Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
File: TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft (raw, json)
Hash identifier: B61R38/VPuz5RiD0JqbrHmTeu5fPisnG3+2NGvXOoak=
Subject key identifier: 7E:EF:1D:E3:9A:BA:5C:1F:4A:C0:EB:00:EE:99:8E:13:24:56:FB:96
Authority key identifier: 4C:39:05:5A:69:90:B8:24:08:CF:1A:BF:29:31:37:80:E2:49:A4:C9
Certificate issuer: /CN=4c39055a6990b82408cf1abf29313780e249a4c9
Certificate serial: 019896DBF2BFF4F12DC5FCE65A57DE6767B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
Manifest number: 1192
Signing time: Mon 11 Aug 2025 02:00:53 +0000
Manifest this update: Mon 11 Aug 2025 02:00:53 +0000
Manifest next update: Tue 12 Aug 2025 02:00:53 +0000
Files and hashes: 1: 0Y15xTEGHWqAVJeDnj84hoOI0tg.roa (hash: x9AqfYccJqcsHyWL4/sbLsYAD4D5JWU2OTOL9ya8Qzo=)
2: IYab2KOA6Rs-FvpcDRNq2DIlRwA.roa (hash: IVe8cPHTrjQPMjYgTeQH7fMCvrM38QVBDNRacJOqgtc=)
3: TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl (hash: I+fwLsnSmHEjABoQWS7r4snw4MYWqzgoUG2Ghof2IbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:db:f2:bf:f4:f1:2d:c5:fc:e6:5a:57:de:67:67:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c39055a6990b82408cf1abf29313780e249a4c9
Validity
Not Before: Aug 11 02:00:53 2025 GMT
Not After : Aug 12 02:00:53 2025 GMT
Subject: CN=7eef1de39aba5c1f4ac0eb00ee998e132456fb96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:3d:a4:fb:12:0a:5f:5d:a1:67:e6:cb:15:21:
06:5f:f7:14:54:55:8f:94:18:1a:9b:fa:5a:ea:dd:
cb:f0:fe:22:65:27:f5:1e:95:ae:8f:83:cd:06:7b:
06:e3:92:0b:c5:ff:e3:a0:94:fd:50:a8:de:b4:54:
30:a9:d4:b7:98:23:46:46:82:fe:83:bb:8e:b7:f7:
ad:16:af:27:c6:eb:04:de:73:97:b2:fb:db:9d:ee:
cc:ff:13:39:ef:79:4b:2e:bd:95:ef:7c:cc:05:66:
ee:97:34:f8:9d:6a:b2:13:52:53:86:9f:b9:da:3c:
d7:70:17:fe:cb:94:16:86:c5:2d:9f:8b:31:ba:13:
b4:a9:ce:fb:9d:3f:6b:9f:28:b4:ef:ec:57:fd:d3:
00:20:b2:64:98:c2:87:60:be:f8:ab:c0:48:07:07:
31:71:a4:01:cf:4b:6d:d4:27:b7:e6:dd:ec:1e:36:
1d:7d:29:36:ee:e1:f9:fa:51:7f:23:32:d7:07:a8:
8a:eb:28:b3:76:ef:14:b1:2f:ee:9a:c7:55:4f:3f:
6a:bf:3a:88:3c:3d:de:c4:1b:e8:5b:19:e9:a7:14:
5b:9d:74:e2:66:1a:3a:74:e3:87:f1:e2:ba:14:9e:
ff:5e:85:c7:d3:52:94:8e:36:44:f6:e2:ce:39:21:
b1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:EF:1D:E3:9A:BA:5C:1F:4A:C0:EB:00:EE:99:8E:13:24:56:FB:96
X509v3 Authority Key Identifier:
keyid:4C:39:05:5A:69:90:B8:24:08:CF:1A:BF:29:31:37:80:E2:49:A4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:8b:f4:68:83:01:fb:ce:9b:85:e3:c5:57:2f:a0:a1:93:da:
2e:19:70:98:11:d8:35:2a:2e:d1:4e:fc:99:8c:c2:80:84:14:
6a:e6:24:d3:10:d8:98:ab:76:02:64:51:69:ef:7e:0a:2c:62:
d8:d2:d8:c7:0c:ca:7c:dd:af:7e:ce:6a:db:1b:60:e7:a2:f4:
ff:be:7a:81:7f:8f:0e:a7:28:4e:64:b2:fb:5e:ff:24:94:43:
f0:f3:b2:7c:d3:b0:50:27:2a:4f:59:ad:06:5a:12:ed:14:4e:
03:28:72:7d:24:57:b0:42:e5:c8:e0:27:53:f9:af:c6:1e:5b:
8f:72:4c:f5:df:0e:b0:b7:3f:51:ee:61:da:e0:64:f9:93:83:
64:a5:ea:c5:02:b6:ce:62:62:02:91:01:b4:be:39:83:14:7c:
41:6b:0d:f3:89:6a:65:53:ea:ca:62:bf:56:e9:63:bd:26:b5:
d9:2e:8f:ca:a6:6a:1d:fb:58:3f:d0:52:bd:77:be:8b:c1:e7:
5a:a6:e2:83:d2:f9:5c:98:4f:30:b5:1f:5a:72:29:9b:14:88:
cd:84:ba:d0:ce:01:04:42:ea:70:74:05:3c:4f:0c:29:fa:ac:
3e:86:c6:50:2c:59:4f:bb:d9:a2:10:6f:c1:99:55:2f:cb:10:
a1:2e:86:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:24:21 2025 by rpki-client