Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
File: tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft (raw, json)
Hash identifier: JzOFX7HtI//s8dbF/HG/XY37Vvi28Ox8J7L3OxpZfkY=
Subject key identifier: B1:A3:18:D3:FF:ED:A3:85:72:AD:52:2A:5D:02:C5:80:18:19:D9:32
Authority key identifier: B4:33:42:F1:7D:54:A8:A3:DA:0C:E4:D3:18:B3:B4:C3:FA:05:93:E4
Certificate issuer: /CN=b43342f17d54a8a3da0ce4d318b3b4c3fa0593e4
Certificate serial: 0197B9D92621B91C47C220D4E5BDA15707EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
Manifest number: 15B8
Signing time: Sun 29 Jun 2025 04:01:45 +0000
Manifest this update: Sun 29 Jun 2025 04:01:45 +0000
Manifest next update: Mon 30 Jun 2025 04:01:45 +0000
Files and hashes: 1: E5ldtRDNq7PF5yZrAMEvxowWuR0.roa (hash: 4L7DIoeLgHz0Qv5KkaEDn/KJszMLQY8xsxtNREAtJGQ=)
2: tDNC8X1UqKPaDOTTGLO0w_oFk-Q.crl (hash: Dsj+uEgacJWMo1fW5LzM5T6yQc+tUI/rg3dYYCu7DHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d9:26:21:b9:1c:47:c2:20:d4:e5:bd:a1:57:07:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43342f17d54a8a3da0ce4d318b3b4c3fa0593e4
Validity
Not Before: Jun 29 04:01:45 2025 GMT
Not After : Jun 30 04:01:45 2025 GMT
Subject: CN=b1a318d3ffeda38572ad522a5d02c5801819d932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b2:48:bd:60:6d:3b:b9:33:d5:08:e1:f7:81:
ef:07:39:f2:cc:05:17:8c:82:db:d7:c0:07:76:c1:
31:ad:88:23:76:fe:f8:06:64:3e:d6:70:09:46:a7:
cf:fa:5e:79:f3:1a:27:d0:09:ad:be:2d:8e:8b:58:
12:37:cc:e7:82:91:82:88:a4:ed:a4:5b:19:84:a6:
50:63:80:da:af:3d:fe:42:51:7c:49:b5:8b:75:1a:
d2:d6:0a:60:61:f7:7c:23:e8:70:80:7b:0b:ee:77:
16:23:d3:fd:47:f2:42:8a:2e:26:95:37:6d:51:36:
24:72:4a:d4:0d:6b:8a:15:3f:4f:7a:48:ad:6c:bf:
dd:3b:17:39:0e:9c:da:b2:06:6c:26:32:c0:d1:f4:
2b:6c:03:12:af:0e:d3:da:6a:af:72:31:b4:5e:c7:
2b:41:08:6b:a9:4f:58:7b:54:3f:23:52:fd:8a:30:
38:22:89:34:ce:0d:b5:6b:da:79:f9:31:88:f6:d3:
19:0d:e6:a1:55:77:10:75:5c:f0:bf:75:4d:53:39:
a4:2b:63:51:30:36:b4:0a:b4:1d:7b:4b:ea:a0:5d:
c9:8d:6a:4c:86:f2:75:fa:e2:30:8e:85:46:d5:9a:
c8:87:7a:6c:76:fb:53:88:3f:18:43:27:34:21:07:
2f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A3:18:D3:FF:ED:A3:85:72:AD:52:2A:5D:02:C5:80:18:19:D9:32
X509v3 Authority Key Identifier:
keyid:B4:33:42:F1:7D:54:A8:A3:DA:0C:E4:D3:18:B3:B4:C3:FA:05:93:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:85:c4:96:e6:a3:37:65:4a:48:a6:d1:c6:ff:77:c8:ea:5b:
7c:04:09:2b:66:05:27:24:67:3b:9b:4f:7a:40:0c:33:be:43:
9f:e0:21:fc:91:ee:63:83:9b:45:5d:a5:25:38:81:9e:c5:d2:
e9:82:c8:9b:8b:a3:9f:64:8b:e3:30:66:a6:2b:85:12:30:85:
0a:c6:eb:59:cc:8a:e6:a7:bd:a8:61:c1:97:f0:3a:87:8a:d1:
8c:36:f6:cf:51:27:b9:4d:59:fc:dc:ab:6c:f0:ea:9d:b1:58:
42:01:a0:42:88:66:cc:5d:ae:90:6c:a1:f2:9e:b5:c1:7c:0b:
a7:75:0a:fc:cd:b6:e0:f1:0d:65:7f:c0:c8:00:e3:68:8a:de:
3f:46:31:11:40:51:87:46:b3:93:64:74:1a:90:f5:a4:28:6d:
0b:2d:11:85:6f:7f:75:c9:df:59:38:b3:95:6c:48:6e:3a:1e:
b4:3e:8b:f6:f6:ec:64:f6:1e:17:35:be:01:e5:23:ab:88:4b:
b7:1a:1d:7f:10:4a:17:2c:68:0d:6b:14:35:d0:bd:75:c0:77:
23:2a:46:2f:e1:4f:2e:67:31:98:5f:5a:cf:ad:17:be:ac:3e:
3a:38:69:a1:12:ab:ff:a6:8c:87:48:db:5e:cc:26:b7:45:d7:
73:9e:54:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:24:10 2025 by rpki-client