Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
File: TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft (raw, json)
Hash identifier: ffeB5YSmV9aCw8zb0iaZiTobH0HogrZOYKHyx80x66k=
Subject key identifier: CD:62:5C:8B:AD:7C:3A:F1:AA:1F:36:E5:92:2A:98:D0:F9:CF:F7:DB
Authority key identifier: 4C:38:A3:06:A3:7E:E8:7B:EB:FF:72:36:55:3E:0D:3C:B6:72:CD:17
Certificate issuer: /CN=4c38a306a37ee87bebff7236553e0d3cb672cd17
Certificate serial: 01987ABFA9E3C4CFDEF4B9B2078113932A3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
Manifest number: F0
Signing time: Tue 05 Aug 2025 15:00:37 +0000
Manifest this update: Tue 05 Aug 2025 15:00:37 +0000
Manifest next update: Wed 06 Aug 2025 15:00:37 +0000
Files and hashes: 1: 54qil-gtsg-VmWMUKBbSoP89Sh4.roa (hash: +lFuYFZIeWq9AFirWvNO/gLe0U+wLrmb+nny8MFDRhE=)
2: TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl (hash: 9y3/11se/dJmKcynpdspI3lXD57TwQaqJhie9GlJriQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:bf:a9:e3:c4:cf:de:f4:b9:b2:07:81:13:93:2a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c38a306a37ee87bebff7236553e0d3cb672cd17
Validity
Not Before: Aug 5 15:00:37 2025 GMT
Not After : Aug 6 15:00:37 2025 GMT
Subject: CN=cd625c8bad7c3af1aa1f36e5922a98d0f9cff7db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7c:f4:a1:a7:d3:aa:c4:22:30:26:a3:14:5a:
94:19:d1:0d:86:dd:23:07:71:e1:53:e0:2b:9b:c6:
86:b9:40:5a:56:17:2a:af:ef:4e:d7:d3:02:7b:27:
03:2f:22:d2:92:3f:b8:de:17:b3:9f:00:f1:00:12:
1e:d9:99:3d:28:8c:a2:80:78:49:ff:05:1f:e0:2f:
3b:07:68:3b:f8:f3:70:a2:27:a5:e5:8c:88:6f:75:
cd:f8:36:7a:ff:d1:96:ba:25:76:72:52:34:65:e6:
10:9b:16:87:b6:37:50:e3:83:85:92:05:90:04:f8:
d1:ab:d2:38:05:4b:99:6d:91:b3:cd:c9:27:66:21:
55:27:18:38:82:2b:ed:92:f7:97:4b:72:37:b4:4c:
60:80:86:5e:67:81:e2:ac:f2:5c:fa:25:07:c7:0a:
e1:a6:e6:72:20:94:b1:0f:be:19:27:4a:fb:00:0a:
0e:40:fe:c1:0b:5d:f3:ea:f2:8c:75:50:9f:a1:45:
0b:9b:81:17:98:7f:86:e4:da:87:25:95:05:a8:60:
86:b5:38:27:0f:4a:57:c5:84:d6:d9:9d:bd:8f:2f:
eb:e6:0f:83:fb:60:0f:06:95:46:1a:bb:b4:d8:6a:
46:db:6b:8f:c6:29:29:cc:fb:1e:f4:84:3f:cc:12:
26:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:62:5C:8B:AD:7C:3A:F1:AA:1F:36:E5:92:2A:98:D0:F9:CF:F7:DB
X509v3 Authority Key Identifier:
keyid:4C:38:A3:06:A3:7E:E8:7B:EB:FF:72:36:55:3E:0D:3C:B6:72:CD:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:52:1e:87:62:60:5f:f4:ea:bf:33:a5:86:6c:c7:cc:b4:f8:
b8:2d:6e:4c:f9:1a:73:c0:0d:7a:df:38:be:bf:e5:74:68:b2:
35:9b:ac:1f:d1:d8:ae:71:04:ef:b7:a8:28:52:29:9c:85:c1:
45:ea:2a:b4:02:18:2f:1c:8b:62:be:e7:81:ea:16:76:c5:45:
07:54:e1:85:95:81:30:1d:c8:b4:7c:cd:8b:24:b7:52:f0:58:
f2:8e:6e:7c:63:df:ec:71:e7:90:6a:00:90:bb:ee:b1:a5:61:
5e:60:cb:59:bd:23:ef:d3:90:f8:b9:14:93:7e:61:af:cd:89:
f4:1c:70:5e:51:06:5c:7c:60:27:e1:b2:06:29:fa:fe:6e:ad:
8c:a9:54:2c:9d:16:0f:9b:aa:da:03:f0:90:ed:94:55:1c:7d:
cd:53:02:5d:5f:d1:31:7c:08:6e:fb:1c:6a:b0:99:c3:d7:ad:
3c:2b:ad:e0:33:ae:00:4f:30:c1:8e:b4:1d:ca:ee:7a:11:c1:
02:c7:ab:9a:0f:f8:ab:6c:32:8d:d3:77:b7:b1:cb:3b:7c:45:
a1:a7:7b:fc:3c:6a:20:b0:0e:f1:35:85:0a:5f:28:02:4e:c9:
19:57:2a:6b:4a:ca:8d:8a:4f:a9:a3:15:ba:b4:e5:37:2e:7d:
65:14:4a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:14:13 2025 by rpki-client