Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft
File: TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft (raw, json)
Hash identifier: toekHEPAN3ee6KoUDfb50DNohEoLunulSSdz3U3emAU=
Subject key identifier: 8A:90:2F:55:4E:2C:4E:3C:7C:AA:0C:47:71:13:DE:CA:D4:93:E3:C4
Authority key identifier: 4C:33:C0:E1:4D:57:EA:BC:3B:65:E3:8A:77:36:BE:BE:49:09:2E:9E
Certificate issuer: /CN=4c33c0e14d57eabc3b65e38a7736bebe49092e9e
Certificate serial: 01973D63864C04B4CF07494669C5C59B0BE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDPA4U1X6rw7ZeOKdza-vkkJLp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft
Manifest number: 0CBB
Signing time: Thu 05 Jun 2025 00:00:22 +0000
Manifest this update: Thu 05 Jun 2025 00:00:22 +0000
Manifest next update: Fri 06 Jun 2025 00:00:22 +0000
Files and hashes: 1: TDPA4U1X6rw7ZeOKdza-vkkJLp4.crl (hash: 8xvd21MtljuHE/Kmzd8go8gDMXAmVaolMCrWe9rWWIM=)
2: k_nIf6wVx1Xdxat4zYtnBqTL13Y.roa (hash: HaoM7rJ6dUREUsX3C7dLkVUY9dcgJCaHV1PnH/ISMtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDPA4U1X6rw7ZeOKdza-vkkJLp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 00:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3d:63:86:4c:04:b4:cf:07:49:46:69:c5:c5:9b:0b:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c33c0e14d57eabc3b65e38a7736bebe49092e9e
Validity
Not Before: Jun 5 00:00:22 2025 GMT
Not After : Jun 6 00:00:22 2025 GMT
Subject: CN=8a902f554e2c4e3c7caa0c477113decad493e3c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:33:ad:66:03:ff:b4:93:9d:d7:31:50:07:ae:
34:68:40:77:ad:fe:a4:81:57:de:5d:de:54:ec:07:
e7:f6:70:6f:f1:1f:f7:7b:80:78:c4:98:50:1b:af:
b3:9d:b0:b2:eb:20:81:06:e3:8a:dd:de:85:04:1c:
08:b3:15:86:99:b2:12:50:bc:fd:c5:74:99:2c:3c:
62:4d:c8:e5:4b:03:92:2a:f2:b9:e0:d0:03:03:57:
3b:8a:44:4d:94:7d:2f:63:5b:c1:32:27:bd:d6:2e:
0e:69:55:10:17:4e:c2:76:8c:88:d0:c6:ff:5b:80:
95:f7:61:4e:35:a5:84:5d:50:20:3a:fd:e7:16:04:
96:1c:7b:40:13:dc:d2:87:31:bf:70:62:e8:dc:f1:
e1:34:16:77:10:0f:02:a8:a1:79:f8:87:db:f3:fa:
74:86:e5:66:8c:85:74:8f:d6:bf:26:8f:a6:32:08:
94:fc:ce:16:7c:f5:b3:2d:c0:a2:5e:4b:00:62:cd:
af:a8:c9:10:2b:7b:39:17:c7:dc:c0:a9:d2:7a:f7:
51:14:43:ba:8e:87:22:e8:d9:97:06:46:0a:7a:a2:
23:15:e3:fe:b1:e7:ef:a2:2b:06:c4:b1:d9:b9:55:
20:b6:1c:a5:a4:e1:05:b0:89:b0:96:67:b2:e6:99:
92:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:90:2F:55:4E:2C:4E:3C:7C:AA:0C:47:71:13:DE:CA:D4:93:E3:C4
X509v3 Authority Key Identifier:
keyid:4C:33:C0:E1:4D:57:EA:BC:3B:65:E3:8A:77:36:BE:BE:49:09:2E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDPA4U1X6rw7ZeOKdza-vkkJLp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:a0:3f:a2:f9:db:f6:fc:84:c4:90:6d:f7:83:28:3c:1f:5c:
f0:75:6c:2f:23:bc:0e:82:8d:9d:06:bd:fa:71:fe:72:f5:52:
dd:01:5a:1b:4b:08:cb:20:2c:cc:6d:d7:7d:30:04:8a:2c:32:
fa:34:d2:04:3e:08:c6:91:b4:96:94:ba:60:6c:82:1d:ec:92:
ab:6d:4c:1b:24:86:30:8c:f9:a3:ed:b2:73:29:29:09:54:98:
f7:83:44:ba:c9:e6:b5:e8:1d:c4:5f:40:0e:7f:92:b7:2a:71:
ff:ae:f3:10:f8:6d:f8:eb:9a:29:cf:5f:04:d3:d3:96:70:de:
1d:ef:73:0b:8e:d5:bf:11:47:e2:5c:a9:2c:c4:b5:27:bf:5a:
18:47:a4:62:e2:b1:92:68:5f:92:82:14:d0:01:10:6c:9f:58:
9d:99:d9:70:9b:01:e3:aa:db:81:38:73:c4:01:b7:d3:f3:bc:
9e:73:59:53:67:f6:d0:15:11:0c:54:0b:31:97:1b:dc:1d:9f:
29:fa:3e:eb:c8:0b:d8:74:9b:02:29:0f:c3:fb:a6:f9:50:6f:
1e:3f:74:cf:58:df:2e:6c:27:ea:7e:d3:86:f1:ed:23:4f:7d:
f6:34:00:5a:4d:bd:d3:a8:fc:0b:8b:09:79:b1:d6:c8:bc:ff:
fd:7a:11:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 08:57:34 2025 by rpki-client