Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.mft
File: Tddxzuh-yov3sS4KYwbxgdKlWm0.mft (raw, json)
Hash identifier: X/373PrBMRzPuRi1CIW6GKQ3ETvvPtKLkzE92K/ylLc=
Subject key identifier: B2:44:27:E7:1B:E7:0E:B6:ED:B8:11:83:AC:45:D6:2B:B1:2D:5F:1B
Authority key identifier: 4D:D7:71:CE:E8:7E:CA:8B:F7:B1:2E:0A:63:06:F1:81:D2:A5:5A:6D
Certificate issuer: /CN=4dd771cee87eca8bf7b12e0a6306f181d2a55a6d
Certificate serial: 019897B8088DDCEEC3C69B534C2EB812CE11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tddxzuh-yov3sS4KYwbxgdKlWm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.mft
Manifest number: 01F0
Signing time: Mon 11 Aug 2025 06:01:17 +0000
Manifest this update: Mon 11 Aug 2025 06:01:17 +0000
Manifest next update: Tue 12 Aug 2025 06:01:17 +0000
Files and hashes: 1: Tddxzuh-yov3sS4KYwbxgdKlWm0.crl (hash: YIUTahPECv5TjD5foD6tU8yS6pIL0+jEp8nwY7IvVi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tddxzuh-yov3sS4KYwbxgdKlWm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:b8:08:8d:dc:ee:c3:c6:9b:53:4c:2e:b8:12:ce:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd771cee87eca8bf7b12e0a6306f181d2a55a6d
Validity
Not Before: Aug 11 06:01:17 2025 GMT
Not After : Aug 12 06:01:17 2025 GMT
Subject: CN=b24427e71be70eb6edb81183ac45d62bb12d5f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:19:65:5b:74:4c:fa:c5:a5:49:f5:92:8a:30:
b2:8c:ba:07:18:ee:d0:a5:4e:6b:85:96:d1:ef:4c:
50:84:1f:c7:64:1b:3c:27:0e:94:1c:45:7e:67:21:
e1:73:37:3a:8b:d2:17:40:1c:d4:2e:0a:19:94:c4:
5f:69:7b:67:51:e6:53:75:5f:c5:0e:21:36:e4:47:
5f:72:9d:75:cd:71:67:52:8e:b0:a3:30:92:43:17:
db:a1:0d:fc:7c:a3:12:b9:43:53:05:bd:84:4c:89:
9f:2d:7b:4b:44:46:ce:8e:6b:ae:cf:8a:a9:bf:61:
80:6b:7d:75:81:54:bd:0a:c7:7c:a8:01:67:bf:b5:
6f:c4:a0:2b:24:1f:25:bc:5d:8e:40:a9:7a:0f:35:
52:29:cc:dd:22:eb:7e:a1:db:ae:01:1f:76:ed:92:
ac:49:8d:4e:64:c2:20:36:ef:bc:95:0d:73:de:9e:
11:72:16:b0:9b:ca:52:9b:71:2a:49:d5:e4:36:07:
25:71:24:96:53:26:9a:49:76:17:3e:55:0b:26:23:
02:60:8c:a0:6a:2e:bb:a0:b4:1a:4b:64:e1:5c:03:
f1:9a:73:63:71:5f:14:52:a3:27:e0:ca:f6:8c:47:
c9:69:68:3c:7a:44:97:53:b4:33:0d:77:39:76:33:
f0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:44:27:E7:1B:E7:0E:B6:ED:B8:11:83:AC:45:D6:2B:B1:2D:5F:1B
X509v3 Authority Key Identifier:
keyid:4D:D7:71:CE:E8:7E:CA:8B:F7:B1:2E:0A:63:06:F1:81:D2:A5:5A:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tddxzuh-yov3sS4KYwbxgdKlWm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:58:d4:08:5b:46:e1:6a:14:9b:c9:d0:ac:12:0d:46:9e:66:
a7:b3:fd:4c:d4:5e:52:17:7d:8d:b2:c6:a9:f1:70:ca:b8:44:
0f:96:97:a2:c4:04:aa:b4:2a:da:c3:8d:e9:72:44:d8:88:4b:
0b:51:35:57:c3:2d:9e:3d:07:ec:4b:36:97:cc:3b:73:76:7c:
a7:01:62:19:e5:bd:ce:f5:0a:2a:e7:71:c9:68:67:47:02:64:
19:b5:a7:b8:a9:8b:1e:2a:24:fd:1d:35:0c:7b:92:e0:dd:fc:
60:ca:83:6e:5b:86:33:b0:f5:72:fa:2b:c1:47:f9:1c:3d:c6:
11:57:4c:82:b6:95:11:87:e3:21:f0:82:e3:ae:ce:dd:2e:25:
b5:5b:43:34:18:0b:bd:1a:0c:a2:38:b9:9c:ec:b2:fa:ca:8b:
31:a5:f4:e0:40:4e:bb:72:9f:f6:03:71:87:91:22:06:c6:40:
d5:06:cd:c4:e3:9a:6f:3c:09:0c:64:7e:c0:cb:d5:cd:ab:84:
81:0c:e1:ea:ad:72:9a:a0:5d:6a:3d:59:eb:10:c6:61:39:42:
3b:a2:09:9f:52:29:45:8e:40:03:48:9c:0e:81:4b:55:2f:d2:
c0:75:33:00:90:aa:5f:15:03:c4:34:43:9b:0b:d0:cc:2d:db:
c5:99:55:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:57:03 2025 by rpki-client