Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft
File: TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft (raw, json)
Hash identifier: OD8t2uYlWgAmApRwbS6S2EGoiX98bKuKf84zL39aqMQ=
Subject key identifier: F5:B0:5D:C0:14:5D:9B:6F:51:04:30:4A:7C:7A:61:26:C9:1D:B0:8F
Authority key identifier: 4C:33:C0:E1:4D:57:EA:BC:3B:65:E3:8A:77:36:BE:BE:49:09:2E:9E
Certificate issuer: /CN=4c33c0e14d57eabc3b65e38a7736bebe49092e9e
Certificate serial: 01987DF88FED50D2CCDA1A5B69C6B23FDCA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDPA4U1X6rw7ZeOKdza-vkkJLp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft
Manifest number: 0D61
Signing time: Wed 06 Aug 2025 06:01:38 +0000
Manifest this update: Wed 06 Aug 2025 06:01:38 +0000
Manifest next update: Thu 07 Aug 2025 06:01:38 +0000
Files and hashes: 1: TDPA4U1X6rw7ZeOKdza-vkkJLp4.crl (hash: iClp8Yc5V262d57a8RzeWiN7itW5xXrD3UD8aaBC2Uc=)
2: k_nIf6wVx1Xdxat4zYtnBqTL13Y.roa (hash: HaoM7rJ6dUREUsX3C7dLkVUY9dcgJCaHV1PnH/ISMtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDPA4U1X6rw7ZeOKdza-vkkJLp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 06:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f8:8f:ed:50:d2:cc:da:1a:5b:69:c6:b2:3f:dc:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c33c0e14d57eabc3b65e38a7736bebe49092e9e
Validity
Not Before: Aug 6 06:01:38 2025 GMT
Not After : Aug 7 06:01:38 2025 GMT
Subject: CN=f5b05dc0145d9b6f5104304a7c7a6126c91db08f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:8a:4d:dc:f8:21:71:97:9e:34:be:c0:4d:e1:
00:88:e4:09:67:ce:95:95:4c:be:ae:8f:43:0d:3a:
8b:9d:c7:a5:f6:db:ff:d0:f5:8c:6e:26:fb:15:2e:
ad:c0:64:df:0e:c7:53:4d:f8:e4:a2:68:0e:71:4b:
3e:f0:7c:30:44:cd:11:22:7b:43:28:4c:7a:ad:35:
db:56:4c:21:be:a7:5f:65:ae:99:db:c3:30:85:3d:
06:18:0c:45:22:e8:d8:18:07:df:0a:0d:46:98:04:
63:df:ab:e6:6f:b5:ce:56:ef:60:f3:27:13:ff:51:
86:ba:77:75:6f:a8:f4:c5:ea:a2:27:6b:fb:4c:76:
64:8a:54:32:42:9e:30:f2:cc:5b:47:df:67:80:5e:
a5:4e:2e:32:d8:a2:c0:d9:04:4e:52:33:04:a4:f6:
78:f1:7d:fa:0f:4d:68:ee:ce:22:f8:05:ba:58:b2:
c3:01:5c:98:d1:c3:65:8c:7a:c3:d0:4f:16:b0:a0:
49:d7:24:68:0c:84:ce:ff:33:54:d7:92:19:ff:8c:
32:8d:c1:73:b3:41:f5:72:ac:4f:8d:8d:59:84:dd:
09:d3:fd:c7:e6:b6:b3:75:b1:be:d6:8f:82:98:d3:
67:4c:50:d3:86:f5:dd:13:a2:b7:2f:ef:00:a3:ba:
e7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B0:5D:C0:14:5D:9B:6F:51:04:30:4A:7C:7A:61:26:C9:1D:B0:8F
X509v3 Authority Key Identifier:
keyid:4C:33:C0:E1:4D:57:EA:BC:3B:65:E3:8A:77:36:BE:BE:49:09:2E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDPA4U1X6rw7ZeOKdza-vkkJLp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:8e:a6:e6:5e:78:4e:6b:73:bc:cc:1d:8d:4f:3f:70:ed:7f:
4b:76:b0:0a:b9:1f:8f:d2:97:c5:0e:5f:29:0d:20:94:bd:81:
cf:55:4e:03:30:27:06:24:32:11:a9:8d:ff:1d:a4:fa:ed:19:
0b:8d:da:1c:42:c1:17:e6:7f:bc:3e:7f:a2:fd:4d:4e:ac:bf:
67:84:a1:64:ea:33:18:8c:63:24:e2:37:4a:0e:52:11:79:94:
3f:13:15:b6:f0:d5:24:30:c4:c8:b6:a6:2f:53:5d:bd:99:9b:
c9:62:7f:79:12:24:6c:a9:fa:b4:13:c3:68:51:94:23:34:b4:
8a:d4:a9:06:3a:06:9d:15:2b:a0:bc:8c:e2:85:c1:90:3d:b8:
a7:38:09:f9:d7:a2:bc:d8:ba:ec:7c:78:d8:96:68:38:89:88:
ba:00:df:a5:34:6d:92:24:02:17:f1:66:72:b0:61:02:bd:45:
7b:24:e5:9f:15:f1:06:f2:6d:7e:fb:5f:c7:76:b6:74:f6:1c:
57:93:17:82:4a:9c:ad:19:6a:ab:7c:48:56:ef:e1:f5:26:4f:
b2:dc:ca:a5:34:9a:af:31:0c:a9:4a:c2:6c:22:31:3d:a0:a5:
7f:91:0c:cb:be:40:19:31:7c:e1:a7:6d:de:44:81:18:a5:b4:
e1:fc:27:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:17:02 2025 by rpki-client