Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
File: TdbneabA8LCSFmIjgEZ9zi0Roxg.mft (raw, json)
Hash identifier: NJeJj15DFIKw2rTCR4pb5M6aF7dfbfAHz7LWD7gruVs=
Subject key identifier: 88:C7:42:04:3D:E9:D8:DB:3C:9C:7A:C3:D9:B7:06:86:2E:02:A8:A0
Authority key identifier: 4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18
Certificate issuer: /CN=4dd6e779a6c0f0b09216622380467dce2d11a318
Certificate serial: 0197B6D7728D6077E8AD464DDBEAE5968668
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
Manifest number: 1547
Signing time: Sat 28 Jun 2025 14:01:02 +0000
Manifest this update: Sat 28 Jun 2025 14:01:02 +0000
Manifest next update: Sun 29 Jun 2025 14:01:02 +0000
Files and hashes: 1: TdbneabA8LCSFmIjgEZ9zi0Roxg.crl (hash: 8LXJF8lnVPtVkf+DPLjqdP5ISjhm3lKq6hDzVhSPnpo=)
2: gjoyy0FPdmf2zrdNnLaoUXfqkA8.roa (hash: RTgHJsDHudCpwL05o4vGq9BVppolqh2KaIXjwJZDWfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:72:8d:60:77:e8:ad:46:4d:db:ea:e5:96:86:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd6e779a6c0f0b09216622380467dce2d11a318
Validity
Not Before: Jun 28 14:01:02 2025 GMT
Not After : Jun 29 14:01:02 2025 GMT
Subject: CN=88c742043de9d8db3c9c7ac3d9b706862e02a8a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:11:dc:ed:db:1a:5a:df:80:7b:ac:88:c6:55:
b1:8a:76:0c:6d:c2:02:a1:79:a2:17:e5:b5:c0:59:
d4:b7:17:51:a7:26:34:80:82:d4:96:f7:52:fc:05:
3d:44:00:66:82:92:8e:8a:b6:7f:45:7f:2e:e0:23:
2c:f8:6a:00:64:e6:22:fa:16:44:95:cd:ac:49:6a:
a3:2b:66:13:1c:8d:c0:ff:12:a4:7a:d5:31:c8:dd:
53:90:9e:c0:15:e7:47:36:e2:af:e3:7c:9b:7e:4b:
ce:5a:a2:1b:05:c3:b7:0f:9b:1f:61:40:16:7c:cf:
9c:f0:b8:a8:3a:ce:c6:b9:e1:8a:82:e1:81:5c:14:
a6:72:ad:6f:3e:6e:51:c4:62:c6:ca:34:ca:12:b7:
c5:69:c6:be:f1:c7:2f:3a:18:55:b2:0d:6b:ee:6a:
bc:32:19:41:94:da:fb:9a:b4:13:24:3d:f0:6f:95:
01:54:65:66:9a:29:e4:5c:58:08:1c:d5:96:b8:41:
91:77:d4:90:8f:27:5b:aa:c7:da:ef:2c:22:95:5f:
bc:11:0a:d9:69:5e:c4:b9:5f:cd:93:63:af:82:33:
75:ac:1b:cf:48:53:22:0e:a1:77:f7:22:b0:e3:3d:
e3:ea:3d:fc:be:a2:97:7e:4e:db:29:83:b0:06:96:
d0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C7:42:04:3D:E9:D8:DB:3C:9C:7A:C3:D9:B7:06:86:2E:02:A8:A0
X509v3 Authority Key Identifier:
keyid:4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:27:a9:f4:b8:b7:a7:8e:57:30:6a:26:59:ac:87:46:1b:54:
e1:64:d8:d1:01:7f:19:12:2c:ca:12:eb:0e:d4:96:da:57:8e:
92:02:c4:7d:71:24:65:96:fa:40:7c:eb:74:6a:81:38:85:07:
67:bd:ce:bd:c0:9d:08:b1:9d:45:b6:5f:22:33:f9:85:1e:6d:
d1:4e:af:a8:63:2a:6b:82:82:1a:45:91:3b:41:ca:ae:6e:6d:
c1:85:63:96:4d:81:ab:19:47:3e:d2:8b:20:94:55:7f:e1:2d:
ad:c4:c2:e1:f6:1b:4a:98:aa:23:7b:2f:48:83:4c:0e:2e:a6:
e4:36:a5:75:91:6c:a8:c1:9e:88:f4:59:dc:23:fe:5c:9d:f8:
45:aa:35:e4:7b:87:f3:c2:06:26:b4:b2:0e:57:23:1c:1b:c0:
ce:a5:6c:83:c1:e6:1c:13:9a:63:9d:18:be:92:6b:6d:be:49:
1d:2b:3f:9a:55:b3:54:2d:b2:5e:16:ec:91:c2:9a:b5:2d:e8:
a5:07:8d:28:2a:02:e3:f2:2f:8f:47:02:0d:a1:17:b1:f7:05:
08:01:b0:dd:38:43:0a:e8:cd:37:10:96:a7:b0:5b:01:eb:3f:
f4:e8:fa:1b:f1:d1:ac:6b:9b:8d:2a:81:44:13:21:f0:74:45:
73:63:0e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:01:04 2025 by rpki-client