Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
File: tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft (raw, json)
Hash identifier: 8fnUaFGBI3wSpDIPJlSwLyN5HUaZeb/vRnEUMiKclrg=
Subject key identifier: D7:0E:DE:C8:5F:40:D9:1C:C6:01:EB:0D:B1:EE:4C:D9:0F:72:A1:6A
Authority key identifier: B4:33:42:F1:7D:54:A8:A3:DA:0C:E4:D3:18:B3:B4:C3:FA:05:93:E4
Certificate issuer: /CN=b43342f17d54a8a3da0ce4d318b3b4c3fa0593e4
Certificate serial: 019749D5D90F3961D16E6FE620088F5E8E72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 10:00:40 +0000
Manifest this update: Sat 07 Jun 2025 10:00:40 +0000
Manifest next update: Sun 08 Jun 2025 10:00:40 +0000
Files and hashes: 1: E5ldtRDNq7PF5yZrAMEvxowWuR0.roa (hash: 4L7DIoeLgHz0Qv5KkaEDn/KJszMLQY8xsxtNREAtJGQ=)
2: tDNC8X1UqKPaDOTTGLO0w_oFk-Q.crl (hash: 6Zp+obTl+SBVbJvm5KCxlOPtMjruUrYY0CSUM27zQWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:d9:0f:39:61:d1:6e:6f:e6:20:08:8f:5e:8e:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43342f17d54a8a3da0ce4d318b3b4c3fa0593e4
Validity
Not Before: Jun 7 10:00:40 2025 GMT
Not After : Jun 8 10:00:40 2025 GMT
Subject: CN=d70edec85f40d91cc601eb0db1ee4cd90f72a16a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:df:94:9d:7b:bb:a8:2d:19:bb:e2:e4:10:15:
20:d9:52:a2:79:72:79:fb:e3:50:14:8a:2d:63:fa:
b8:fc:e6:95:74:ca:23:aa:f3:a1:14:ab:21:69:08:
90:d2:78:a8:eb:5d:d0:1f:4f:49:f5:32:fe:ef:3e:
26:a4:83:76:05:ca:b6:b0:6f:1c:02:b2:a2:f4:3a:
45:36:2d:dc:c2:87:ed:4a:b5:40:4b:e3:85:53:d7:
87:3e:7a:72:40:8b:ad:a5:75:7b:8a:6e:f5:51:d7:
16:c6:40:ef:af:27:a2:78:67:5e:f9:91:05:ee:ca:
a8:af:bc:c3:14:28:1c:f7:75:da:f8:f1:d3:49:c3:
cf:2c:76:0d:c0:1c:55:54:5c:65:91:b0:ea:37:f3:
79:54:2d:84:d3:a5:77:fa:f4:fa:3d:66:62:03:82:
09:81:84:27:81:14:fb:74:27:b2:b8:58:b9:77:30:
52:7a:3c:0a:1b:77:f5:bb:89:ef:91:0f:fa:78:a4:
ee:14:50:67:53:e6:5f:de:7c:f0:6e:44:fc:88:36:
36:96:a9:21:b8:46:71:09:90:9b:fe:52:ec:0a:53:
e5:aa:da:ce:e1:87:25:80:91:8c:98:43:ee:49:f4:
a2:95:af:61:5b:b3:71:83:17:ae:f0:25:84:03:19:
0e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:0E:DE:C8:5F:40:D9:1C:C6:01:EB:0D:B1:EE:4C:D9:0F:72:A1:6A
X509v3 Authority Key Identifier:
keyid:B4:33:42:F1:7D:54:A8:A3:DA:0C:E4:D3:18:B3:B4:C3:FA:05:93:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:6c:45:9d:c2:9f:57:b1:59:d3:57:f1:10:c3:58:ec:76:bf:
f3:17:9c:a8:78:57:78:32:d1:a8:1e:73:b0:20:9a:5e:b1:76:
6b:d0:41:36:89:68:82:c7:eb:4e:fb:9c:0b:49:de:3b:ad:75:
c8:47:15:b7:d3:73:7a:dc:18:5e:b4:63:0b:e7:d0:5b:68:06:
4b:86:a9:89:de:9e:89:a9:a1:96:ec:da:54:54:ed:f0:31:95:
97:2e:20:39:82:ae:64:20:0f:be:bb:66:cb:d0:01:ad:4a:e4:
bb:ae:85:d9:e0:dc:f1:8e:f5:00:dc:bf:ed:71:40:0d:56:02:
1c:66:83:8d:45:15:e5:01:cd:19:dd:0c:81:72:4c:e9:50:36:
98:10:ce:05:d7:16:50:08:16:12:fc:d0:86:c3:46:4a:1c:9b:
f3:25:b6:85:fb:10:76:73:5f:10:5d:e6:86:ce:b4:70:dd:59:
ee:71:49:7d:ea:21:d6:ef:ea:2b:71:b1:b8:29:81:55:17:5a:
3c:b4:4d:5d:74:85:7b:77:9a:6d:e0:3f:f3:f4:90:28:10:77:
29:5c:08:43:76:e1:10:3d:c4:9a:5c:ae:f2:fd:6a:72:8c:a3:
42:cc:23:75:1a:e8:66:d1:b6:3f:5b:50:30:34:c9:b2:51:83:
2d:ef:29:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:27:13 2025 by rpki-client