Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
File: TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft (raw, json)
Hash identifier: fkc8uGsbXSx05W7jcqdccAu4yPzmzfiD2/0ugsTwbAs=
Subject key identifier: C4:34:CA:4C:12:3D:14:BC:5E:66:BF:6A:D2:DF:31:16:C2:70:F6:53
Authority key identifier: 4C:39:05:5A:69:90:B8:24:08:CF:1A:BF:29:31:37:80:E2:49:A4:C9
Certificate issuer: /CN=4c39055a6990b82408cf1abf29313780e249a4c9
Certificate serial: 0197C07F4B3B78C288DA9BFCFF43C892F6C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
Manifest number: 1123
Signing time: Mon 30 Jun 2025 11:00:57 +0000
Manifest this update: Mon 30 Jun 2025 11:00:57 +0000
Manifest next update: Tue 01 Jul 2025 11:00:57 +0000
Files and hashes: 1: 0Y15xTEGHWqAVJeDnj84hoOI0tg.roa (hash: x9AqfYccJqcsHyWL4/sbLsYAD4D5JWU2OTOL9ya8Qzo=)
2: IYab2KOA6Rs-FvpcDRNq2DIlRwA.roa (hash: IVe8cPHTrjQPMjYgTeQH7fMCvrM38QVBDNRacJOqgtc=)
3: TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl (hash: AqSqZqNJZvKuZCcSyq6KS1OyDV/+QVsW1im9y4sAcfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 11:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:7f:4b:3b:78:c2:88:da:9b:fc:ff:43:c8:92:f6:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c39055a6990b82408cf1abf29313780e249a4c9
Validity
Not Before: Jun 30 11:00:57 2025 GMT
Not After : Jul 1 11:00:57 2025 GMT
Subject: CN=c434ca4c123d14bc5e66bf6ad2df3116c270f653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:11:f6:23:e4:80:cf:68:7d:77:34:d7:69:29:
ac:a9:24:d0:26:2e:c6:2d:4e:c7:24:2e:85:84:8a:
5e:6a:0e:74:b4:0a:0b:d2:50:4a:df:c7:f3:c9:3f:
3b:1f:63:84:02:3a:51:03:82:72:53:6d:07:02:19:
af:f6:ec:4e:a0:6e:c6:6d:8d:b3:d4:f2:be:1d:ca:
36:a0:3e:5c:3d:e5:4c:03:cc:ba:f7:5b:0d:aa:29:
53:56:9f:4a:f6:24:94:00:70:13:41:88:9b:5b:58:
c5:62:49:c1:58:02:e9:ec:e0:75:76:55:da:3f:90:
c9:43:c0:1d:f5:aa:89:ff:66:cb:b3:07:37:7c:7a:
8d:12:e7:16:8e:78:6e:42:31:bb:93:9b:02:93:ff:
b5:1d:1a:58:ae:e2:a0:5e:4d:01:ed:7d:3d:71:05:
22:ae:a0:1f:79:bd:ea:2a:83:e2:29:8b:da:25:52:
cf:3a:3a:46:3d:4d:5b:30:63:37:a0:19:9b:a4:cd:
93:6a:02:99:25:83:cb:e0:fe:75:fc:8a:f6:0c:67:
ed:67:ca:ca:22:5b:b9:51:b2:b7:2b:f4:88:2c:be:
97:1e:8e:cd:ac:c2:b3:d7:c6:81:d0:16:9b:43:de:
8c:85:d3:f9:ac:11:f1:54:bf:05:cb:7b:11:39:2c:
89:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:34:CA:4C:12:3D:14:BC:5E:66:BF:6A:D2:DF:31:16:C2:70:F6:53
X509v3 Authority Key Identifier:
keyid:4C:39:05:5A:69:90:B8:24:08:CF:1A:BF:29:31:37:80:E2:49:A4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:e5:6d:26:72:b1:64:5e:68:eb:a1:62:87:10:4f:14:b9:ef:
ef:a3:a4:ab:b2:eb:68:a2:1a:bb:3f:44:3b:4d:94:d5:55:87:
ef:2c:81:e5:e1:0a:ed:9b:30:64:dc:e4:03:53:65:9d:34:4a:
00:70:02:5a:78:8b:c4:ac:7c:aa:af:b4:d2:9f:23:2c:48:17:
0e:fb:bf:ef:1a:cf:ba:29:49:bf:6f:fd:60:14:b4:2d:82:e7:
7b:b7:ca:fb:1c:a9:17:88:92:c7:85:ca:63:e5:89:14:9f:5f:
cc:69:c1:b3:a6:a3:3c:34:75:a1:f5:5e:3c:f1:81:cc:8d:3c:
fb:0e:c2:e2:15:89:a8:b2:7a:23:56:94:c9:b9:66:d9:b7:b3:
f2:60:3e:7e:d2:b2:43:83:c4:75:6e:2d:5e:29:0e:87:c8:0e:
0c:39:75:db:2d:8c:4b:0f:3c:c1:25:fd:1a:3a:1c:a9:70:b5:
a7:69:20:e7:7c:06:36:94:82:6e:f5:4b:89:98:4e:d0:55:70:
ba:84:29:d7:d4:fd:7f:dd:63:ce:39:bd:8d:67:f8:0c:ff:bc:
8e:34:69:bb:f0:c6:4e:7c:06:97:c1:84:fa:4f:2d:ad:0a:53:
11:9b:ee:05:e7:4d:2d:51:82:3a:72:60:66:67:4f:52:28:43:
17:92:00:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:01:08 2025 by rpki-client