Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
File: TdA6WGuXinCqqC4JWKkBUucmedk.mft (raw, json)
Hash identifier: qfB0GUkowJgvU5IWXm07yWG0UxKPs5yK1UfWXPbrJn0=
Subject key identifier: D8:EC:CF:5D:4B:BD:53:7C:66:E1:D1:94:D5:97:43:34:73:BD:90:14
Authority key identifier: 4D:D0:3A:58:6B:97:8A:70:AA:A8:2E:09:58:A9:01:52:E7:26:79:D9
Certificate issuer: /CN=4dd03a586b978a70aaa82e0958a90152e72679d9
Certificate serial: 0198D65F71A2B3DAB6C3F623121AC4B8541A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
Manifest number: 08AA
Signing time: Sat 23 Aug 2025 10:00:35 +0000
Manifest this update: Sat 23 Aug 2025 10:00:35 +0000
Manifest next update: Sun 24 Aug 2025 10:00:35 +0000
Files and hashes: 1: TdA6WGuXinCqqC4JWKkBUucmedk.crl (hash: HhiSDZcjmzolEcvgHL76H2PiaaS8AdqR+1NOs54nTKA=)
2: bMiFWbEVmjXACwoqhdLryOI7ecM.roa (hash: y4qa2SV/D4+dXjdntmc66BpYAvlL021xKDW12tsJ7Ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:71:a2:b3:da:b6:c3:f6:23:12:1a:c4:b8:54:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd03a586b978a70aaa82e0958a90152e72679d9
Validity
Not Before: Aug 23 10:00:35 2025 GMT
Not After : Aug 24 10:00:35 2025 GMT
Subject: CN=d8eccf5d4bbd537c66e1d194d597433473bd9014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e9:f8:e6:ab:ab:40:07:a0:08:24:29:d0:12:
d0:bf:25:6b:d5:22:c8:85:f5:f3:b9:70:fe:c2:b8:
52:a6:9f:d4:b5:18:7a:8c:58:0d:06:7d:e3:b6:c4:
98:11:e4:4e:f8:6c:3a:56:86:b8:d0:fd:b0:5c:8a:
a8:37:f3:33:5a:a7:c4:8f:de:12:b4:c1:90:f2:c0:
22:9a:25:98:14:5d:60:b8:65:cc:0d:e2:15:cf:aa:
e5:e4:a7:3c:0a:62:c2:a0:2d:68:98:47:1f:6a:fb:
e6:22:81:cd:e1:ee:4c:45:10:3a:0c:ad:6e:a7:1f:
ed:2c:43:0b:cd:f8:9a:27:ea:cf:6c:28:cb:0e:82:
59:80:50:3a:8a:96:71:0e:4a:f5:66:a7:9b:36:48:
12:2b:be:3f:e8:32:c9:9f:a2:7e:f9:dc:a8:d6:9b:
e2:2e:5c:41:a1:9d:ab:1f:5d:e0:99:c2:a4:f0:fb:
b8:7b:17:48:04:dc:c1:c3:f1:fb:35:a7:bb:4e:41:
f9:98:e4:b0:11:bc:1b:48:4a:5b:43:7f:44:29:09:
d6:af:7b:f6:07:a5:38:ca:77:94:98:91:09:52:d9:
fc:74:cb:e3:d4:85:b6:59:67:8c:80:96:71:b9:c8:
c1:0a:d5:59:24:1a:78:68:07:88:ab:61:2d:98:af:
a0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:EC:CF:5D:4B:BD:53:7C:66:E1:D1:94:D5:97:43:34:73:BD:90:14
X509v3 Authority Key Identifier:
keyid:4D:D0:3A:58:6B:97:8A:70:AA:A8:2E:09:58:A9:01:52:E7:26:79:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:ed:39:20:e0:4e:5a:11:bf:27:1f:b1:fa:fc:22:34:88:f9:
43:ce:96:57:16:b7:31:bd:94:11:aa:8e:cb:27:3e:30:30:f1:
2a:24:90:e1:f2:14:e1:f9:59:92:fa:7f:f2:98:3d:c3:2b:ec:
72:14:53:59:13:b6:be:00:8e:ba:d2:d4:02:ce:99:57:30:ca:
b8:c3:b6:68:df:34:02:a4:de:5f:9f:6d:54:c0:76:69:77:d1:
95:2a:85:a5:89:ce:90:42:e1:c6:de:b6:c0:99:16:0e:38:04:
94:cf:06:4a:d0:f0:66:48:48:5d:11:a4:76:50:c4:00:e7:9a:
78:f4:b5:17:56:79:f7:00:59:77:b9:fd:52:d8:2a:3f:8a:ed:
c3:5c:37:bb:57:30:c6:e6:3c:79:3a:35:08:86:e6:f4:03:3f:
f9:6f:bb:ed:cc:6b:66:ee:9d:dd:20:3c:a6:91:d6:61:b9:46:
7a:fc:83:75:71:cc:e7:65:11:dd:8a:09:95:18:69:71:cc:bf:
6d:5e:de:f7:bd:13:9b:58:98:26:fe:67:7f:44:df:4c:aa:2d:
c4:60:de:63:e1:db:41:26:f6:2a:c9:12:b0:9e:75:14:1b:ca:
16:ea:22:c5:49:ac:f3:bd:88:28:53:2d:aa:a9:ce:7a:e0:9d:
d7:14:ef:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:36:49 2025 by rpki-client