Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
File: TDJWN81N6a_lO9TxIav2IkX2cU8.mft (raw, json)
Hash identifier: Hs58L0R9ms8oKskrrhUllJFZZeUhbne8aJ+VRESLgMc=
Subject key identifier: AF:31:AC:2A:46:7B:7F:FB:41:A1:A2:4B:91:C9:A2:32:1B:D9:FA:3B
Authority key identifier: 4C:32:56:37:CD:4D:E9:AF:E5:3B:D4:F1:21:AB:F6:22:45:F6:71:4F
Certificate issuer: /CN=4c325637cd4de9afe53bd4f121abf62245f6714f
Certificate serial: 0197B70F30262A39F1CA3C7950F350C88BC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
Manifest number: 06AA
Signing time: Sat 28 Jun 2025 15:01:55 +0000
Manifest this update: Sat 28 Jun 2025 15:01:55 +0000
Manifest next update: Sun 29 Jun 2025 15:01:55 +0000
Files and hashes: 1: LYDDQOnitFMTtAyGKwDs2TyB_cA.roa (hash: sjSPKMVEsY4HYjeMnDvZAekbl4IrY01T9jduMhK7Jbc=)
2: TDJWN81N6a_lO9TxIav2IkX2cU8.crl (hash: fzk+cmliwTyvqckvQJ5QxrbByPrzRgt/977KcFDFbaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:30:26:2a:39:f1:ca:3c:79:50:f3:50:c8:8b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c325637cd4de9afe53bd4f121abf62245f6714f
Validity
Not Before: Jun 28 15:01:55 2025 GMT
Not After : Jun 29 15:01:55 2025 GMT
Subject: CN=af31ac2a467b7ffb41a1a24b91c9a2321bd9fa3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9a:54:fa:2c:6c:78:0f:34:db:49:6f:cf:1a:
0c:c6:06:16:2b:c1:6b:95:bb:d6:69:94:b5:91:79:
4d:ad:3c:2c:60:1a:17:88:ae:9d:d5:80:7d:0e:e3:
33:9e:2c:68:22:39:39:5e:a7:af:f0:c3:7e:2f:6d:
4b:7b:8b:8e:ba:aa:47:98:8e:f9:ce:8b:07:ad:dd:
4b:b8:91:6b:5e:74:8d:bf:99:67:48:a8:e6:85:9a:
02:5c:80:79:54:a1:9d:27:46:95:a0:c1:2f:89:b8:
2c:fd:6c:ca:2a:01:ab:06:29:cc:24:1f:cc:0b:ac:
a1:bc:cb:93:f7:ca:71:14:1a:64:9d:d4:ac:f6:cb:
2b:48:74:c0:6c:bc:53:3c:3a:c7:ce:d2:90:ed:62:
d7:34:b9:22:cf:be:eb:10:04:37:80:9a:5c:7f:ad:
2a:ae:a4:54:5c:2d:4e:c5:2d:64:8e:03:54:80:65:
66:be:62:f8:4f:e2:fe:6d:aa:9f:1f:20:07:c3:3e:
82:ba:a3:60:7c:6c:5a:f8:fc:e0:7f:06:ef:84:90:
4e:7b:7a:dc:2e:38:49:e6:cd:86:bc:ae:52:01:e4:
f6:9f:64:b9:f0:3b:b0:2f:8e:d6:79:5f:a3:2a:70:
b0:31:34:c5:7f:b5:7a:f9:b5:b6:c1:a2:2a:22:fe:
ca:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:31:AC:2A:46:7B:7F:FB:41:A1:A2:4B:91:C9:A2:32:1B:D9:FA:3B
X509v3 Authority Key Identifier:
keyid:4C:32:56:37:CD:4D:E9:AF:E5:3B:D4:F1:21:AB:F6:22:45:F6:71:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:76:da:0a:9a:ff:32:72:06:6b:af:7b:18:9a:4f:21:f4:ba:
77:4a:b4:b7:33:30:03:20:bb:79:92:f0:ea:3a:00:b8:ab:b8:
8c:2f:85:34:4f:73:3a:6e:f6:5a:11:65:e0:64:ea:b7:21:3c:
b6:06:82:21:c2:6a:77:e1:a2:d9:62:61:36:38:47:8a:de:65:
73:ce:45:48:a2:15:0c:20:09:20:cd:84:df:7b:a9:25:77:26:
7b:15:8e:34:8c:0b:a6:91:84:0b:8a:b5:b6:4d:fe:cc:b8:c8:
cb:64:18:1b:3d:36:e9:07:cd:78:05:b2:2f:d1:04:62:84:8f:
6a:61:22:66:2d:ba:77:b2:ee:2d:6e:b2:7f:a7:e6:91:22:91:
ef:71:b4:88:cb:12:a3:73:11:1a:26:40:77:f7:76:5b:9b:0c:
44:05:b0:dd:5e:4c:fa:21:d9:0f:0e:7b:3f:b8:87:63:c3:55:
2b:12:26:51:0b:34:43:70:11:2e:8a:de:86:0a:9c:b5:4c:d4:
b6:81:25:2c:fe:1a:1a:31:0e:45:e3:3a:aa:8e:b6:a7:4e:01:
58:5c:7d:c2:70:2c:eb:a3:7b:2e:07:67:fa:e1:57:5d:ab:34:
dc:ef:1c:c2:f7:30:b1:e9:71:7d:d3:94:a1:64:0c:1d:2a:61:
bf:b9:35:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:50:32 2025 by rpki-client