Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
File: TDJWN81N6a_lO9TxIav2IkX2cU8.mft (raw, json)
Hash identifier: BvRfd6CDeR1PL8/4a5RNXM2oENvUvEjlB+G31HUnHs8=
Subject key identifier: 86:D2:94:45:B6:B2:EF:F1:DB:37:DD:D7:86:9C:0F:81:6A:5C:33:7D
Authority key identifier: 4C:32:56:37:CD:4D:E9:AF:E5:3B:D4:F1:21:AB:F6:22:45:F6:71:4F
Certificate issuer: /CN=4c325637cd4de9afe53bd4f121abf62245f6714f
Certificate serial: 01987450E90BE1C914B77BCFAE9924720AD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
Manifest number: 070C
Signing time: Mon 04 Aug 2025 09:01:56 +0000
Manifest this update: Mon 04 Aug 2025 09:01:56 +0000
Manifest next update: Tue 05 Aug 2025 09:01:56 +0000
Files and hashes: 1: LYDDQOnitFMTtAyGKwDs2TyB_cA.roa (hash: sjSPKMVEsY4HYjeMnDvZAekbl4IrY01T9jduMhK7Jbc=)
2: TDJWN81N6a_lO9TxIav2IkX2cU8.crl (hash: zpLNaqkA+PnDpms+VVUYOcwI4f/hjpQDCPhLrSD0pvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:e9:0b:e1:c9:14:b7:7b:cf:ae:99:24:72:0a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c325637cd4de9afe53bd4f121abf62245f6714f
Validity
Not Before: Aug 4 09:01:56 2025 GMT
Not After : Aug 5 09:01:56 2025 GMT
Subject: CN=86d29445b6b2eff1db37ddd7869c0f816a5c337d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a9:91:e8:a7:56:9b:be:0e:41:35:19:7c:13:
c5:86:ba:1c:9d:83:12:8e:78:e0:a3:55:de:26:43:
62:e5:f4:83:14:09:78:d3:a2:78:34:8c:59:cc:72:
5e:34:04:ed:90:55:b0:36:03:37:5e:e3:01:19:4d:
fd:43:0b:c7:cd:fc:35:1e:f8:24:08:24:d8:da:14:
de:35:29:b2:f7:74:f7:88:75:1d:78:71:65:d6:c4:
a0:98:68:aa:79:de:aa:8f:b3:94:30:f4:41:d3:d9:
8e:2c:2c:b2:c8:5c:46:5a:6a:d6:a4:cf:b1:bf:ca:
9e:12:21:90:e9:73:c1:33:09:97:2f:83:27:73:84:
f3:9c:ff:08:b4:50:4c:35:ac:e9:3c:bc:c8:0b:79:
05:f1:66:f4:3e:0b:01:5c:54:50:2b:4e:3f:c7:40:
92:2c:02:54:be:23:3b:db:dd:9e:e1:5f:7e:5a:33:
22:bf:1e:fc:e7:95:d3:bf:1a:97:a6:33:d3:94:94:
0e:a5:6a:27:00:2a:74:4c:e7:92:b2:41:d9:3a:d5:
d2:1d:d1:9f:ba:8e:71:43:15:66:ae:ab:79:1a:06:
89:3e:be:83:bd:c0:48:f4:de:55:0e:6b:3c:c4:b9:
eb:30:b0:62:e6:1a:bc:ee:b2:03:a1:1f:de:3d:f3:
35:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D2:94:45:B6:B2:EF:F1:DB:37:DD:D7:86:9C:0F:81:6A:5C:33:7D
X509v3 Authority Key Identifier:
keyid:4C:32:56:37:CD:4D:E9:AF:E5:3B:D4:F1:21:AB:F6:22:45:F6:71:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:73:75:4f:47:0a:13:c9:b6:a3:00:20:63:25:65:1d:9c:55:
3e:cf:80:45:73:2b:58:cd:f2:04:43:d1:9c:73:50:f9:77:bc:
e1:b5:c8:ae:03:ab:03:03:ef:5e:5e:9c:35:1f:41:b4:b7:2f:
da:bc:3b:82:68:69:c7:60:2b:48:d4:8b:4d:6d:88:ff:8f:8a:
d6:99:6c:39:66:00:e8:30:fc:df:1e:60:91:f6:42:d4:28:bc:
ee:b8:d6:c2:93:6a:95:34:e1:84:26:15:cb:79:d7:b8:ae:68:
78:58:4b:c6:a2:62:ad:de:a4:ab:d3:de:ef:d7:89:89:53:18:
79:e6:b3:b2:e9:c9:d9:5f:c3:c5:be:c8:c7:c2:c2:70:2e:d5:
f4:be:99:05:2f:ae:d8:c6:57:a5:93:38:1c:d0:c2:d2:e4:39:
0f:0e:40:07:ef:59:13:0f:f2:12:cf:94:f2:c4:61:30:3b:20:
5e:43:08:f1:32:4b:29:1b:6e:d2:de:4a:98:0b:d0:4a:55:e3:
0f:21:53:91:82:4b:01:e2:77:a9:66:97:e1:3f:6b:d0:07:be:
50:b9:59:e8:3b:0d:e1:b9:79:fd:28:ff:4b:71:8c:45:d9:ae:
14:ce:1a:a6:60:49:31:1a:f5:a8:a9:dc:1b:54:78:1e:ff:58:
8a:83:e7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:18:14 2025 by rpki-client