Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
File: TDOTsqG9eRmFmAeDirHjsAN7i08.mft (raw, json)
Hash identifier: 25nlZUDEXKnUGQwxE3KPIPE1S5NFowkppNycJgkPMVA=
Subject key identifier: 94:61:EE:25:08:01:FE:3F:BC:45:AC:1F:25:98:5E:40:C1:6C:84:C8
Authority key identifier: 4C:33:93:B2:A1:BD:79:19:85:98:07:83:8A:B1:E3:B0:03:7B:8B:4F
Certificate issuer: /CN=4c3393b2a1bd7919859807838ab1e3b0037b8b4f
Certificate serial: 01974D0D87B93189B55C9339D55DC072D3CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDOTsqG9eRmFmAeDirHjsAN7i08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
Manifest number: 0C7A
Signing time: Sun 08 Jun 2025 01:00:21 +0000
Manifest this update: Sun 08 Jun 2025 01:00:21 +0000
Manifest next update: Mon 09 Jun 2025 01:00:21 +0000
Files and hashes: 1: TDOTsqG9eRmFmAeDirHjsAN7i08.crl (hash: oNoeAnVK0S1AZTyyRCWAXz173At6QfUrcNRANOiZq9w=)
2: y6xk5yyaeCIuQcfJUMGsvyLuakI.roa (hash: 5cTQO7InxQ4ef2VY7Tlc4nQ2LkIPqai+B4whSvQRHdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDOTsqG9eRmFmAeDirHjsAN7i08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 01:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0d:87:b9:31:89:b5:5c:93:39:d5:5d:c0:72:d3:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3393b2a1bd7919859807838ab1e3b0037b8b4f
Validity
Not Before: Jun 8 01:00:21 2025 GMT
Not After : Jun 9 01:00:21 2025 GMT
Subject: CN=9461ee250801fe3fbc45ac1f25985e40c16c84c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:01:ff:cd:89:e6:29:e1:49:55:65:1c:c8:be:
39:8c:2b:84:c1:41:75:60:48:29:0c:92:54:e4:76:
9f:8b:c3:47:b2:f4:5a:10:cd:61:c0:53:ef:d0:5c:
ad:3e:43:11:cf:4d:3c:30:c5:62:0a:3e:a4:d9:15:
ab:82:2b:af:0c:94:60:6e:17:c0:ef:9d:03:26:a3:
72:f4:84:da:03:a8:d5:e5:8c:6e:2d:b0:e2:d0:2d:
53:34:dd:83:2e:1a:de:57:bb:6f:9b:07:7c:da:39:
a1:78:c9:fd:f0:0a:64:23:f4:33:02:5a:ac:70:00:
ea:99:51:2e:a7:1d:9d:69:8b:61:1d:0b:6e:e8:b1:
18:bd:28:34:24:c9:96:65:ca:7e:1d:62:81:ce:33:
47:32:92:78:48:c7:96:6a:a0:60:84:42:bb:b0:6b:
12:3c:e2:ad:15:dc:20:0e:a0:e8:bb:84:f5:60:2d:
30:a1:aa:e4:c7:f7:1c:40:a3:25:8c:61:d3:d4:f2:
5d:77:78:aa:86:41:ea:8f:da:2b:38:e1:7d:d7:63:
14:4c:5f:b1:0e:90:e9:30:61:ed:92:94:be:c1:41:
dd:6c:0b:59:79:98:8d:f6:f5:67:e0:c0:b2:f4:72:
dd:dd:ab:51:f4:b9:ee:76:e2:e1:ed:68:d0:7d:1e:
51:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:61:EE:25:08:01:FE:3F:BC:45:AC:1F:25:98:5E:40:C1:6C:84:C8
X509v3 Authority Key Identifier:
keyid:4C:33:93:B2:A1:BD:79:19:85:98:07:83:8A:B1:E3:B0:03:7B:8B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDOTsqG9eRmFmAeDirHjsAN7i08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:0c:32:01:ee:f7:85:a0:aa:cc:88:97:65:fa:16:51:fc:c2:
ff:bb:4c:b3:50:02:ca:40:c4:19:5a:42:00:86:bc:25:35:4e:
6e:09:9a:ff:7e:8d:cc:83:e6:1d:4f:85:01:e4:96:26:22:de:
86:78:e6:d4:ee:d7:ee:0c:11:7f:05:df:78:d4:94:46:bc:57:
0e:47:ed:9a:dd:f2:50:3c:ca:44:c5:e9:2b:c6:68:8a:d3:98:
43:dc:22:80:6a:e0:ba:68:6e:1c:88:a3:eb:f6:4f:05:6d:3b:
11:b7:ce:ef:85:3c:d2:c7:68:fe:0d:7c:be:a6:36:4c:9b:cb:
9a:c6:c9:2d:b3:ee:eb:c3:1d:f0:5f:96:fd:1d:9e:3e:6d:ce:
b9:d8:18:fa:be:c2:de:1a:55:00:fc:54:57:89:9e:a6:71:83:
58:9a:11:d6:fb:7b:98:a0:b9:42:c8:33:ff:a9:58:16:e9:a1:
d7:fa:e1:c9:98:61:b7:72:07:11:2e:a2:02:5c:d5:e7:f0:b3:
ec:be:b7:77:df:1f:df:4d:e3:dd:b8:b9:05:7a:26:71:7c:f1:
67:16:8c:1a:ac:a9:20:a9:f3:0e:ac:b8:5e:60:8c:9a:be:b7:
ff:b8:d3:9e:59:c7:6d:72:2c:5d:ac:d4:9b:a0:93:49:de:c0:
21:51:c4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:40:36 2025 by rpki-client