Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft
File: TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft (raw, json)
Hash identifier: Si0fFklkQ9OUV8EeoFcnBuzj0IFFO0psSWAKEoeIVAw=
Subject key identifier: 99:06:BA:D0:C0:40:24:B5:97:C7:4C:D5:A2:A3:A7:91:9B:E6:25:42
Authority key identifier: 4C:33:C0:E1:4D:57:EA:BC:3B:65:E3:8A:77:36:BE:BE:49:09:2E:9E
Certificate issuer: /CN=4c33c0e14d57eabc3b65e38a7736bebe49092e9e
Certificate serial: 0198D6298E6B3EBCA7D1EDE000308961D63F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDPA4U1X6rw7ZeOKdza-vkkJLp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft
Manifest number: 0D8F
Signing time: Sat 23 Aug 2025 09:01:44 +0000
Manifest this update: Sat 23 Aug 2025 09:01:44 +0000
Manifest next update: Sun 24 Aug 2025 09:01:44 +0000
Files and hashes: 1: NgIKF8jcDLCHN3aJD8aULMWPG30.roa (hash: 9imCN3WetXg8Q1ELNvwqDIt+zXYLct6tp7egk/4AdG8=)
2: TDPA4U1X6rw7ZeOKdza-vkkJLp4.crl (hash: e5BdpGnE9cO0Fz+YSfklO8gn0nGrVU2FT2TxNzbBMv8=)
3: k_nIf6wVx1Xdxat4zYtnBqTL13Y.roa (hash: HaoM7rJ6dUREUsX3C7dLkVUY9dcgJCaHV1PnH/ISMtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDPA4U1X6rw7ZeOKdza-vkkJLp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:29:8e:6b:3e:bc:a7:d1:ed:e0:00:30:89:61:d6:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c33c0e14d57eabc3b65e38a7736bebe49092e9e
Validity
Not Before: Aug 23 09:01:44 2025 GMT
Not After : Aug 24 09:01:44 2025 GMT
Subject: CN=9906bad0c04024b597c74cd5a2a3a7919be62542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:89:e0:d7:d8:8a:bf:8e:c5:43:3c:e9:1e:61:
3f:be:48:ab:6e:0e:90:23:7c:12:4c:1a:d2:22:cc:
51:32:f5:b6:a3:29:35:8c:db:15:92:1d:5f:e9:3c:
ef:f7:ef:7a:69:15:73:42:b0:b5:af:b7:1b:b8:ce:
75:69:7a:24:05:7a:dd:d1:c6:e9:b6:f7:11:47:f9:
cc:66:0e:44:4e:af:7a:09:21:d2:6d:b2:23:15:24:
4b:7c:10:f3:92:b5:6a:3d:a9:59:c0:2f:1b:ca:34:
11:2a:2a:ec:38:b9:9f:6b:76:af:0a:bd:21:ae:bc:
91:79:70:1f:35:01:cc:b1:98:77:ef:83:86:3e:da:
00:5f:bb:97:16:a4:91:f1:cf:53:7b:9c:50:2a:ff:
71:18:7a:29:67:4d:b1:b7:80:87:b7:3e:53:62:92:
83:bb:18:4a:12:88:6b:68:38:7a:98:48:f3:72:85:
a3:1e:55:bf:46:32:d3:5a:5c:6c:b1:57:66:8c:fe:
c9:64:2c:f5:9c:a6:22:18:d0:ac:d1:dd:79:21:81:
f6:ea:89:e4:ca:d0:ac:60:36:b3:0e:3e:50:d6:3c:
37:34:86:2f:af:1f:61:c4:3f:35:2b:85:3a:3f:ff:
9d:26:af:7a:04:08:c6:11:fb:5f:43:ad:82:a1:18:
f0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:06:BA:D0:C0:40:24:B5:97:C7:4C:D5:A2:A3:A7:91:9B:E6:25:42
X509v3 Authority Key Identifier:
keyid:4C:33:C0:E1:4D:57:EA:BC:3B:65:E3:8A:77:36:BE:BE:49:09:2E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDPA4U1X6rw7ZeOKdza-vkkJLp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:3e:36:8d:e8:59:59:b5:63:ce:9b:70:ac:37:66:6a:bd:a9:
4e:d3:5e:b3:de:03:ea:47:50:63:c4:45:f7:de:3c:86:c2:08:
21:9c:9b:dd:6f:72:1e:8a:d6:49:b5:47:2b:ed:81:e5:c8:12:
cd:9a:80:af:21:a8:a3:2a:e0:45:cd:59:59:c6:c3:d4:70:a6:
61:18:8f:36:d3:ca:67:f5:4b:db:9c:3e:3e:9c:23:60:bf:dd:
0c:8a:16:3c:38:e1:4b:0a:e5:da:6e:3b:af:82:b3:af:cc:c0:
e4:d1:a4:9f:b4:d2:d6:18:3f:8f:00:1b:ca:60:db:81:0f:22:
3a:c4:2a:fe:3c:4d:cc:75:ff:88:39:02:fa:48:8d:b8:0b:a4:
72:ac:c1:b5:b8:f9:e0:6f:43:10:02:69:52:c0:27:ed:23:84:
8d:a9:38:a7:e7:1b:af:22:3e:2d:b9:5a:15:4b:f7:e0:62:85:
71:c4:09:df:31:d6:76:ee:27:c1:50:b2:d1:81:a4:62:c1:c3:
60:54:60:1c:17:cc:13:eb:3d:17:cf:cb:f3:a9:bf:df:ef:11:
e0:c7:2b:86:87:9e:a9:8e:88:a5:a3:7b:d6:1d:ea:72:13:8c:
3d:8a:ea:cd:fc:9d:8a:6f:be:bd:79:7f:a5:b4:61:63:5b:63:
47:fb:ae:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:40 2025 by rpki-client