Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
File: TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft (raw, json)
Hash identifier: sh2igX2+ijOatmPSKakW2Lu2Msub8AtPV7g9fnxUaxQ=
Subject key identifier: 38:23:51:1C:71:F9:1D:99:AC:04:81:AB:3E:9D:EE:28:9D:60:F6:46
Authority key identifier: 4C:38:A3:06:A3:7E:E8:7B:EB:FF:72:36:55:3E:0D:3C:B6:72:CD:17
Certificate issuer: /CN=4c38a306a37ee87bebff7236553e0d3cb672cd17
Certificate serial: 01974B8DA17D08196AEA1C1EF45373559CBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
Manifest number: 53
Signing time: Sat 07 Jun 2025 18:01:02 +0000
Manifest this update: Sat 07 Jun 2025 18:01:02 +0000
Manifest next update: Sun 08 Jun 2025 18:01:02 +0000
Files and hashes: 1: 54qil-gtsg-VmWMUKBbSoP89Sh4.roa (hash: +lFuYFZIeWq9AFirWvNO/gLe0U+wLrmb+nny8MFDRhE=)
2: TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl (hash: t8jUrDtgTVIUWgJPGVuZGKHtIF4cYfQ0RoP67QliQys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:a1:7d:08:19:6a:ea:1c:1e:f4:53:73:55:9c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c38a306a37ee87bebff7236553e0d3cb672cd17
Validity
Not Before: Jun 7 18:01:02 2025 GMT
Not After : Jun 8 18:01:02 2025 GMT
Subject: CN=3823511c71f91d99ac0481ab3e9dee289d60f646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7e:aa:7d:55:de:7e:f9:d1:4f:5d:1d:23:35:
84:6b:89:d1:c5:71:33:8a:8e:7b:6d:ff:64:13:ca:
c1:ac:c4:f7:13:79:47:31:68:ab:0b:45:ff:a0:71:
92:b5:fb:71:de:a0:3a:ff:38:84:26:f2:05:8b:5e:
06:bf:51:30:68:13:d1:36:73:93:ab:9e:e4:35:47:
fe:9a:48:69:b5:ef:20:b6:99:af:22:01:18:22:9b:
3e:98:64:96:d1:f9:c3:27:e2:8a:41:27:a4:ad:42:
04:45:74:30:68:39:59:cc:07:4c:4e:09:5d:c2:f5:
e8:63:b8:9c:a4:7d:cd:4c:4e:33:f9:25:6a:c1:e3:
49:ad:e6:6b:9d:df:bf:95:ec:ca:c6:35:58:97:ad:
f3:0d:2a:3a:db:25:13:4f:0d:3b:2f:ec:b6:a1:64:
c7:1f:22:41:2c:99:0f:f7:34:ed:61:71:a6:bd:89:
92:10:de:22:7f:7c:dd:a9:a2:04:c7:12:99:07:3a:
87:1c:5e:71:fc:7e:ad:e8:46:75:8a:48:ea:66:09:
02:a8:14:91:ba:c0:2d:21:cd:8d:86:68:06:52:52:
7a:57:cb:07:03:42:68:bc:8d:b0:d5:5f:4a:8d:b6:
a9:89:2b:10:bb:b9:59:e7:98:37:2c:e1:5b:d2:a2:
0e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:23:51:1C:71:F9:1D:99:AC:04:81:AB:3E:9D:EE:28:9D:60:F6:46
X509v3 Authority Key Identifier:
keyid:4C:38:A3:06:A3:7E:E8:7B:EB:FF:72:36:55:3E:0D:3C:B6:72:CD:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:e8:63:d6:50:45:1a:95:b9:3d:a3:b5:0b:b7:95:c5:c4:f1:
20:52:7e:8b:25:54:04:2d:d4:db:7b:51:d9:5b:eb:15:49:16:
23:20:8d:fd:be:a2:a4:4a:5c:b4:a6:05:ab:04:73:38:64:e2:
2c:59:cd:95:90:1e:53:ca:5e:04:22:c9:66:af:3e:0c:58:34:
ab:50:a7:02:37:d8:af:71:ab:56:e5:b7:1a:29:87:85:d9:9b:
7c:df:cd:37:f4:f8:f6:fb:2b:56:03:85:d2:08:fe:2d:b9:25:
2c:32:36:1b:e3:cf:6f:52:b5:03:9c:e3:83:bb:9f:4b:8e:f2:
dd:0b:8f:85:9e:6c:a7:a4:0e:be:85:14:45:2f:1a:9f:e9:86:
f6:27:96:9c:7e:07:0d:20:35:b7:34:07:76:56:eb:7f:c0:c6:
c5:69:d7:f4:25:01:d6:c4:e8:ea:c4:20:a0:67:26:bd:a3:65:
d1:78:07:6e:56:ca:9e:3f:f7:a3:b9:b7:98:dc:69:36:63:5f:
54:d7:42:fc:f9:dd:83:72:3d:d6:ac:c5:b4:d2:24:0c:6c:3a:
5f:9d:6f:b5:e1:0b:36:91:07:fb:40:ed:21:84:42:4e:62:9a:
a7:05:6c:29:04:a4:51:c4:47:61:04:e1:57:bd:2b:bd:38:ac:
04:81:1f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:51:05 2025 by rpki-client