Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
File: TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft (raw, json)
Hash identifier: zvwNADLJRkLgfI+XxRtC66gedj9tSGpL0a6pC4S3LH8=
Subject key identifier: 7B:F4:C0:D4:BD:7B:14:A6:01:9C:93:51:F3:75:69:AD:46:45:CB:35
Authority key identifier: 4C:39:05:5A:69:90:B8:24:08:CF:1A:BF:29:31:37:80:E2:49:A4:C9
Certificate issuer: /CN=4c39055a6990b82408cf1abf29313780e249a4c9
Certificate serial: 0198D4A80AFC144B8A6F25C24A4CA0F7BC11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
Manifest number: 11B2
Signing time: Sat 23 Aug 2025 02:00:39 +0000
Manifest this update: Sat 23 Aug 2025 02:00:39 +0000
Manifest next update: Sun 24 Aug 2025 02:00:39 +0000
Files and hashes: 1: 0Y15xTEGHWqAVJeDnj84hoOI0tg.roa (hash: x9AqfYccJqcsHyWL4/sbLsYAD4D5JWU2OTOL9ya8Qzo=)
2: IYab2KOA6Rs-FvpcDRNq2DIlRwA.roa (hash: IVe8cPHTrjQPMjYgTeQH7fMCvrM38QVBDNRacJOqgtc=)
3: TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl (hash: S8MQzRmYtdKzqb7El5Am9zRMj5KbSH3savF932zwcc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:0a:fc:14:4b:8a:6f:25:c2:4a:4c:a0:f7:bc:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c39055a6990b82408cf1abf29313780e249a4c9
Validity
Not Before: Aug 23 02:00:39 2025 GMT
Not After : Aug 24 02:00:39 2025 GMT
Subject: CN=7bf4c0d4bd7b14a6019c9351f37569ad4645cb35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f2:30:92:93:2a:55:b6:cd:24:5b:59:7c:41:
ec:7d:6b:ef:06:ef:ba:45:47:79:a7:f0:bf:9f:8b:
87:bf:30:44:4f:e2:54:61:1d:33:bf:2e:14:7b:b0:
b5:ea:47:58:88:ae:ca:5d:5a:13:06:6a:11:65:e1:
48:21:d9:22:17:4a:75:a1:2c:25:6d:65:29:3d:05:
43:91:ec:c0:c0:5b:5b:82:23:e7:90:99:c6:aa:aa:
fc:e0:23:f6:53:70:b6:a6:f2:3f:2c:39:89:c3:9f:
fb:f5:7d:e9:5f:a7:99:ce:f3:b5:ee:a4:46:5e:e1:
de:0f:3e:9e:14:cb:4a:76:e2:ea:02:d3:cb:0a:82:
c8:cd:c6:7c:3d:0e:13:c4:9a:f2:b5:0f:5c:7a:a9:
f6:0b:45:fa:e1:26:56:9b:64:19:14:f6:76:b5:15:
c2:71:b6:86:c2:66:8c:fa:e1:93:67:04:e4:37:40:
08:ed:f4:cb:26:69:0f:c6:40:eb:fc:17:93:04:19:
82:09:67:b9:40:43:b2:be:6a:54:ab:b7:c3:0d:0a:
b5:2f:b3:c6:89:0f:0a:36:0b:2b:19:d8:33:f7:57:
70:e0:c5:9b:81:64:2d:cd:3b:19:46:0b:4c:ba:2c:
a2:f3:6f:3e:8e:b3:5b:a3:7c:3d:12:e4:cb:00:19:
2e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F4:C0:D4:BD:7B:14:A6:01:9C:93:51:F3:75:69:AD:46:45:CB:35
X509v3 Authority Key Identifier:
keyid:4C:39:05:5A:69:90:B8:24:08:CF:1A:BF:29:31:37:80:E2:49:A4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ce:7c:da:20:c2:72:f8:c2:8c:9d:b1:96:1b:63:51:e3:75:
fb:50:5d:02:22:86:81:72:01:dc:24:9b:d7:d8:37:99:bb:6e:
02:0b:ec:63:d2:fe:e3:c3:ca:99:35:34:dc:5a:d1:de:45:f3:
6c:cc:1a:1d:ce:7f:b3:16:b3:0a:36:e8:6a:d9:18:11:1d:74:
d1:cd:81:6d:a6:7f:f6:6e:ea:3a:33:56:a2:af:8c:db:3a:89:
6b:60:5e:9c:62:24:8d:eb:35:bd:f2:c6:80:a0:94:74:a3:bc:
60:a2:de:05:b3:13:d9:d3:78:82:f0:0b:90:e5:32:cd:a6:27:
b5:55:d9:27:69:6c:68:24:4b:5b:ae:e8:55:2e:57:b1:20:b3:
b1:d9:f1:f9:a1:de:19:a9:a0:e4:ec:ae:e9:5f:ab:db:97:31:
d2:3b:1f:bd:61:4a:f5:43:88:c5:d7:eb:6c:62:5b:2c:9d:e6:
fe:7c:89:dc:07:10:0b:eb:ec:1b:8e:e1:c2:a5:bb:bc:df:f0:
65:6b:e7:05:3c:8d:02:0f:06:7b:e3:62:a2:95:aa:c8:a4:fb:
24:0a:06:1a:8d:f9:db:0e:37:3a:7d:67:6b:1f:97:41:59:94:
cb:b7:b0:5d:15:58:c1:e6:16:c7:55:18:ef:b2:0a:bc:cb:8b:
67:be:3a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:45 2025 by rpki-client