Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
File: TD6do79ZOALMgz_l2UelJpb1jI0.mft (raw, json)
Hash identifier: J2PJo5gZF0wSE2nquk3xdTYrlofevvYMoRul7Z2oI9A=
Subject key identifier: F3:2F:3D:61:51:7C:66:D2:6C:28:A3:DC:24:97:8E:8B:7F:C5:1C:70
Authority key identifier: 4C:3E:9D:A3:BF:59:38:02:CC:83:3F:E5:D9:47:A5:26:96:F5:8C:8D
Certificate issuer: /CN=4c3e9da3bf593802cc833fe5d947a52696f58c8d
Certificate serial: 0197B6A131D55FCFB3EF8C99E90A8E942EB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
Manifest number: 14F5
Signing time: Sat 28 Jun 2025 13:01:46 +0000
Manifest this update: Sat 28 Jun 2025 13:01:46 +0000
Manifest next update: Sun 29 Jun 2025 13:01:46 +0000
Files and hashes: 1: EWuOguv1P9Rw7Q-U1qAW9dBN2No.roa (hash: rN97euvDe5WCriK9EjJsNO5wn2cUGLmPhpQvNqo71q8=)
2: TD6do79ZOALMgz_l2UelJpb1jI0.crl (hash: zBcRshNOFSzZaw+xWw1W0CEIUeAnUqRaW5cqpsx7HnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:31:d5:5f:cf:b3:ef:8c:99:e9:0a:8e:94:2e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3e9da3bf593802cc833fe5d947a52696f58c8d
Validity
Not Before: Jun 28 13:01:46 2025 GMT
Not After : Jun 29 13:01:46 2025 GMT
Subject: CN=f32f3d61517c66d26c28a3dc24978e8b7fc51c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c4:27:38:5d:32:d9:d2:e2:e1:4e:04:e5:5f:
e2:74:50:d0:4d:ba:ce:59:59:6b:5d:29:d9:59:1e:
0c:32:03:a4:b8:ca:fe:30:08:1f:e4:1d:18:85:c8:
e1:ec:c4:75:06:01:17:0c:30:8a:d0:92:02:3f:c5:
19:21:eb:10:22:47:65:8d:3a:c0:67:dd:11:1e:a0:
62:70:dc:a5:33:85:b8:ed:93:7d:c3:e7:67:c2:57:
04:2a:39:df:90:b8:36:c4:0d:5c:a6:6f:4d:04:b9:
bc:3f:c9:1f:fb:ee:cf:12:7a:69:e5:d3:f3:d7:b8:
56:5e:c1:6a:cc:a1:75:da:3a:a4:37:73:17:dc:a8:
e6:ec:f9:6d:92:ad:70:53:3e:aa:07:2a:ea:63:2e:
e7:ab:a8:87:6f:52:00:d9:c9:07:2e:27:fa:5c:7e:
94:75:9b:64:b4:5a:0d:24:db:c9:38:27:5e:d1:00:
c3:e3:86:a5:08:a1:38:4a:df:84:e8:67:b9:22:38:
f3:a2:ae:ca:85:1f:bf:32:57:ca:13:62:b1:b7:77:
57:ea:96:b3:05:ba:9c:fc:d4:02:0c:e4:05:bb:00:
77:22:31:a0:3a:ff:45:f8:dd:bd:c0:ce:7c:62:e3:
4f:dd:bb:12:10:14:09:21:7c:b3:8a:6c:39:10:49:
9b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:2F:3D:61:51:7C:66:D2:6C:28:A3:DC:24:97:8E:8B:7F:C5:1C:70
X509v3 Authority Key Identifier:
keyid:4C:3E:9D:A3:BF:59:38:02:CC:83:3F:E5:D9:47:A5:26:96:F5:8C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:c7:0d:10:d8:0a:46:c6:18:b8:3e:b9:99:7a:89:57:88:3d:
db:ce:84:5d:9b:d3:94:b3:b6:ce:86:02:e2:86:41:40:a9:4f:
05:8a:fa:43:7c:3c:0e:8c:c6:48:f4:c6:c3:fe:e3:07:bb:af:
64:cd:ec:ba:f7:98:96:a0:43:81:a0:8b:b6:34:43:17:23:bb:
d7:ff:94:21:5a:c0:c6:7e:1a:ce:00:a3:8e:92:cd:c8:48:aa:
3f:37:be:9f:5d:0e:99:ed:0c:4c:04:bb:04:b4:ff:01:b7:7b:
44:07:ce:83:f5:08:b5:06:74:55:5b:6b:e5:fb:ca:ab:35:78:
46:35:3d:ff:05:19:0b:1a:4b:13:38:d8:b0:53:a4:05:01:06:
c6:e1:c4:81:b1:43:14:42:5d:f0:26:17:53:06:cb:21:21:27:
96:4d:66:d1:5e:57:35:78:ce:f6:8b:0a:ca:6b:1f:4e:e2:95:
a1:60:b8:5d:bc:86:f9:93:4d:b3:8a:76:2d:ab:92:db:05:c4:
16:63:3d:5d:0d:d1:17:3f:21:a5:17:db:f7:56:6b:ae:3f:95:
ba:09:c2:89:95:fe:03:6a:17:5a:53:9b:79:98:c3:aa:8b:0b:
e8:93:65:ed:92:6d:e2:bf:b1:04:87:a7:c7:e6:c0:2d:c3:7d:
4d:a7:1d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:40:49 2025 by rpki-client