Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
File: TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft (raw, json)
Hash identifier: zl68We/QjS0sB0dLdUI1AOvUuGmvFOfWOMikvI9aUAM=
Subject key identifier: 2E:F9:62:C6:AC:A4:35:42:0B:60:F0:D3:6A:E4:74:BF:75:51:A7:0E
Authority key identifier: 4C:38:A3:06:A3:7E:E8:7B:EB:FF:72:36:55:3E:0D:3C:B6:72:CD:17
Certificate issuer: /CN=4c38a306a37ee87bebff7236553e0d3cb672cd17
Certificate serial: 0197B7B2F71E9DFD25D202019A95C8E42EB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
Manifest number: 8B
Signing time: Sat 28 Jun 2025 18:00:48 +0000
Manifest this update: Sat 28 Jun 2025 18:00:48 +0000
Manifest next update: Sun 29 Jun 2025 18:00:48 +0000
Files and hashes: 1: 54qil-gtsg-VmWMUKBbSoP89Sh4.roa (hash: +lFuYFZIeWq9AFirWvNO/gLe0U+wLrmb+nny8MFDRhE=)
2: TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl (hash: L5bmtwGuU8V6wixWiSscRPUNbMi4DdKpL4NTOWIezwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:f7:1e:9d:fd:25:d2:02:01:9a:95:c8:e4:2e:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c38a306a37ee87bebff7236553e0d3cb672cd17
Validity
Not Before: Jun 28 18:00:48 2025 GMT
Not After : Jun 29 18:00:48 2025 GMT
Subject: CN=2ef962c6aca435420b60f0d36ae474bf7551a70e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cc:72:de:94:c7:59:9b:41:59:3f:94:5c:fc:
96:46:06:c2:8a:89:be:8d:f5:87:3a:10:46:c2:3d:
4c:e4:65:66:9e:1b:6b:24:d6:c3:a5:f6:02:08:e8:
40:e6:fa:e4:67:9e:3a:77:9e:3b:48:3e:47:6a:9f:
bd:ad:9b:07:96:33:f2:f1:46:ad:4a:03:e5:41:b3:
b7:66:b3:e1:0c:e4:7d:0a:96:ca:61:43:37:9b:99:
4e:38:7f:35:6f:8a:76:8e:87:4c:48:d8:c1:94:11:
f3:d0:64:36:2f:b8:0a:c3:fe:53:09:9b:ee:fb:ef:
46:a0:15:f0:2e:40:4a:a6:e4:fd:e7:e4:eb:47:dc:
77:35:62:11:43:a3:3b:8a:80:06:39:a6:5a:c4:93:
f8:58:e8:12:ad:14:f0:82:01:d2:80:47:98:18:eb:
14:39:ad:67:d1:d3:59:c3:08:b2:8b:89:0f:df:e9:
f9:40:bb:86:ad:fd:13:ad:b6:5b:e6:9f:50:b8:54:
f3:12:68:59:82:39:12:62:83:41:ba:2b:95:4b:ac:
64:bd:7c:e6:a5:6e:a3:7e:82:6e:1f:03:bd:69:82:
87:66:e2:36:05:2f:ed:be:da:89:ac:a1:32:8f:8a:
21:84:29:00:a9:73:e0:7e:04:dd:79:ab:87:2d:c1:
6a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F9:62:C6:AC:A4:35:42:0B:60:F0:D3:6A:E4:74:BF:75:51:A7:0E
X509v3 Authority Key Identifier:
keyid:4C:38:A3:06:A3:7E:E8:7B:EB:FF:72:36:55:3E:0D:3C:B6:72:CD:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:19:07:81:d8:15:3d:29:3a:b6:c1:4b:c4:10:0e:2b:40:b3:
55:3f:71:01:a2:7a:3f:bd:58:6a:6a:f3:44:67:8a:62:ad:8b:
c3:de:ad:05:ee:bb:06:31:21:fd:11:af:9c:a5:04:17:51:e5:
b5:29:26:c3:25:8f:76:8d:35:92:4c:e1:e3:1a:78:fb:a1:5b:
0e:cd:27:ea:2d:bb:5e:45:88:39:e2:8f:f6:41:f3:57:77:fc:
96:fe:5c:52:67:b5:9a:32:e3:8a:5c:7d:d2:fb:c3:55:b2:b5:
31:5a:90:2f:30:07:5f:44:9e:22:63:08:1c:59:cf:5a:f7:a9:
69:9e:06:ce:1b:b1:2e:87:63:d4:64:34:ad:77:1d:5c:c9:a4:
29:16:6a:41:8b:be:e8:34:1b:7e:dc:c1:bb:05:62:9a:f3:46:
3a:75:33:d6:3f:2e:03:18:96:35:2f:8e:e5:ea:ff:00:cd:eb:
4c:4d:dd:f9:8a:9e:3e:fa:d5:8e:6a:0e:26:6b:fd:9f:2a:f5:
fb:79:c1:36:84:fb:da:f9:c1:73:ed:10:ca:91:e0:11:77:55:
0a:63:21:3d:63:2e:7f:dc:76:74:d5:a3:9f:a0:1b:79:b3:38:
ed:5f:46:bf:34:89:19:75:76:e7:80:8f:a1:69:64:e8:b7:42:
e4:e3:16:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:13:35 2025 by rpki-client