Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft
File: TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft (raw, json)
Hash identifier: bqoyNr8ZqSc8d1jg6PYbg4GCECzZ4g51y2rIuyMFtNs=
Subject key identifier: F3:2F:31:16:8A:DD:99:12:DA:D7:29:BD:DC:09:F3:BF:F3:D0:57:8C
Authority key identifier: 4C:24:C3:08:B0:24:1C:3B:CC:14:CF:67:77:59:1D:27:23:7F:FA:F1
Certificate issuer: /CN=4c24c308b0241c3bcc14cf6777591d27237ffaf1
Certificate serial: 0197B6A0F1CE2A0334FEBFDF18D8436594FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCTDCLAkHDvMFM9nd1kdJyN_-vE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft
Manifest number: 0298
Signing time: Sat 28 Jun 2025 13:01:30 +0000
Manifest this update: Sat 28 Jun 2025 13:01:30 +0000
Manifest next update: Sun 29 Jun 2025 13:01:30 +0000
Files and hashes: 1: TCTDCLAkHDvMFM9nd1kdJyN_-vE.crl (hash: xiicP4+kd81tLgzmnnWLuQQ2JIruUmXQzQohOZ7Juq8=)
2: _l-XctLDCPzRb-pMlqXmGyqDvHM.roa (hash: myqB80koPH8JwlE9qSMpb7bOcTN1/cJ21+MIuMT+GyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCTDCLAkHDvMFM9nd1kdJyN_-vE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:f1:ce:2a:03:34:fe:bf:df:18:d8:43:65:94:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c24c308b0241c3bcc14cf6777591d27237ffaf1
Validity
Not Before: Jun 28 13:01:30 2025 GMT
Not After : Jun 29 13:01:30 2025 GMT
Subject: CN=f32f31168add9912dad729bddc09f3bff3d0578c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c0:9d:ec:10:88:67:80:f3:9b:3f:e3:89:0e:
e8:02:a3:42:f7:5d:93:54:06:23:91:20:20:76:a2:
d6:7a:b9:cf:17:54:2c:03:aa:4e:19:02:e1:25:79:
e5:a3:c0:c9:b4:3c:0e:5b:e3:cc:99:79:67:7e:25:
54:f2:68:b4:a1:01:19:f4:51:47:3f:7d:49:46:5d:
e0:23:32:1d:36:62:34:eb:4a:9f:01:c2:6b:1a:22:
d1:60:5d:be:bc:da:6f:e7:7d:3a:17:28:01:05:51:
47:ab:d4:1b:e6:37:66:37:1d:58:0c:29:db:5d:93:
ff:a2:7e:0b:58:87:2f:62:8b:12:ae:6c:53:51:0a:
d6:fa:01:f9:16:ac:b6:8a:58:63:0d:ea:c8:8c:92:
00:f6:77:ea:48:d5:65:5e:55:ab:d0:39:36:b2:4e:
73:41:e8:20:34:a8:80:f5:60:25:22:5c:8a:b2:26:
5d:21:a8:1b:d9:dc:26:33:3a:8d:77:d1:69:d8:f1:
53:0e:b9:39:37:bb:32:79:3d:82:43:0a:a6:47:2a:
e4:b9:f1:c7:56:0f:d4:66:97:d6:35:45:43:63:22:
7e:42:f7:8a:b2:2b:f5:90:11:7a:3c:a7:1a:74:12:
2b:86:94:bd:bd:6a:16:6e:9b:2e:89:8e:7f:1e:14:
d5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:2F:31:16:8A:DD:99:12:DA:D7:29:BD:DC:09:F3:BF:F3:D0:57:8C
X509v3 Authority Key Identifier:
keyid:4C:24:C3:08:B0:24:1C:3B:CC:14:CF:67:77:59:1D:27:23:7F:FA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCTDCLAkHDvMFM9nd1kdJyN_-vE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:c3:ee:a3:9f:ec:98:17:a1:dd:f4:3e:d3:aa:aa:bb:18:07:
51:a5:8d:17:03:18:16:02:d2:43:d5:48:63:cc:44:2c:38:a6:
2c:ed:97:76:28:e4:ec:6d:eb:fd:3e:06:f5:69:d9:c5:4b:e0:
58:a3:d3:6c:23:52:23:75:ea:98:09:44:af:3d:b7:8f:71:81:
19:b6:8d:78:81:18:1d:1a:78:a1:0c:f9:00:49:11:43:50:0c:
22:01:1d:d4:87:f3:c0:4f:35:cd:d2:9d:a3:68:43:dd:bf:ba:
51:5f:00:94:66:37:23:94:53:34:11:1c:b6:1d:63:9d:3b:10:
e0:f3:a8:e1:29:66:d3:78:ff:9d:4b:b8:23:ba:5a:ec:23:b8:
3a:71:ac:c7:b1:03:b2:44:17:80:66:c7:87:8e:97:a9:c6:37:
5a:39:d1:5a:f6:d3:3f:63:46:f4:ca:e9:03:ae:c5:f2:eb:c3:
3e:22:5c:db:0b:48:59:63:80:07:81:44:1f:f5:77:ea:c6:8a:
70:c6:f2:c4:01:85:44:e9:0d:55:b4:58:66:39:5e:51:49:41:
24:c8:9c:bf:0c:26:82:73:80:37:26:0e:6e:6d:9a:7b:b9:e1:
44:a8:b9:b6:16:cd:0d:ca:60:64:f0:91:c4:11:f1:e2:1c:b2:
a4:87:71:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:24:48 2025 by rpki-client