Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft
File: TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft (raw, json)
Hash identifier: Fw9vpeMuXQc4w7yGZ+asnB8hw1HDPxV3Lm+Q712vkn4=
Subject key identifier: C4:4B:EE:A8:BD:6C:98:57:EE:99:BF:69:1C:04:9B:AF:94:77:09:21
Authority key identifier: 4C:33:C0:E1:4D:57:EA:BC:3B:65:E3:8A:77:36:BE:BE:49:09:2E:9E
Certificate issuer: /CN=4c33c0e14d57eabc3b65e38a7736bebe49092e9e
Certificate serial: 01992367CD5800E3CC74CC8EDE224AB54D47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDPA4U1X6rw7ZeOKdza-vkkJLp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft
Manifest number: 0DB7
Signing time: Sun 07 Sep 2025 09:00:29 +0000
Manifest this update: Sun 07 Sep 2025 09:00:29 +0000
Manifest next update: Mon 08 Sep 2025 09:00:29 +0000
Files and hashes: 1: NgIKF8jcDLCHN3aJD8aULMWPG30.roa (hash: 9imCN3WetXg8Q1ELNvwqDIt+zXYLct6tp7egk/4AdG8=)
2: TDPA4U1X6rw7ZeOKdza-vkkJLp4.crl (hash: rxNJuzvo0Vjdky1m2cyQfepEujObXT3yosaMsQlRW7c=)
3: k_nIf6wVx1Xdxat4zYtnBqTL13Y.roa (hash: HaoM7rJ6dUREUsX3C7dLkVUY9dcgJCaHV1PnH/ISMtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDPA4U1X6rw7ZeOKdza-vkkJLp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:67:cd:58:00:e3:cc:74:cc:8e:de:22:4a:b5:4d:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c33c0e14d57eabc3b65e38a7736bebe49092e9e
Validity
Not Before: Sep 7 09:00:29 2025 GMT
Not After : Sep 8 09:00:29 2025 GMT
Subject: CN=c44beea8bd6c9857ee99bf691c049baf94770921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f3:77:59:5b:01:05:d3:c0:30:01:21:ec:0b:
27:c7:e9:4e:85:15:ba:6b:c5:a1:3f:9c:4d:6c:68:
06:62:e4:3a:f1:88:91:f0:06:ff:5e:3a:6b:31:8e:
82:53:aa:d6:06:4e:a7:9f:d3:dd:bd:60:f3:bc:60:
43:d8:df:59:51:50:96:e3:8d:53:19:3a:5a:1d:c8:
1e:0a:59:ff:ab:33:0b:ec:de:d6:df:a4:ff:d6:c2:
a1:70:89:55:54:dc:d6:a0:22:e6:16:be:30:61:c4:
9f:4c:6d:8b:57:f8:a1:00:5e:05:23:68:ac:48:6a:
65:55:db:73:6e:de:0d:93:bf:89:8c:f1:6d:a3:d0:
a7:bc:88:5d:d2:a4:2f:95:74:6f:bd:ef:7b:cf:0d:
b4:a3:c6:54:1f:7a:e6:74:b4:88:f4:81:53:54:7f:
75:a2:da:69:24:3f:dd:97:fb:4b:b6:25:a8:55:ff:
8a:27:fe:a2:5c:d2:d0:0c:a9:57:a9:ec:a1:b1:f9:
7d:2e:e5:a9:0a:cd:00:c0:19:8d:20:5a:36:7e:9e:
dd:08:a3:13:f1:95:70:ff:88:0e:e6:24:43:ba:ec:
0d:3f:1c:73:2c:2f:12:89:f2:d6:ce:be:50:5b:7a:
df:f0:25:c6:9f:5e:2f:ea:39:92:80:2a:15:f0:5b:
90:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:4B:EE:A8:BD:6C:98:57:EE:99:BF:69:1C:04:9B:AF:94:77:09:21
X509v3 Authority Key Identifier:
keyid:4C:33:C0:E1:4D:57:EA:BC:3B:65:E3:8A:77:36:BE:BE:49:09:2E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDPA4U1X6rw7ZeOKdza-vkkJLp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:88:f4:78:ca:5a:76:c7:45:f0:89:b7:49:99:27:06:83:60:
77:1b:25:52:60:bf:38:8a:44:59:cd:90:11:5b:fb:91:ab:98:
97:61:ee:cc:c4:d0:c4:ba:e2:50:c2:f9:37:89:fb:92:76:c2:
6e:8d:e6:23:df:e3:cf:5a:7d:97:6f:87:e3:68:98:41:a0:9b:
67:72:d7:9c:34:cb:83:ec:fc:a6:f8:17:dc:00:6b:f2:54:9d:
a6:e3:a7:b3:90:e6:26:0d:a7:d2:05:e6:34:5d:af:3f:d5:ee:
8c:7c:9d:a5:bd:fc:02:dd:ed:1a:26:67:58:db:94:73:b3:f5:
2b:b2:a0:ca:0d:cd:9e:7e:4d:42:d5:cf:a1:f9:cc:1b:34:f5:
e8:19:8e:1f:d1:5f:5e:22:d3:1b:90:31:49:32:cd:bb:1b:37:
9a:45:0c:52:1a:83:ab:1f:69:cc:04:9d:e8:71:fa:99:89:c0:
55:93:a3:78:44:b0:1d:3e:b7:85:c6:95:1d:0c:4e:86:c1:33:
75:de:64:73:d2:98:4d:52:74:cf:da:f8:96:ee:80:45:f1:2a:
64:4e:12:03:eb:4c:f8:7e:7e:37:30:20:90:2a:6d:4b:f5:b3:
ab:54:ac:a4:cc:e5:23:33:ed:fb:4d:c3:25:01:ba:b8:af:4e:
01:77:55:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:29 2025 by rpki-client