Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
File: TddPu7rljdCHbZnoDsgqEaRHf34.mft (raw, json)
Hash identifier: wxGGlu63p3uLxyTQd16IMK3O+y6gphxENE8jORigJCI=
Subject key identifier: 5F:4A:BB:FD:DE:C3:8D:F6:21:21:F9:3B:CA:83:B4:C6:0F:FB:BF:A1
Authority key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
Certificate issuer: /CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Certificate serial: 0197B5FC223548C46AC301B49C0AD959F41A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
Manifest number: 0DB2
Signing time: Sat 28 Jun 2025 10:01:29 +0000
Manifest this update: Sat 28 Jun 2025 10:01:29 +0000
Manifest next update: Sun 29 Jun 2025 10:01:29 +0000
Files and hashes: 1: 4Jp18k3WgZxFLlIl31FziAZ_pyE.roa (hash: Rdy6GJGskKOgLLcQAYAa6TgfgY93QdTyE4LXA4WR8FE=)
2: J-mZDParjvz3ljIfTzlhasavsBo.roa (hash: X+bwHIE0wlCUwYusUU0uKi4Yc/Kz9/L2eOGJbsIOXJw=)
3: TddPu7rljdCHbZnoDsgqEaRHf34.crl (hash: 7d1vIbQbu/5nC7QlqyXImybdPS6BKFRLJGS9+oNrbtU=)
4: XKw10zVnmlXuQgWSHmsWy3UInkA.roa (hash: fA8gDGCZEPwWssK0Gw9sjd95kghYgprLAypP9MmGqjE=)
5: cxjVghHfKz7r8jK0ajPAm20QF-U.roa (hash: HPsMihI6S6ZtrZUoih477ooLtwdT/SYfO2io/vTyfY8=)
6: d852wo13D922O1kxvHO2L_8C0MU.roa (hash: HBCOzohfyjSX600EtZoiv9El3W7QzIDEos4plB6TxSI=)
7: jIbMiSFlsQdlGZXR1HxPoO5c35o.roa (hash: QE4Ii8v6WxF41ed0I+H7egny9WwHZOU3Z66ypjFLn7Y=)
8: wHe63tLHFMK7NBW2SYijpGxUNgM.roa (hash: CT+CH4LtTVHno3GtUxYN9M1xC2YXqLCYEq0QekucUtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:22:35:48:c4:6a:c3:01:b4:9c:0a:d9:59:f4:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Validity
Not Before: Jun 28 10:01:29 2025 GMT
Not After : Jun 29 10:01:29 2025 GMT
Subject: CN=5f4abbfddec38df62121f93bca83b4c60ffbbfa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f3:25:6d:78:ab:36:c1:d3:8f:72:78:a7:a9:
f5:d7:74:56:ad:0f:0d:98:83:f4:1e:1c:dd:0a:d5:
09:d2:e8:30:79:66:cd:02:86:84:7d:e1:8c:78:68:
0a:a7:90:7b:69:ad:ec:76:be:98:df:da:10:67:f8:
ef:10:11:89:2d:0a:52:56:37:63:94:a6:cb:8c:d9:
9e:43:4c:71:4e:10:ba:e6:d2:26:ba:27:dd:f0:7c:
b4:db:35:dd:d6:97:03:b1:71:9d:64:86:e0:64:ff:
48:92:8f:fe:ec:42:8e:d6:c6:a9:d7:df:32:97:0a:
fa:23:9f:de:06:4d:fa:bc:88:ea:1d:1f:ae:3a:68:
0e:82:27:9f:f9:4d:7d:f9:a6:5e:3f:d6:b7:d2:40:
2d:38:87:0b:3a:a6:de:5d:c5:3f:08:dd:38:61:98:
0f:1b:7c:9e:b9:5b:aa:39:a1:e7:73:79:9f:0a:cb:
97:49:34:d3:70:40:31:47:51:ad:57:fe:c9:18:1a:
19:b3:bd:33:0e:20:be:44:a5:52:79:5f:5a:10:af:
ed:58:58:96:0a:4d:2d:f4:37:88:47:9f:12:91:3e:
5a:0f:9a:30:8e:50:51:b0:55:74:ab:a2:e0:76:71:
6c:3f:a9:6b:10:22:ab:2d:3d:dc:2c:de:ad:1b:80:
ac:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:4A:BB:FD:DE:C3:8D:F6:21:21:F9:3B:CA:83:B4:C6:0F:FB:BF:A1
X509v3 Authority Key Identifier:
keyid:4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ea:c1:0f:f6:81:80:7c:41:22:97:c6:f3:f5:2e:64:7e:e7:
63:d9:63:7f:ff:53:c6:1f:8d:12:16:b6:b5:e1:ff:18:0f:5f:
e2:42:25:94:24:47:22:01:5e:ac:fb:40:3c:cd:f6:9c:30:bd:
c6:1a:b5:ef:68:55:e3:62:99:ba:33:4c:0f:ec:23:e6:9f:25:
1f:30:e9:fd:66:79:ac:89:b4:e3:a5:15:ce:f0:54:2d:bb:3e:
47:39:4a:de:d8:61:72:3f:ae:6d:ba:78:b6:62:7e:2f:20:56:
b3:de:c5:71:e3:0c:b4:f8:c2:25:5f:91:26:d1:39:7e:13:00:
19:f5:e6:6a:90:06:33:0d:b3:8d:41:2d:36:2f:d8:5e:77:f3:
e0:8e:d6:0b:0b:de:b0:24:01:25:47:e2:66:06:70:32:d8:78:
fc:16:de:db:35:f6:6e:05:7b:14:be:9c:ab:88:4d:6b:eb:5c:
d0:27:d0:df:27:78:2e:42:3a:c8:63:bc:54:c5:31:3e:b2:ad:
09:d4:ce:ad:2f:30:17:f8:98:ce:45:1e:25:72:58:9b:37:65:
8f:64:97:97:53:eb:7d:f0:79:bb:d8:b0:c6:b8:e9:d5:10:46:
d0:59:64:e3:6d:ea:1b:97:4c:bf:b0:14:96:1b:44:95:91:a0:
74:f2:f3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:47:31 2025 by rpki-client