Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.mft
File: _tdzOdk4vvCHWZKTwgGzufgiNiM.mft (raw, json)
Hash identifier: QDZ0zE1ZCSS8LzTc0ebMKK60Y84L/nTRmRKOVGMCarc=
Subject key identifier: 4F:05:CA:17:32:42:CE:2F:88:1F:95:3F:08:CA:07:F2:80:9E:97:AC
Authority key identifier: FE:D7:73:39:D9:38:BE:F0:87:59:92:93:C2:01:B3:B9:F8:22:36:23
Certificate issuer: /CN=fed77339d938bef087599293c201b3b9f8223623
Certificate serial: 0198D7A953D0C30290CF65B128AA3F3F1E87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_tdzOdk4vvCHWZKTwgGzufgiNiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.mft
Manifest number: 15DC
Signing time: Sat 23 Aug 2025 16:00:55 +0000
Manifest this update: Sat 23 Aug 2025 16:00:55 +0000
Manifest next update: Sun 24 Aug 2025 16:00:55 +0000
Files and hashes: 1: JiqQ-b59vNl0MF5eVXzf0TfeO3c.roa (hash: OKAd29RpT9wnjVFO/8cLOZm/b/ev+jNX/rx5kLKiews=)
2: _tdzOdk4vvCHWZKTwgGzufgiNiM.crl (hash: Y9NOkgTxMJ9m2itHMQvQ8bZ7hxgfiypEMWEpLe4FpdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_tdzOdk4vvCHWZKTwgGzufgiNiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:53:d0:c3:02:90:cf:65:b1:28:aa:3f:3f:1e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fed77339d938bef087599293c201b3b9f8223623
Validity
Not Before: Aug 23 16:00:55 2025 GMT
Not After : Aug 24 16:00:55 2025 GMT
Subject: CN=4f05ca173242ce2f881f953f08ca07f2809e97ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:79:b0:bb:7f:08:ad:3f:01:db:c6:f8:25:ed:
1b:7f:9b:c6:e0:90:09:cd:f7:10:c6:e6:18:a6:08:
29:e3:61:86:a2:84:0e:1b:4c:8d:f0:27:a9:d1:cb:
b8:b4:02:96:e7:f1:58:48:58:4b:d4:2b:1f:88:9c:
2e:8b:f5:da:58:2c:5b:78:46:8b:e0:f3:12:f3:46:
6f:83:23:d4:8b:97:a4:9c:6a:d2:31:a2:a9:38:2d:
ba:8f:bc:86:7f:9a:98:d4:1f:29:8c:19:5d:ff:9b:
f2:2c:21:f2:de:14:b2:82:c1:05:b3:93:02:8b:e6:
0c:b3:93:b2:28:af:d7:a9:0a:21:9b:ad:01:43:79:
45:26:42:cf:ca:ee:82:0a:b0:e5:47:95:db:b5:67:
e1:0b:b5:0b:2a:d8:f4:29:fd:f5:91:3e:92:db:66:
24:d6:cc:62:af:35:a0:cc:ea:88:8f:7a:d6:77:0d:
2c:79:42:c2:cb:80:39:0c:1a:f3:82:94:6f:90:f1:
6a:a4:31:0e:55:8c:a6:93:87:95:c0:af:3d:05:a4:
66:89:71:84:6e:8d:a2:25:da:a5:a2:4f:87:7a:2e:
f5:5e:30:6f:0c:e2:cf:65:83:05:2e:28:3b:7a:27:
cf:70:31:32:2f:c5:e2:e2:b8:77:0a:d2:68:e7:9b:
08:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:05:CA:17:32:42:CE:2F:88:1F:95:3F:08:CA:07:F2:80:9E:97:AC
X509v3 Authority Key Identifier:
keyid:FE:D7:73:39:D9:38:BE:F0:87:59:92:93:C2:01:B3:B9:F8:22:36:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tdzOdk4vvCHWZKTwgGzufgiNiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:74:14:4a:7d:72:06:ea:6c:79:dc:7c:b0:d0:18:53:cb:0d:
78:a6:94:f3:8d:72:e6:b8:49:90:ab:6c:b7:e7:b1:a5:a7:f6:
fe:ce:e5:19:1f:2e:29:2d:cd:ca:1d:25:ad:5a:31:84:8f:35:
f9:b1:fa:4e:ca:50:34:0f:14:8f:14:28:50:dd:aa:cd:94:bd:
be:d4:40:27:5d:07:56:d3:9c:d1:ab:91:26:33:dd:b1:31:29:
0f:56:bf:35:16:bb:1b:1f:3d:c1:93:01:e0:0f:8c:f2:b8:48:
18:5c:3d:0e:3c:62:5d:c1:20:21:45:17:a2:7d:37:f6:25:ff:
dc:85:b5:4d:a1:4f:6e:97:46:cd:df:3e:6e:6b:e8:7e:ab:ce:
ec:0f:ed:77:22:8c:ea:a5:d0:5b:38:bd:93:d8:c2:71:1e:86:
2a:0e:7f:f5:45:f0:cc:af:e9:ac:40:c7:55:10:bc:05:84:15:
c4:f3:c3:40:4d:55:ad:43:42:97:3e:ec:55:6b:53:bd:2c:b7:
f0:4a:7a:14:63:55:b1:e5:c7:2f:91:57:cf:cd:6d:ff:a1:9c:
11:fe:4b:aa:e2:87:a1:6b:88:17:72:e7:b6:b8:8a:5e:a1:dd:
84:c6:ad:da:54:58:73:e0:7b:f1:d0:46:a8:34:45:6a:67:32:
19:aa:48:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:31:20 2025 by rpki-client