Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
File: TDn4uP66ttIJokmB45n9YEMuHMk.mft (raw, json)
Hash identifier: MLSA+GQzcwqzx5RzGdAu1D1or8n7rjJdGAPq9jTqWcU=
Subject key identifier: 37:19:E8:F0:2E:AC:D3:26:E7:34:E5:A3:57:ED:0E:11:B6:F4:F8:D5
Authority key identifier: 4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
Certificate issuer: /CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Certificate serial: 0197B8FD9E9EFFF40F5372FFA4C67CD04167
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
Manifest number: 0A22
Signing time: Sun 29 Jun 2025 00:01:58 +0000
Manifest this update: Sun 29 Jun 2025 00:01:58 +0000
Manifest next update: Mon 30 Jun 2025 00:01:58 +0000
Files and hashes: 1: BGPcLkk4F9FLxsMbGn-M_F2CXto.roa (hash: PqbiTHE+O2cRLL+2/Q85oltHntGJN/X4GOAuPJ95eug=)
2: TDn4uP66ttIJokmB45n9YEMuHMk.crl (hash: P6PF29H2wF90lNBUjF8K2Bz+aTDO2AMRCsOIMVASB+U=)
3: nGObtVTwcFKea1knaujpvqhbims.roa (hash: l9jwJiOaQQcxbUJC1OWeTnOmsW+JZFElguXsrGzJSD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:9e:9e:ff:f4:0f:53:72:ff:a4:c6:7c:d0:41:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Validity
Not Before: Jun 29 00:01:58 2025 GMT
Not After : Jun 30 00:01:58 2025 GMT
Subject: CN=3719e8f02eacd326e734e5a357ed0e11b6f4f8d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cd:c2:00:e7:3f:24:65:27:24:ab:c5:5b:81:
42:6e:8a:ab:b3:ea:70:67:cb:17:ee:0f:21:3a:b2:
25:18:45:19:86:7d:c6:7a:70:93:d6:bf:13:ef:79:
e9:34:12:bd:3b:85:6f:f8:da:71:84:94:4b:7b:f7:
8d:c3:92:45:f6:68:5e:b3:4f:99:31:57:50:d7:d4:
97:27:d4:21:20:e9:f3:5f:b8:0a:dd:67:06:3e:39:
dc:db:ec:30:75:a0:98:ba:42:8f:48:ea:d0:fa:8c:
94:d7:5f:57:e2:48:6c:6d:7b:83:7c:6d:22:30:9b:
f1:af:42:11:ad:0a:4b:9c:f7:f1:a2:cc:6c:f0:60:
e7:40:71:f4:55:e5:ce:4e:8a:00:8b:7f:cc:16:6d:
37:9d:8f:be:88:e4:56:43:52:b9:38:39:cb:e4:3a:
e0:55:25:05:17:2a:46:87:d7:76:d3:de:ae:16:ef:
85:4c:39:d2:c9:72:f4:ce:02:f8:94:bb:7d:68:f4:
8e:0c:d4:a3:cf:93:b2:8b:c3:07:63:ae:8d:98:b5:
0f:4a:72:26:4b:b1:7c:5a:d9:6e:b0:bd:3c:99:94:
4c:96:b3:60:f0:8b:6a:e8:8c:f0:51:18:c0:42:19:
75:19:db:8a:41:68:8a:28:85:8f:22:3b:7b:06:f1:
56:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:19:E8:F0:2E:AC:D3:26:E7:34:E5:A3:57:ED:0E:11:B6:F4:F8:D5
X509v3 Authority Key Identifier:
keyid:4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:cc:f2:68:0b:11:f4:9b:86:b0:ae:a9:25:36:1f:f7:61:ff:
06:38:ce:16:46:dc:77:28:95:0f:fd:32:54:a3:76:d5:7f:b3:
32:7f:40:2f:df:1d:d1:8b:7e:37:89:27:b2:38:4a:14:0b:5e:
0b:a8:b4:bb:e7:84:62:4b:af:97:41:44:e4:c0:0e:4a:3b:dc:
30:a4:21:bd:de:95:55:10:fb:f5:23:3b:12:97:db:dd:9d:64:
a8:64:f3:06:30:0e:cb:f9:14:25:0d:7c:8f:08:a7:2f:c7:21:
e6:09:a4:5a:12:ee:2d:72:a0:d5:b6:a0:f1:92:5d:e4:cd:82:
fa:f6:0b:60:22:ea:e0:f5:4f:92:30:19:76:73:54:f2:44:e5:
2b:a3:17:78:ab:42:2f:7a:de:88:f2:9c:75:5b:9a:c3:b4:9d:
70:f8:d6:39:70:a5:f2:e3:22:6d:db:c3:35:e0:b7:d3:f7:12:
bf:37:ec:b1:ff:5d:bb:6b:d0:0e:bf:82:cf:6e:09:03:fe:6e:
fa:b3:59:40:4f:86:6b:0e:be:91:44:3c:91:9d:67:d3:98:e1:
b8:19:a3:9a:4c:fe:ab:8b:3f:61:39:ca:ef:46:98:2e:95:10:
54:16:b8:d4:8e:1a:0a:8a:14:b1:70:1a:4e:b9:a8:c0:fa:e8:
79:b4:9c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:35:11 2025 by rpki-client