Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
File: TDOTsqG9eRmFmAeDirHjsAN7i08.mft (raw, json)
Hash identifier: Ro1XTOMt0NGKpqD85M/jjcQtEJj+26Gdov0PJDLojBg=
Subject key identifier: 41:66:50:F1:11:C9:80:3B:3D:29:75:FD:D9:F1:62:32:EF:B4:EE:D8
Authority key identifier: 4C:33:93:B2:A1:BD:79:19:85:98:07:83:8A:B1:E3:B0:03:7B:8B:4F
Certificate issuer: /CN=4c3393b2a1bd7919859807838ab1e3b0037b8b4f
Certificate serial: 0197B7457707A709AAFAD833F97635954B9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDOTsqG9eRmFmAeDirHjsAN7i08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
Manifest number: 0CB1
Signing time: Sat 28 Jun 2025 16:01:12 +0000
Manifest this update: Sat 28 Jun 2025 16:01:12 +0000
Manifest next update: Sun 29 Jun 2025 16:01:12 +0000
Files and hashes: 1: TDOTsqG9eRmFmAeDirHjsAN7i08.crl (hash: vA0g9H1od9f7pm8LVa7DsU0ZTZXAsEXXnKx0R7cRRVw=)
2: y6xk5yyaeCIuQcfJUMGsvyLuakI.roa (hash: 5cTQO7InxQ4ef2VY7Tlc4nQ2LkIPqai+B4whSvQRHdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDOTsqG9eRmFmAeDirHjsAN7i08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:77:07:a7:09:aa:fa:d8:33:f9:76:35:95:4b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3393b2a1bd7919859807838ab1e3b0037b8b4f
Validity
Not Before: Jun 28 16:01:12 2025 GMT
Not After : Jun 29 16:01:12 2025 GMT
Subject: CN=416650f111c9803b3d2975fdd9f16232efb4eed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:fd:0e:e5:fe:5e:02:ce:ad:a9:3a:18:6f:58:
6a:46:1a:6f:ff:db:c5:df:3d:15:47:87:11:92:52:
44:db:27:e6:ac:b8:f6:01:93:b8:bc:80:49:8a:27:
a0:43:29:0e:09:72:b9:2c:47:60:5f:2f:d9:82:db:
43:48:75:d4:7e:21:44:03:b8:d7:1c:06:3f:78:31:
28:80:23:ec:d1:a9:c4:49:a6:fd:e6:a3:bc:f0:63:
26:9a:73:73:5a:1e:ad:42:93:e7:2d:63:d2:70:50:
28:a8:53:4d:b0:e3:70:a2:15:1b:e4:e7:7d:00:10:
ea:4d:eb:4a:d2:2a:45:f6:b2:76:1c:0a:6e:f6:1f:
8e:d7:9a:13:4c:e8:6e:6c:1e:e2:0e:ed:55:bc:b7:
65:99:df:be:cf:a7:52:80:99:9d:5d:5d:53:9d:85:
f1:bb:51:d3:00:5a:58:fa:18:4e:9e:68:a3:01:2c:
90:08:5a:98:95:97:fb:96:8a:88:f1:93:87:d7:c5:
ca:d9:8c:b7:77:3d:25:4d:11:a2:40:29:77:85:c2:
96:03:5b:b8:66:b7:2f:79:58:01:aa:c9:81:f8:bd:
77:95:09:34:27:0f:04:2e:20:3a:39:86:47:f3:5d:
5c:ba:fa:18:26:0c:75:6c:05:6d:6b:2c:51:88:46:
b6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:66:50:F1:11:C9:80:3B:3D:29:75:FD:D9:F1:62:32:EF:B4:EE:D8
X509v3 Authority Key Identifier:
keyid:4C:33:93:B2:A1:BD:79:19:85:98:07:83:8A:B1:E3:B0:03:7B:8B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDOTsqG9eRmFmAeDirHjsAN7i08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:9a:60:d3:a8:41:a8:eb:f7:d8:9d:e5:17:5a:91:27:4c:97:
77:62:ad:5d:60:e1:ff:4c:88:a5:40:f2:61:85:3d:7e:28:7f:
31:14:f8:4c:58:6c:b7:e1:13:94:1d:bd:23:89:26:5d:93:2c:
81:45:f8:d8:a6:2d:60:c0:da:94:f5:01:7e:bc:57:6e:68:6e:
ad:73:7a:b5:78:fa:2a:18:5d:4d:61:43:88:c3:0a:15:28:93:
30:bd:36:a9:e5:7e:2c:4c:0e:0a:63:ae:12:b7:ca:db:23:98:
c6:2e:57:25:7d:01:0f:1e:c2:7f:53:5f:84:66:65:1c:27:3f:
85:08:f4:e0:8f:91:a4:06:94:06:f3:36:27:18:6f:b5:1d:8f:
e5:4f:3c:52:c2:63:5b:e8:07:45:bd:2b:f5:05:32:82:9c:31:
45:a8:86:b8:6c:5a:f9:8a:21:7f:10:c3:bf:bd:c6:4c:c1:de:
26:16:8b:04:06:96:e3:53:f6:9c:df:8e:5b:62:8d:86:59:ee:
37:cd:fa:b8:13:d2:4b:b4:63:d1:61:ba:67:a9:f3:12:05:a6:
59:82:34:2e:8c:ac:1a:0b:af:03:43:6b:a6:d9:7a:b1:8b:0c:
21:47:b6:5b:58:8e:a6:1e:72:bd:70:a2:fe:ed:04:f4:00:86:
98:88:56:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:38:59 2025 by rpki-client