Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
File: TdbneabA8LCSFmIjgEZ9zi0Roxg.mft (raw, json)
Hash identifier: sCwqo3+pqRZucZhY6RJVo+gtZ/H52m/nUnNe7ufd2Z0=
Subject key identifier: 63:B6:20:B1:BF:27:CC:31:0E:1E:D6:A3:FA:DC:45:03:D6:BB:42:2E
Authority key identifier: 4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18
Certificate issuer: /CN=4dd6e779a6c0f0b09216622380467dce2d11a318
Certificate serial: 0197715170C8A3A408FF076C8F3036F51B46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
Manifest number: 1523
Signing time: Sun 15 Jun 2025 02:00:52 +0000
Manifest this update: Sun 15 Jun 2025 02:00:52 +0000
Manifest next update: Mon 16 Jun 2025 02:00:52 +0000
Files and hashes: 1: TdbneabA8LCSFmIjgEZ9zi0Roxg.crl (hash: Kx7i1YWFPC2ItPSr0N2nZTclvWaciyEEhgmGWsJ9MK8=)
2: gjoyy0FPdmf2zrdNnLaoUXfqkA8.roa (hash: RTgHJsDHudCpwL05o4vGq9BVppolqh2KaIXjwJZDWfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:51:70:c8:a3:a4:08:ff:07:6c:8f:30:36:f5:1b:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd6e779a6c0f0b09216622380467dce2d11a318
Validity
Not Before: Jun 15 02:00:52 2025 GMT
Not After : Jun 16 02:00:52 2025 GMT
Subject: CN=63b620b1bf27cc310e1ed6a3fadc4503d6bb422e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ec:02:be:f4:4d:de:72:3d:d5:a3:c1:1f:a4:
c7:50:1b:55:84:1d:79:d3:8e:d1:f3:7c:69:00:37:
c1:9a:e6:c7:b2:7c:44:5c:12:33:6a:14:b9:62:64:
95:b2:94:7a:59:a9:ca:6b:40:e7:17:04:16:0d:fc:
13:33:e4:61:7a:05:20:06:b0:55:25:06:03:07:e7:
09:94:c8:41:45:50:92:cb:94:63:30:ae:4c:19:82:
ee:cd:12:41:1c:a8:2b:1c:a6:12:76:03:47:a4:dc:
49:12:d1:a9:ef:3d:a7:2e:41:8e:20:7e:fd:7e:07:
43:c5:fb:86:30:ba:f3:6d:e9:af:01:94:b6:21:d8:
4b:7c:64:c9:8e:62:ce:b6:80:1e:f1:80:9c:56:24:
a3:8c:2a:04:a9:9c:50:83:b0:73:19:0f:b5:6d:51:
02:d0:e9:06:2d:74:08:05:25:ce:df:a5:db:42:2c:
89:9c:13:14:81:4f:53:4f:1c:a3:f0:fc:9d:81:47:
f0:cc:6e:59:03:36:fe:c4:ad:28:3d:d3:73:66:ca:
dc:c6:5d:17:3c:0b:0f:0a:41:b3:c1:55:be:c9:af:
65:3f:c8:94:b4:a9:4e:1c:50:4b:86:92:3e:6f:af:
3d:25:aa:97:77:74:8a:da:0f:d7:e2:91:ce:8b:2c:
75:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B6:20:B1:BF:27:CC:31:0E:1E:D6:A3:FA:DC:45:03:D6:BB:42:2E
X509v3 Authority Key Identifier:
keyid:4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:95:5e:52:8c:ac:51:f6:b9:d3:7e:c3:31:a1:38:8a:7a:bd:
1a:83:b4:c0:25:09:81:8a:b6:c9:87:fd:59:5d:3b:58:be:d0:
89:9b:91:60:a0:6e:74:9e:a2:0a:63:2b:b5:a6:3c:b5:b6:a5:
d1:61:6c:01:9c:7c:b4:70:dd:f3:fe:f0:41:96:f4:11:a1:9c:
1f:4e:4b:d7:da:6c:a8:e2:9c:d4:15:6d:6d:bd:d9:fa:13:98:
fa:4d:d9:34:c4:6a:1e:c2:c0:97:ee:c6:fc:10:40:71:d1:fc:
d6:73:c7:63:23:bd:f9:2a:d6:ee:c8:2c:28:29:b4:b3:de:6b:
50:33:32:43:79:bb:59:3e:f1:f8:1a:4e:2f:36:7a:c7:99:04:
8a:43:c6:c8:32:8f:70:c4:d9:9f:56:f3:e4:42:ab:7b:d1:42:
94:ea:ce:9a:3c:a4:e8:03:b4:c5:a7:fa:d4:59:ab:80:fa:26:
6a:85:ce:3a:b9:84:43:9d:f0:d6:6f:ab:a5:86:a4:0d:66:fe:
4b:a9:c3:09:cb:7e:ed:a8:46:a6:a6:eb:ae:8d:c0:3b:f8:33:
1d:de:1c:d3:d7:d8:5e:f2:44:30:51:cd:ae:bc:59:14:25:68:
a3:53:06:70:58:0e:9d:12:21:93:de:40:83:7b:63:fa:66:33:
45:7b:d4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:04:23 2025 by rpki-client