Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
File: TdbneabA8LCSFmIjgEZ9zi0Roxg.mft (raw, json)
Hash identifier: ljAj3/dpR7PFmdFynUTA4Q4QJdOpTfk7ktS6TxtuZgo=
Subject key identifier: F0:38:28:89:1B:66:7A:5C:3B:A5:25:57:5B:5E:B6:D9:BF:A7:31:7B
Authority key identifier: 4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18
Certificate issuer: /CN=4dd6e779a6c0f0b09216622380467dce2d11a318
Certificate serial: 0198D6984017B31A23C82F094BDACCAC2E30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
Manifest number: 15DC
Signing time: Sat 23 Aug 2025 11:02:38 +0000
Manifest this update: Sat 23 Aug 2025 11:02:38 +0000
Manifest next update: Sun 24 Aug 2025 11:02:38 +0000
Files and hashes: 1: TdbneabA8LCSFmIjgEZ9zi0Roxg.crl (hash: fj5U0bKj3ffSPJe3uG/TnvXrJ2/uU417KbrbPXgaNP4=)
2: gjoyy0FPdmf2zrdNnLaoUXfqkA8.roa (hash: RTgHJsDHudCpwL05o4vGq9BVppolqh2KaIXjwJZDWfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:40:17:b3:1a:23:c8:2f:09:4b:da:cc:ac:2e:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd6e779a6c0f0b09216622380467dce2d11a318
Validity
Not Before: Aug 23 11:02:38 2025 GMT
Not After : Aug 24 11:02:38 2025 GMT
Subject: CN=f03828891b667a5c3ba525575b5eb6d9bfa7317b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cb:15:30:ae:86:af:9c:8e:61:e1:67:c1:7b:
9b:2c:8a:24:b0:d2:22:74:4a:9f:c5:ad:98:58:09:
c2:2d:f4:75:97:a4:c0:94:66:7e:72:c2:7a:0d:7c:
ee:10:98:a8:71:24:4f:eb:c1:99:c0:d1:52:be:bf:
22:b9:87:27:4f:67:cf:57:ee:eb:f7:06:ac:ab:73:
66:01:93:30:7a:59:c9:fd:af:f2:29:5c:e0:39:db:
40:34:05:e7:22:e6:3f:a8:c6:2a:f5:e9:8d:28:a6:
ba:3e:22:42:dd:9f:3b:76:3f:ea:2c:2f:7b:60:0b:
e4:54:76:28:12:31:cb:16:5b:c4:cd:b9:98:71:fc:
5f:a9:ff:1c:f9:b9:a5:87:9e:2c:00:06:4e:3d:18:
84:3a:1b:57:ab:b8:91:b6:4e:8e:15:66:a7:d8:12:
ab:23:a6:40:64:eb:1f:22:6f:ac:5a:76:ff:80:8a:
6e:4c:0f:27:e9:fa:15:bc:ea:00:42:ab:32:d5:f6:
1f:46:4e:d2:7e:9a:8c:6d:7f:d6:c8:f6:fe:20:69:
28:b9:76:ce:e0:ec:cc:ec:f0:d1:1c:3a:2c:41:a3:
ff:be:7f:c8:7d:26:c5:fe:1e:20:87:dc:bd:36:a4:
83:e9:1c:a0:76:ae:ef:1f:2c:75:55:e6:2c:34:48:
d0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:38:28:89:1B:66:7A:5C:3B:A5:25:57:5B:5E:B6:D9:BF:A7:31:7B
X509v3 Authority Key Identifier:
keyid:4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:7b:35:59:e0:da:27:c3:96:99:a4:eb:92:5b:26:36:78:e1:
a4:01:8f:71:eb:3c:26:6c:82:1f:ba:0a:48:8d:f0:a2:b6:60:
eb:e1:3c:75:2b:ec:47:fc:81:ac:0a:2d:6a:27:e1:c1:25:46:
f5:02:cf:a3:14:26:e4:38:d1:9f:6d:f1:62:3b:ae:37:75:e4:
f5:b7:b5:ee:57:bc:81:11:9b:02:7a:00:3f:c2:62:e1:de:22:
e7:3b:85:d4:50:3b:5a:7c:6a:d9:8a:26:de:2f:b0:d7:0f:54:
e4:e7:73:18:19:9a:13:63:0e:93:62:f8:52:4a:0e:95:be:e8:
98:d6:70:61:f4:62:33:5e:8b:57:54:de:a1:04:ce:91:27:d5:
c2:44:8a:aa:5f:e1:66:9d:e9:81:8b:53:4d:b1:be:19:d2:05:
03:3b:48:f5:21:4f:46:cb:31:49:3a:0a:2a:8c:f7:1d:8b:16:
57:9e:ce:f5:dc:b7:b0:7c:fb:c3:90:1d:d1:4f:a7:b1:95:51:
1e:dc:60:c6:ad:cf:ca:6a:b0:79:d9:6e:10:b6:47:d1:6c:d1:
97:36:4a:f2:10:a4:d4:f3:e6:38:0c:8d:e7:d7:ce:b0:bf:39:
52:4f:bc:f3:cd:f8:20:f7:51:8d:51:68:14:49:e2:34:81:35:
e4:2d:8d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:30:05 2025 by rpki-client