Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
File: tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft (raw, json)
Hash identifier: 0X9QYo5kXdT6ElzAe6KFP052rrgqHigcsmYJmnN30AU=
Subject key identifier: 56:4B:22:C2:88:22:76:2B:3F:B6:0E:B6:5B:93:0A:72:67:09:68:42
Authority key identifier: B4:33:42:F1:7D:54:A8:A3:DA:0C:E4:D3:18:B3:B4:C3:FA:05:93:E4
Certificate issuer: /CN=b43342f17d54a8a3da0ce4d318b3b4c3fa0593e4
Certificate serial: 01976C98BC236682FCF97DC94C6621699AB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 04:00:38 +0000
Manifest this update: Sat 14 Jun 2025 04:00:38 +0000
Manifest next update: Sun 15 Jun 2025 04:00:38 +0000
Files and hashes: 1: E5ldtRDNq7PF5yZrAMEvxowWuR0.roa (hash: 4L7DIoeLgHz0Qv5KkaEDn/KJszMLQY8xsxtNREAtJGQ=)
2: tDNC8X1UqKPaDOTTGLO0w_oFk-Q.crl (hash: za7htZVh9agcFd99a65N309LidiVVJnpUeKmqnEHHnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:bc:23:66:82:fc:f9:7d:c9:4c:66:21:69:9a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43342f17d54a8a3da0ce4d318b3b4c3fa0593e4
Validity
Not Before: Jun 14 04:00:38 2025 GMT
Not After : Jun 15 04:00:38 2025 GMT
Subject: CN=564b22c28822762b3fb60eb65b930a7267096842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7d:2e:a1:1b:25:34:59:d9:67:ac:40:b8:09:
4a:9b:c8:c0:ef:8c:d3:3f:cb:11:28:de:b3:c1:06:
8f:43:32:e1:6e:66:0c:b1:2e:f1:2a:f1:2f:23:46:
c7:3b:d0:43:0e:89:3a:a9:c3:3d:12:cf:6d:fa:4e:
3c:16:fb:93:e9:59:c2:84:51:93:a6:32:d2:64:3a:
d2:7f:82:d3:84:cc:79:1a:cd:40:62:94:33:db:5a:
8c:6d:3e:06:d1:c4:dc:c5:c4:14:4d:7a:bc:8a:ff:
98:e7:39:b9:ef:bd:a9:a0:a0:fb:84:01:59:2c:6e:
63:85:1c:9a:8b:58:cf:3f:7f:40:c6:fe:6a:f0:08:
5d:6e:e3:f4:16:0b:60:27:bf:b1:bb:e5:b7:b4:12:
d4:81:52:0c:e6:c5:0a:5f:76:de:0c:1f:ad:16:aa:
7c:5e:09:89:e5:8b:68:44:3b:0f:f7:01:8f:f1:60:
4b:a7:8c:ba:e4:aa:06:35:87:ab:e5:2e:46:20:0c:
1a:5e:07:3f:cc:16:f0:27:e8:df:4c:54:8e:31:73:
5e:88:96:83:8e:f7:9d:c1:0a:b0:27:d6:b7:d2:3b:
7f:8e:3e:2c:95:0d:7e:6f:c1:b7:49:7d:fa:ef:b2:
b9:51:55:bd:48:15:0e:5f:e0:a4:8a:37:95:34:58:
d6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:4B:22:C2:88:22:76:2B:3F:B6:0E:B6:5B:93:0A:72:67:09:68:42
X509v3 Authority Key Identifier:
keyid:B4:33:42:F1:7D:54:A8:A3:DA:0C:E4:D3:18:B3:B4:C3:FA:05:93:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:58:ea:f5:24:94:65:6c:13:1b:e9:1e:09:54:07:3c:88:ab:
64:ea:5c:07:52:6c:e8:d4:e1:9a:c8:c5:15:81:be:38:a4:30:
a3:61:07:a4:29:c9:77:7f:c3:d6:b1:a5:81:5e:1f:08:4e:86:
36:2b:57:8e:b7:77:87:22:27:61:81:3e:01:d3:1f:f3:f1:87:
d5:a6:fb:62:eb:e6:ba:18:0b:1c:f5:f6:6e:65:1c:b3:24:9d:
33:a1:61:70:6c:0a:3a:f9:3a:80:50:4b:b3:bb:e1:e0:94:a8:
e7:3d:00:da:26:c1:e4:74:22:2e:f9:db:25:c0:e3:f7:ce:7d:
fe:ae:e7:ad:2a:bc:57:72:a0:cb:19:31:74:7f:6b:51:b1:ad:
fd:2b:1d:4f:45:22:db:49:91:d1:30:35:32:38:03:7e:26:9e:
29:9d:a8:68:36:da:16:ca:7f:62:85:e8:c9:56:32:86:e3:d9:
c4:bb:1b:11:91:47:a6:a0:21:8a:38:b5:d1:9e:1d:9b:84:2c:
fc:e6:56:cc:dd:e9:3b:5e:d8:a4:e4:7a:cb:28:26:2d:33:2c:
12:4a:24:1c:93:58:ef:bb:89:ff:9e:4a:8b:df:c5:2e:fa:6a:
69:5e:d3:c0:46:fb:51:d0:18:53:e6:c1:b9:da:3b:73:05:4f:
9e:d8:4c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:03:13 2025 by rpki-client