Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
File: TDOTsqG9eRmFmAeDirHjsAN7i08.mft (raw, json)
Hash identifier: kc9z7Wic1dzLhpftYYGLy7qHSvBoCwt/aTlG1EMSaMU=
Subject key identifier: 7D:D1:4F:8D:11:49:66:8A:FE:B3:B5:EF:B9:F3:90:F9:E3:81:42:6C
Authority key identifier: 4C:33:93:B2:A1:BD:79:19:85:98:07:83:8A:B1:E3:B0:03:7B:8B:4F
Certificate issuer: /CN=4c3393b2a1bd7919859807838ab1e3b0037b8b4f
Certificate serial: 0198D705E929271BC47BD8BBC2911729F8A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDOTsqG9eRmFmAeDirHjsAN7i08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
Manifest number: 0D46
Signing time: Sat 23 Aug 2025 13:02:25 +0000
Manifest this update: Sat 23 Aug 2025 13:02:25 +0000
Manifest next update: Sun 24 Aug 2025 13:02:25 +0000
Files and hashes: 1: TDOTsqG9eRmFmAeDirHjsAN7i08.crl (hash: pMtGDWEMYzMo3NE+DyQvhF9ZeI31Kq3HyGxTQKPpsds=)
2: y6xk5yyaeCIuQcfJUMGsvyLuakI.roa (hash: 5cTQO7InxQ4ef2VY7Tlc4nQ2LkIPqai+B4whSvQRHdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDOTsqG9eRmFmAeDirHjsAN7i08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:e9:29:27:1b:c4:7b:d8:bb:c2:91:17:29:f8:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3393b2a1bd7919859807838ab1e3b0037b8b4f
Validity
Not Before: Aug 23 13:02:25 2025 GMT
Not After : Aug 24 13:02:25 2025 GMT
Subject: CN=7dd14f8d1149668afeb3b5efb9f390f9e381426c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:a3:9a:aa:4c:91:8e:a8:43:c7:66:60:d3:e1:
71:82:82:7d:b3:41:1c:ad:2e:e4:ac:8b:c4:0c:1b:
79:12:89:e1:5f:d6:65:7e:c8:50:f1:49:07:a9:2c:
e0:34:3b:ff:a9:97:21:c5:c8:d5:14:bf:3f:b2:2b:
09:19:5a:3b:28:49:95:8d:e8:71:6b:f7:8c:3e:22:
1b:e6:1e:2f:c6:8e:98:43:1e:27:5d:2d:51:4b:ed:
7d:f5:21:0f:f8:b9:f8:11:ea:69:13:76:72:b1:57:
38:fc:9a:5b:af:29:af:7f:91:84:51:ef:3d:e2:81:
a7:86:73:9c:3c:bd:93:7a:63:99:e2:50:74:3a:d1:
04:f4:9b:dd:2c:37:e0:a1:73:79:0f:4a:59:43:1d:
a3:2f:9b:20:ad:01:4d:d4:0b:ac:03:ba:9d:6c:11:
3f:70:c4:cc:3b:3a:b8:d5:c2:07:c9:fa:b7:2b:02:
68:91:4f:36:be:53:e4:58:61:1e:a8:44:2d:1b:a4:
47:38:16:d0:28:00:1f:7f:04:1e:0a:1c:3b:05:b3:
4b:a9:5e:38:6c:b4:19:35:e5:42:a1:bb:fd:a1:f0:
d9:fe:6b:11:0d:d2:eb:41:9d:2b:8a:02:cc:60:cd:
42:a9:0b:32:c8:49:5e:71:94:34:c8:37:01:1c:09:
2d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D1:4F:8D:11:49:66:8A:FE:B3:B5:EF:B9:F3:90:F9:E3:81:42:6C
X509v3 Authority Key Identifier:
keyid:4C:33:93:B2:A1:BD:79:19:85:98:07:83:8A:B1:E3:B0:03:7B:8B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDOTsqG9eRmFmAeDirHjsAN7i08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:66:1c:1d:e5:31:2c:51:7b:66:06:0f:de:00:b0:92:ef:e5:
db:4a:b4:f0:b4:f0:fc:6b:ee:cd:6c:4a:93:e3:c8:ba:c0:9f:
41:5c:bd:f9:f4:cb:76:d6:d7:09:5a:8f:12:07:09:ee:5a:40:
4d:b4:49:7b:4a:fa:51:0c:a3:63:c7:b2:c1:ce:ab:95:cd:89:
0f:e8:6f:15:02:03:10:3a:f5:59:de:88:4d:d3:95:39:9a:af:
e8:04:90:9f:a6:82:c8:36:a4:50:d5:de:58:19:74:da:09:aa:
42:4d:e0:54:df:62:fa:50:8c:c1:c6:2f:0c:96:fb:d0:db:71:
e2:a5:ce:5c:94:ae:d0:60:57:2c:e6:09:3c:fe:a4:ad:3c:c0:
ad:0f:f5:56:15:df:df:a0:3c:ff:54:87:60:ec:0f:8d:21:bb:
3b:46:fa:f8:de:67:30:f7:14:c4:6f:ce:d9:70:23:ea:b9:ab:
ab:67:75:f0:87:3a:4c:55:0b:a0:0b:48:55:da:fd:7a:34:03:
76:6b:c5:ea:86:42:1d:c0:08:61:78:7b:04:3e:12:e2:19:dd:
bf:71:f3:fc:65:8d:14:06:97:c7:77:ae:76:1b:06:fa:28:31:
bb:55:82:8f:17:f5:00:78:d0:dd:f5:99:51:ef:d7:d8:1f:67:
2d:ab:46:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:01:53 2025 by rpki-client