Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
File: TDn4uP66ttIJokmB45n9YEMuHMk.mft (raw, json)
Hash identifier: hKbx/LH7UJc0vpV8A8OsbJSr5ZE1sJCt7d9EMB6WjrU=
Subject key identifier: 38:D0:84:FD:9A:7C:D3:B0:43:0F:C2:1D:31:D1:D2:0A:FC:23:DE:D3
Authority key identifier: 4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
Certificate issuer: /CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Certificate serial: 0198744FE3AA75DC1221EFAA1BF8A0CE8171
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
Manifest number: 0A83
Signing time: Mon 04 Aug 2025 09:00:49 +0000
Manifest this update: Mon 04 Aug 2025 09:00:49 +0000
Manifest next update: Tue 05 Aug 2025 09:00:49 +0000
Files and hashes: 1: BGPcLkk4F9FLxsMbGn-M_F2CXto.roa (hash: PqbiTHE+O2cRLL+2/Q85oltHntGJN/X4GOAuPJ95eug=)
2: TDn4uP66ttIJokmB45n9YEMuHMk.crl (hash: RgJM+Qa/H5EZ3LdzwJVnzDBvDPKqhcyyJwoUIvcBqUY=)
3: nGObtVTwcFKea1knaujpvqhbims.roa (hash: l9jwJiOaQQcxbUJC1OWeTnOmsW+JZFElguXsrGzJSD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:e3:aa:75:dc:12:21:ef:aa:1b:f8:a0:ce:81:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Validity
Not Before: Aug 4 09:00:49 2025 GMT
Not After : Aug 5 09:00:49 2025 GMT
Subject: CN=38d084fd9a7cd3b0430fc21d31d1d20afc23ded3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8e:0f:06:84:59:15:9a:7e:02:2a:d2:75:fa:
8b:2d:85:cb:11:f4:b6:42:3f:bd:25:40:94:da:1c:
56:3f:a8:b3:93:71:43:ab:0f:8c:65:7e:fd:8c:eb:
28:c7:0d:e9:48:e5:3f:34:f0:a5:3d:3e:78:67:27:
16:3d:e5:21:82:a8:65:14:8f:07:e3:5a:cc:36:8c:
16:b3:2b:0a:e3:67:f9:c7:7a:20:40:f6:eb:c7:57:
54:2b:3c:03:32:e1:14:62:71:25:0c:cc:3d:ed:01:
d9:7b:76:91:16:13:27:84:c2:24:34:11:8f:a5:22:
1d:22:1e:22:7b:52:ba:73:7f:ba:3f:82:61:59:04:
98:e0:cf:5c:f9:2d:27:33:53:b7:28:d1:39:38:71:
4e:00:63:db:b6:38:dd:9a:d9:c4:1d:94:d6:bc:6a:
03:64:09:63:41:f1:6b:95:a5:de:d5:95:70:03:f7:
1c:e5:e7:89:25:06:dc:64:70:b7:c7:a4:76:38:89:
a4:8e:4d:c3:87:c7:81:8c:56:72:e5:3e:10:9c:f1:
65:b5:da:ff:a7:dc:2f:37:02:d7:22:26:59:b5:5a:
95:c9:91:23:6a:81:a6:73:11:bc:5d:a3:35:18:95:
d6:4f:b3:ac:c2:8f:3f:e4:35:90:f7:a2:6b:fb:8c:
67:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D0:84:FD:9A:7C:D3:B0:43:0F:C2:1D:31:D1:D2:0A:FC:23:DE:D3
X509v3 Authority Key Identifier:
keyid:4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:de:8d:f4:34:26:be:af:87:49:92:ae:5f:97:d6:90:49:7d:
7f:6c:50:aa:c2:b3:cf:ea:be:0f:9e:d9:db:37:f0:5d:03:19:
01:de:e8:20:31:f1:a3:a9:34:c4:40:fc:ed:e2:14:2b:fe:2e:
91:08:54:b9:01:cd:f5:b0:ca:5a:48:3f:94:89:37:e0:1a:43:
36:2e:3a:fb:98:f7:cc:f5:30:2d:af:ac:d5:79:99:6f:7a:01:
ef:f0:90:74:6e:9a:81:6e:40:10:c3:89:f4:8f:2b:9c:86:f8:
4e:b1:4e:90:77:95:a7:96:a5:72:14:4f:31:d5:f6:ac:34:b1:
36:2e:77:9a:ad:e4:1f:79:0c:ad:42:87:0f:a8:0f:c6:98:d2:
8f:b7:c0:56:4b:31:43:e8:a0:21:bc:91:5d:62:86:3b:63:11:
b7:49:96:b4:67:d9:3b:79:d6:60:f6:43:e2:68:f0:06:f8:33:
46:7d:f7:6f:d2:43:23:c7:0a:bd:22:fb:ea:e3:a5:bf:46:ec:
d3:56:e5:68:96:30:a7:b0:1f:e4:88:84:03:2e:78:cd:7a:ee:
55:2d:c9:6c:7e:29:fc:2e:bf:2e:73:b7:35:de:dd:90:8b:48:
1a:33:8a:fd:22:7d:82:43:16:0f:9b:34:57:09:6e:f7:b4:d3:
39:4e:18:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:35:07 2025 by rpki-client