Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft
File: tuD-D69oRJiK8vdE1RbtucXf5xw.mft (raw, json)
Hash identifier: wdoUq0UpANIAVMcLRPbUgf+UpNbB6Jh7rONPpKVeJuc=
Subject key identifier: 69:7F:F3:28:13:C8:51:FF:3E:2F:49:4E:C2:30:1D:51:75:3A:FE:F6
Authority key identifier: B6:E0:FE:0F:AF:68:44:98:8A:F2:F7:44:D5:16:ED:B9:C5:DF:E7:1C
Certificate issuer: /CN=b6e0fe0faf6844988af2f744d516edb9c5dfe71c
Certificate serial: 019894489C8AB67AB48509D9008947C857FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tuD-D69oRJiK8vdE1RbtucXf5xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft
Manifest number: 0DAF
Signing time: Sun 10 Aug 2025 14:00:43 +0000
Manifest this update: Sun 10 Aug 2025 14:00:43 +0000
Manifest next update: Mon 11 Aug 2025 14:00:43 +0000
Files and hashes: 1: a_PNkPnx5ou35JrpXNK2_iqC5Yc.roa (hash: iMkdGKK1MTR9CDFy5rjVtC+a2w/5myXmTmA9XTMLkJo=)
2: tuD-D69oRJiK8vdE1RbtucXf5xw.crl (hash: toxEeS/voWzpo2DbFv4AIMDSH42uN3eLn4Jx//WBsow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tuD-D69oRJiK8vdE1RbtucXf5xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:48:9c:8a:b6:7a:b4:85:09:d9:00:89:47:c8:57:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6e0fe0faf6844988af2f744d516edb9c5dfe71c
Validity
Not Before: Aug 10 14:00:43 2025 GMT
Not After : Aug 11 14:00:43 2025 GMT
Subject: CN=697ff32813c851ff3e2f494ec2301d51753afef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3d:92:5b:6e:7f:81:a2:4f:8c:f4:c4:0b:52:
19:22:42:7e:03:14:b2:60:e8:8f:d8:0f:dd:6f:f1:
81:b2:36:83:0b:d4:b1:2c:2e:5c:3e:83:56:26:2f:
f7:2a:a0:98:74:fb:72:2e:0f:d1:71:8e:fc:99:0b:
d5:4f:7e:80:06:c5:d8:a1:2f:4d:fe:7c:1a:66:18:
ee:6c:ef:17:40:d0:e8:a9:a9:93:ea:18:ea:d5:6a:
34:cf:a8:78:48:ce:b6:ef:06:26:00:2c:15:5c:72:
3a:9f:5d:47:b3:01:74:1e:67:4d:1a:fe:f3:c9:33:
d7:6b:ba:7b:12:41:be:08:fa:62:04:fe:66:c9:60:
9d:e7:72:6d:94:ba:5d:28:6c:06:d6:e6:95:04:12:
85:3e:13:ee:ac:3a:88:c5:36:fc:ca:8c:1f:c9:ee:
a2:f1:bc:44:36:47:ac:f5:7d:32:f3:ae:d1:15:f0:
c8:b9:5d:c6:0b:90:4a:a9:24:cd:28:46:03:b2:81:
cb:25:b3:6a:8e:76:83:10:f1:44:a6:86:71:b2:36:
08:17:11:16:5f:5a:6d:f0:40:35:12:e0:34:86:30:
9f:78:a7:71:34:20:5a:f7:be:e1:3f:39:59:50:80:
c3:06:83:cb:d0:49:5c:0b:26:2b:b2:2a:76:0f:89:
f8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:7F:F3:28:13:C8:51:FF:3E:2F:49:4E:C2:30:1D:51:75:3A:FE:F6
X509v3 Authority Key Identifier:
keyid:B6:E0:FE:0F:AF:68:44:98:8A:F2:F7:44:D5:16:ED:B9:C5:DF:E7:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tuD-D69oRJiK8vdE1RbtucXf5xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d0:3a:b4:44:96:bb:55:89:d5:cd:1b:f0:7f:d2:70:21:b1:
f6:e5:ff:69:7e:17:12:ea:f4:53:c2:c3:52:c0:83:1b:37:c7:
78:c8:1c:0c:78:f2:9a:05:83:f4:51:33:c7:42:47:18:b3:0d:
f8:71:66:3e:32:15:03:bd:35:c3:25:f5:57:5a:82:83:18:0f:
8a:7a:59:ce:13:ca:d5:15:a1:1b:e5:bd:c4:28:97:2f:c4:4f:
14:e4:e3:2d:16:31:8d:2d:fa:32:98:60:c4:33:71:41:3d:b9:
b9:aa:9f:e5:0f:22:73:c6:b0:ce:e8:c0:1c:90:ea:11:f4:f4:
68:39:26:a7:5e:70:c9:66:5a:a7:a5:ad:87:d1:ea:3f:af:c2:
d7:17:4e:52:f9:6b:9e:f2:de:35:f5:52:86:3c:b3:1c:d4:c6:
ba:2a:d9:ff:da:5c:ca:03:77:b5:7d:4b:a4:f3:fe:b0:a3:8f:
24:f4:59:7a:8a:30:d5:fe:4b:e6:bf:7e:85:56:19:27:a3:f5:
e2:1d:ea:6d:69:9a:d3:73:97:d3:4d:76:61:74:39:c8:77:ce:
65:34:d5:b5:9f:94:5c:bf:38:6c:00:d2:66:e0:53:0b:75:62:
5c:ab:66:58:2d:10:7b:d2:29:22:96:a4:e6:2b:25:dc:38:29:
ff:f7:c2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:13:58 2025 by rpki-client