Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
File: TDn4uP66ttIJokmB45n9YEMuHMk.mft (raw, json)
Hash identifier: P0/qceDM2tGvI4k9lQA4/v9TeD/S0hNjJ4jIZgB9bWs=
Subject key identifier: 56:09:9C:85:88:FB:94:DE:FB:83:9D:01:FF:83:43:16:EA:FB:0E:ED
Authority key identifier: 4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
Certificate issuer: /CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Certificate serial: 01976F99A5114FA8A8ECA4A3C651BBFF9849
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
Manifest number: 09FC
Signing time: Sat 14 Jun 2025 18:00:29 +0000
Manifest this update: Sat 14 Jun 2025 18:00:29 +0000
Manifest next update: Sun 15 Jun 2025 18:00:29 +0000
Files and hashes: 1: BGPcLkk4F9FLxsMbGn-M_F2CXto.roa (hash: PqbiTHE+O2cRLL+2/Q85oltHntGJN/X4GOAuPJ95eug=)
2: TDn4uP66ttIJokmB45n9YEMuHMk.crl (hash: QgdbpYIrK0u88x+hqYCUzAoUzISO3J7jxZZaMr6lU0o=)
3: nGObtVTwcFKea1knaujpvqhbims.roa (hash: l9jwJiOaQQcxbUJC1OWeTnOmsW+JZFElguXsrGzJSD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:a5:11:4f:a8:a8:ec:a4:a3:c6:51:bb:ff:98:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Validity
Not Before: Jun 14 18:00:29 2025 GMT
Not After : Jun 15 18:00:29 2025 GMT
Subject: CN=56099c8588fb94defb839d01ff834316eafb0eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ba:b2:6f:8e:68:4e:e4:05:2b:e1:7d:57:84:
eb:ae:c8:0d:43:17:07:58:47:e8:42:17:c4:79:ff:
05:3d:7a:51:7e:60:f8:fd:bb:d0:8f:2a:a5:10:91:
79:d6:7f:17:89:fd:eb:d7:cb:26:2b:1e:aa:7c:5f:
1b:75:16:38:6c:88:2e:92:a1:dc:8e:cb:7d:03:3c:
45:96:fc:39:85:13:42:09:ba:e2:59:99:5a:d5:9d:
dc:93:bd:d4:98:fa:2c:20:b3:50:a6:d5:fe:f0:95:
c9:49:f7:61:6f:2c:9a:71:be:53:8a:88:d1:df:f2:
4e:5d:8c:08:df:e4:53:45:bb:2f:35:e2:f2:c5:09:
9b:a1:51:94:64:0f:8b:e2:a7:6f:0b:d0:70:2c:59:
f3:63:36:1f:9c:18:f7:ef:e7:69:e9:34:15:66:f8:
14:fb:ef:41:88:bd:2c:06:26:26:3d:c0:1e:fa:ff:
33:e7:fe:2a:a3:40:93:eb:76:19:2c:f4:90:28:08:
cb:96:ec:61:7e:bc:a8:f7:d6:50:80:c4:5f:78:bd:
ca:c1:af:7a:31:5d:81:bf:73:11:8d:dd:81:a8:99:
64:40:23:6c:1f:90:92:1a:b9:01:13:3c:1b:e9:31:
fe:a1:b5:52:69:b3:eb:78:38:96:87:04:00:f3:f6:
a7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:09:9C:85:88:FB:94:DE:FB:83:9D:01:FF:83:43:16:EA:FB:0E:ED
X509v3 Authority Key Identifier:
keyid:4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:80:ed:e0:7f:6f:1b:84:cb:a0:1e:ca:33:9f:69:c4:fa:bc:
10:5d:38:65:d7:6e:c8:67:57:9e:5b:8b:e6:94:ef:60:da:71:
3a:8e:55:fa:16:16:99:68:3e:25:4f:e9:80:0a:ab:b3:11:5e:
7f:9f:58:f6:73:1d:ee:77:42:d8:19:4e:9c:70:4d:5d:11:e8:
17:70:5e:d6:ac:0b:a7:4f:d0:88:3a:8d:63:86:ba:98:35:1c:
86:76:4a:af:d6:45:be:45:d5:db:96:ea:29:0c:ef:98:25:2e:
14:4e:eb:3a:08:94:2f:95:20:63:07:20:51:3b:a1:b6:b2:bd:
3b:4d:4c:20:bd:bc:66:7d:79:ed:5d:e1:cb:24:e7:e4:88:5c:
3d:cb:6c:3f:18:a1:7f:68:94:71:08:10:8b:a9:21:d1:82:d7:
58:41:87:1e:8c:c1:cc:6e:ac:9c:7f:46:a2:83:8b:0a:6a:ec:
90:c6:05:49:17:61:6f:5f:e6:61:1e:70:7c:2a:7f:39:44:0d:
fe:e4:17:20:aa:95:b9:98:ad:71:0a:92:05:02:fa:25:c8:82:
f5:1f:f9:d5:d7:57:36:a0:d6:f7:51:d9:54:cd:fb:09:05:36:
c1:48:17:cf:7c:18:64:9d:b4:9f:17:d8:a0:7a:0e:88:56:04:
35:ac:19:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:38:55 2025 by rpki-client