fa:94:fa:71:03:15:0a:d1:45:6d:
d9:82:75:ec:e8:ec:61:6b:c9:52:01:35:1a:f6:ff:
eb:97:24:53:2c:6a:15:51:3a:37:e3:24:4d:db:66:
65:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:02:A9:88:5E:D4:18:6C:A1:65:2F:6E:9A:BD:40:ED:DF:5B:EE:B3
X509v3 Authority Key Identifier:
keyid:B4:33:42:F1:7D:54:A8:A3:DA:0C:E4:D3:18:B3:B4:C3:FA:05:93:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:a3:17:c4:b4:a6:d4:e3:0f:a6:6d:6d:06:ef:69:4b:73:0e:
51:97:1a:da:39:2c:a4:76:60:cc:bc:9b:4b:4f:1c:24:7e:f2:
c9:e6:3d:13:cd:36:b0:9f:87:b6:83:86:ff:40:34:d6:14:1e:
28:7c:c1:ec:ea:ae:b7:04:55:48:2a:4d:91:55:eb:17:6f:5c:
54:b4:82:46:bf:08:af:da:a5:98:a3:1c:11:15:b1:9b:40:aa:
69:50:e5:ce:5b:fd:50:28:29:3b:9e:86:03:75:16:af:75:56:
02:b0:03:6b:15:1f:46:c0:8d:4d:5d:22:ef:2a:db:e4:39:f7:
ea:16:50:2a:9c:61:7e:f5:9b:7b:89:e2:12:c4:56:61:5f:79:
ae:dd:dd:19:0f:37:d4:14:34:a2:aa:6a:7a:5c:af:04:48:bd:
02:37:db:cd:16:e6:ea:19:16:d3:c8:f2:aa:6e:1e:26:dc:90:
12:2c:81:68:ef:50:54:d9:48:e4:1b:83:7b:1c:44:42:f2:c6:
1f:84:4f:33:2b:45:a7:55:2e:cc:4f:4d:57:80:a9:f3:b4:f8:
2f:0b:ff:b1:41:01:5b:f2:23:f4:87:4b:cc:75:5e:15:b6:44:
4d:33:18:e0:0e:ba:f7:9a:cb:ed:12:b8:36:db:15:ea:fe:16:
3d:fb:a1:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:22:58 2025 by rpki-client