Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.mft
File: _tdzOdk4vvCHWZKTwgGzufgiNiM.mft (raw, json)
Hash identifier: uHzmk7Z3IL1UsdSiKKdpL35w1pLN8LKoQBLqRGkgfSs=
Subject key identifier: 79:8E:5B:C8:0F:4C:F4:51:D9:FA:C0:8D:94:06:5C:1C:49:93:4D:2E
Authority key identifier: FE:D7:73:39:D9:38:BE:F0:87:59:92:93:C2:01:B3:B9:F8:22:36:23
Certificate issuer: /CN=fed77339d938bef087599293c201b3b9f8223623
Certificate serial: 0197B5FC6303C42A61E8548B7AC8CA2FCDAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_tdzOdk4vvCHWZKTwgGzufgiNiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.mft
Manifest number: 1546
Signing time: Sat 28 Jun 2025 10:01:45 +0000
Manifest this update: Sat 28 Jun 2025 10:01:45 +0000
Manifest next update: Sun 29 Jun 2025 10:01:45 +0000
Files and hashes: 1: JiqQ-b59vNl0MF5eVXzf0TfeO3c.roa (hash: OKAd29RpT9wnjVFO/8cLOZm/b/ev+jNX/rx5kLKiews=)
2: _tdzOdk4vvCHWZKTwgGzufgiNiM.crl (hash: vRf6ALPiwTi5otX68MKX3rO3bnR1qkw9nhVSHWt47cY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_tdzOdk4vvCHWZKTwgGzufgiNiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:63:03:c4:2a:61:e8:54:8b:7a:c8:ca:2f:cd:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fed77339d938bef087599293c201b3b9f8223623
Validity
Not Before: Jun 28 10:01:45 2025 GMT
Not After : Jun 29 10:01:45 2025 GMT
Subject: CN=798e5bc80f4cf451d9fac08d94065c1c49934d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a6:62:9c:3a:a3:72:d0:32:2a:18:7e:18:7e:
0f:93:45:cb:1c:2b:62:82:01:d6:45:86:b8:0d:f8:
7f:8d:77:a8:9d:ce:fb:16:e9:f9:6a:f0:cc:bc:af:
f2:10:8f:8e:a4:ac:d3:27:40:be:00:92:e2:ef:cc:
a1:48:1a:06:4c:37:ee:5e:b8:ff:85:0d:20:28:c3:
5c:f4:e0:c6:06:9d:61:00:03:9e:9c:7d:f6:36:54:
f2:66:7f:3b:15:6e:be:ef:b5:8b:e2:4e:9c:bc:cc:
90:e1:81:bb:68:88:2e:28:46:3f:18:76:5a:2c:7d:
48:a2:08:d3:29:18:ff:48:59:fd:50:d5:e3:49:70:
ab:c5:76:e1:0d:d1:cb:37:53:13:da:7b:ad:ce:a9:
21:6b:8e:d0:28:d3:95:ad:70:73:a6:ea:b8:f7:7a:
d0:a5:e4:0b:13:af:95:8c:6d:a6:e4:f7:28:af:bd:
85:08:db:f7:db:b3:91:a4:94:99:36:f7:9a:cb:af:
ba:6f:99:20:40:6f:84:86:f3:b3:06:16:67:97:47:
ab:ec:e0:52:5c:06:30:c6:38:6d:7d:bf:2d:68:67:
9f:1e:91:3d:d9:be:e9:d3:06:12:37:9e:4b:6e:ec:
fa:14:de:b6:25:c6:28:3d:48:eb:47:a9:b2:b2:8b:
3f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8E:5B:C8:0F:4C:F4:51:D9:FA:C0:8D:94:06:5C:1C:49:93:4D:2E
X509v3 Authority Key Identifier:
keyid:FE:D7:73:39:D9:38:BE:F0:87:59:92:93:C2:01:B3:B9:F8:22:36:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tdzOdk4vvCHWZKTwgGzufgiNiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:46:c1:2a:bf:37:50:99:58:6e:48:ae:0e:29:f6:e6:ef:ea:
a9:e4:47:30:9a:38:da:bf:f4:e2:68:5b:5d:73:74:d2:58:d4:
3f:3e:00:0d:c5:d5:96:0a:64:ee:69:c5:46:c1:74:20:97:7b:
9c:c6:c1:63:a5:e6:30:2c:76:b2:20:72:4d:43:5e:80:c5:97:
71:e8:11:1e:64:29:d5:b4:58:06:af:c1:e2:3b:51:c7:b7:24:
af:7c:0c:e7:5d:f9:87:b7:f3:f7:7f:97:7d:b0:ea:99:18:68:
8b:d5:39:44:6f:1a:de:06:98:4e:a3:52:ac:d5:e6:58:4d:90:
96:0e:a8:d1:a2:53:b4:41:65:e0:ad:bc:d8:8d:64:1a:17:82:
c6:2b:c7:11:27:4f:89:16:18:80:d7:3f:12:da:32:7e:4f:39:
7b:4d:91:18:9a:0f:b5:03:5d:07:2e:6a:24:9e:9b:06:df:5b:
13:9e:3d:c8:f7:41:1b:ae:66:b5:33:f7:f3:18:5c:6b:20:15:
14:55:d6:32:d9:90:91:aa:82:72:45:8b:76:31:49:32:02:df:
93:fd:9a:09:b8:f5:06:f8:f2:f7:3a:94:96:3a:b9:e2:4e:62:
f3:4d:4c:86:cc:ec:9b:14:9b:80:8a:83:b8:74:36:28:ff:8a:
16:10:ec:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:04:49 2025 by rpki-client