Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.mft
File: TdL8TSP9nCQgxASRhxgI7FQkpnA.mft (raw, json)
Hash identifier: jX5l9JdAoXB0JP2Pj5msnRrH/UcKluaT1G6Dw/u21/0=
Subject key identifier: 65:A4:0C:6B:EA:DE:5A:9C:9F:0E:F3:1E:05:12:4A:A7:BE:47:C5:F0
Authority key identifier: 4D:D2:FC:4D:23:FD:9C:24:20:C4:04:91:87:18:08:EC:54:24:A6:70
Certificate issuer: /CN=4dd2fc4d23fd9c2420c40491871808ec5424a670
Certificate serial: 019749687CA940937473DFF98BFBDC8DBC3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdL8TSP9nCQgxASRhxgI7FQkpnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.mft
Manifest number: 1580
Signing time: Sat 07 Jun 2025 08:01:13 +0000
Manifest this update: Sat 07 Jun 2025 08:01:13 +0000
Manifest next update: Sun 08 Jun 2025 08:01:13 +0000
Files and hashes: 1: 6PYHTPLOKPA_a6iVYvGQByWG7yU.roa (hash: w5WzWtoII8U9oezorMTaJGrRrTvsQaItUP16lTCSY7s=)
2: TdL8TSP9nCQgxASRhxgI7FQkpnA.crl (hash: HXYKbghf1rI2y/FbTP/m1JigYMUXsnhAK0tFPqeDico=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdL8TSP9nCQgxASRhxgI7FQkpnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:7c:a9:40:93:74:73:df:f9:8b:fb:dc:8d:bc:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd2fc4d23fd9c2420c40491871808ec5424a670
Validity
Not Before: Jun 7 08:01:13 2025 GMT
Not After : Jun 8 08:01:13 2025 GMT
Subject: CN=65a40c6beade5a9c9f0ef31e05124aa7be47c5f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:58:c9:ca:0e:0f:bc:32:bc:c8:f7:19:10:7f:
7d:6f:b0:cd:08:64:9d:23:c1:cc:cf:5e:5d:3c:b7:
21:e2:c5:f5:e0:bf:23:1c:f5:e6:2a:19:04:0e:dd:
d6:6d:cd:61:1a:58:b6:7b:97:0f:cc:7d:6b:9a:53:
c8:53:48:37:0b:a6:6e:38:30:78:e0:2f:bb:b2:79:
06:43:22:6a:12:d7:83:79:f0:f2:58:37:da:77:15:
22:56:b9:53:ec:a4:30:ce:f7:ed:a2:8f:98:b7:60:
d9:40:4f:ea:22:af:78:27:6a:bc:10:88:3a:60:b8:
d0:c0:41:29:b7:01:d4:5c:ac:9a:de:e6:7a:22:f9:
31:ed:a8:31:70:bb:5d:11:bc:1a:78:45:48:ed:58:
42:8d:b3:30:6e:f1:11:ac:65:96:74:63:15:35:f6:
6e:2f:dc:b0:ad:d5:47:41:e2:30:09:99:f2:8c:43:
29:f4:28:72:7f:04:c7:5f:45:63:aa:19:8d:8a:72:
f4:9f:81:86:be:71:1e:93:65:78:e9:96:95:2d:ef:
7c:50:60:fa:75:0f:a8:2d:a3:a6:f0:31:60:0f:49:
13:3b:b0:af:c4:7d:b8:00:c0:d7:d2:3c:c0:c9:09:
69:52:15:37:a8:f6:c8:08:4d:cc:63:bb:43:96:38:
8b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A4:0C:6B:EA:DE:5A:9C:9F:0E:F3:1E:05:12:4A:A7:BE:47:C5:F0
X509v3 Authority Key Identifier:
keyid:4D:D2:FC:4D:23:FD:9C:24:20:C4:04:91:87:18:08:EC:54:24:A6:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdL8TSP9nCQgxASRhxgI7FQkpnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:d8:82:fc:76:1e:42:c8:30:68:18:c0:c9:77:ee:1d:a2:22:
ae:d4:17:04:76:57:0e:c4:55:c2:97:99:b8:84:4f:e3:87:62:
5c:45:20:bb:e6:bb:23:8a:72:23:b9:e7:fe:cd:58:cd:58:a3:
56:a8:42:0d:24:e0:6e:ce:49:8d:dd:8b:b0:8a:8b:92:e2:cc:
d4:3d:67:61:1d:18:c5:c7:1f:c2:5f:c7:34:94:aa:cb:25:fa:
02:9e:dd:a1:39:e6:c2:da:a1:e3:c5:ea:af:e2:91:7a:5b:f7:
5e:cf:b7:33:96:02:e5:de:2b:46:e2:f7:8c:9e:c2:2f:7d:95:
72:4e:f2:a6:bd:ee:4d:bd:dd:a3:1b:2f:fc:1a:44:7f:55:e7:
26:ad:6a:28:20:78:b4:a3:4b:4b:58:83:a1:92:a9:b4:07:3b:
e6:10:1f:40:87:de:6b:a5:a2:a2:3f:cf:ac:53:f0:02:f3:9a:
06:f6:bc:33:ba:68:77:46:a5:c2:c2:7b:d3:cf:d8:27:25:e6:
fe:a8:9a:cf:1d:00:bc:ef:5a:0b:40:f0:3c:d8:ac:f9:dd:e6:
73:16:97:54:73:9f:49:ca:fd:2c:72:a3:fc:36:7d:53:c6:2e:
b3:41:fd:99:75:d5:57:2a:a3:6d:0e:d9:f8:8e:eb:3e:ab:63:
13:af:7f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:00:26 2025 by rpki-client