Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
File: TdbneabA8LCSFmIjgEZ9zi0Roxg.mft (raw, json)
Hash identifier: TsNcl4TJoOncB+VzUyASfPbODtyMzlRI9+TIOWK7yVk=
Subject key identifier: B4:F2:93:A1:F6:3D:17:30:B0:6F:62:28:29:F5:5F:CA:C3:22:0B:38
Authority key identifier: 4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18
Certificate issuer: /CN=4dd6e779a6c0f0b09216622380467dce2d11a318
Certificate serial: 019874191B338ADF9F3985C465C05C0E918E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
Manifest number: 15A9
Signing time: Mon 04 Aug 2025 08:00:59 +0000
Manifest this update: Mon 04 Aug 2025 08:00:59 +0000
Manifest next update: Tue 05 Aug 2025 08:00:59 +0000
Files and hashes: 1: TdbneabA8LCSFmIjgEZ9zi0Roxg.crl (hash: pbcCmIn3s0qd+3iZBE6BOUjeicxuHCAFxLm8L3QXh40=)
2: gjoyy0FPdmf2zrdNnLaoUXfqkA8.roa (hash: RTgHJsDHudCpwL05o4vGq9BVppolqh2KaIXjwJZDWfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:1b:33:8a:df:9f:39:85:c4:65:c0:5c:0e:91:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd6e779a6c0f0b09216622380467dce2d11a318
Validity
Not Before: Aug 4 08:00:59 2025 GMT
Not After : Aug 5 08:00:59 2025 GMT
Subject: CN=b4f293a1f63d1730b06f622829f55fcac3220b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a3:15:4e:c6:c8:db:e9:21:e4:52:43:a4:86:
d4:b9:6b:5f:ef:75:09:b4:84:35:96:b9:05:ad:4c:
89:3d:be:c1:bc:df:3a:d2:eb:8a:12:4f:17:e7:cc:
5c:55:94:f0:2a:bc:e3:7b:a2:5d:4b:8b:b1:a2:ef:
5e:cc:9e:85:da:b4:d6:3b:1c:23:3e:d9:ac:ae:b8:
a3:82:cc:a8:e7:6d:99:75:19:18:51:c0:ad:f0:14:
12:d8:30:8b:9f:44:eb:e1:2b:96:1b:e4:88:59:c9:
86:fa:f0:f2:fb:d3:35:73:2d:67:a1:7a:a8:69:68:
a9:05:60:b9:fb:a8:21:31:d6:21:5d:a2:f6:56:0f:
56:00:23:26:36:39:93:60:67:2f:22:a4:61:c6:c9:
70:11:4e:49:70:ad:e1:ca:71:45:fd:5f:43:e7:02:
c0:3d:43:d1:f8:bb:b7:df:cc:b6:5d:bf:6b:21:de:
d4:60:28:5e:4a:2e:d2:69:78:eb:f7:54:cc:42:d9:
4b:27:44:d9:94:4f:41:d6:e2:4b:cc:30:e7:7d:c8:
6a:20:48:78:e2:a6:f3:b7:49:a7:23:46:62:85:02:
f8:4c:86:10:d7:0c:36:a3:51:b4:ee:58:8e:3c:2e:
d0:e2:a4:ee:20:6c:74:b4:a1:99:d7:4c:c8:da:61:
0a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F2:93:A1:F6:3D:17:30:B0:6F:62:28:29:F5:5F:CA:C3:22:0B:38
X509v3 Authority Key Identifier:
keyid:4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:92:32:54:e4:12:ba:46:31:83:42:4b:b0:bc:79:0a:dd:91:
37:5a:2c:ca:e8:0c:f6:6d:cc:12:4e:73:21:67:ff:a1:04:f1:
ba:3f:c9:49:a4:c6:55:2d:8c:a5:de:5a:48:df:3d:6c:8d:2d:
ec:66:dd:d9:de:07:5c:90:52:77:dd:2b:1a:f4:e3:4b:0f:24:
90:71:a2:19:62:17:d2:b7:59:d4:e6:6c:3c:85:5a:53:15:ad:
cf:af:8a:1e:5b:b4:c8:6e:69:a3:93:8a:0e:b2:c7:6a:08:ce:
58:ce:65:a3:a9:c1:f3:1e:87:ce:59:e3:3b:29:1c:85:0e:c2:
d2:ee:00:39:05:bc:46:a9:ec:f8:fe:1b:a8:2b:88:54:fc:86:
47:29:4b:d4:a9:da:ce:6e:c6:8a:1c:d5:d8:67:b2:1c:0f:e5:
ff:ce:7b:a2:68:62:2a:dd:7b:6b:29:35:a4:35:d0:c2:45:f8:
e9:b3:7b:c5:01:1e:ee:e9:8f:89:5b:90:ac:27:8f:39:fd:78:
5e:b8:c5:02:7b:c2:32:12:90:90:6a:11:02:3d:e7:0e:9f:2c:
59:62:8c:21:eb:05:fb:8a:b1:34:fa:7a:90:4c:3d:af:bc:f0:
6f:8b:b7:f5:ff:26:05:9a:93:8b:c7:ab:25:38:eb:68:89:85:
f7:08:bb:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:19:47 2025 by rpki-client