Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
File: TD6do79ZOALMgz_l2UelJpb1jI0.mft (raw, json)
Hash identifier: JORlxGQ15/RxGERT48a1n8FRda48IBvg4kCqxp83GSw=
Subject key identifier: 01:FA:2C:B9:C9:3E:1D:A9:A9:AC:92:C3:98:89:D8:97:F2:F2:C3:8E
Authority key identifier: 4C:3E:9D:A3:BF:59:38:02:CC:83:3F:E5:D9:47:A5:26:96:F5:8C:8D
Certificate issuer: /CN=4c3e9da3bf593802cc833fe5d947a52696f58c8d
Certificate serial: 0198835569DF4B60F7D751E1A92105D647AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
Manifest number: 155F
Signing time: Thu 07 Aug 2025 07:01:09 +0000
Manifest this update: Thu 07 Aug 2025 07:01:09 +0000
Manifest next update: Fri 08 Aug 2025 07:01:09 +0000
Files and hashes: 1: EWuOguv1P9Rw7Q-U1qAW9dBN2No.roa (hash: rN97euvDe5WCriK9EjJsNO5wn2cUGLmPhpQvNqo71q8=)
2: TD6do79ZOALMgz_l2UelJpb1jI0.crl (hash: vYaga45IzePI8CzxVpFfN0rNQRtugWu1wwbt6dH4ufM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:55:69:df:4b:60:f7:d7:51:e1:a9:21:05:d6:47:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3e9da3bf593802cc833fe5d947a52696f58c8d
Validity
Not Before: Aug 7 07:01:09 2025 GMT
Not After : Aug 8 07:01:09 2025 GMT
Subject: CN=01fa2cb9c93e1da9a9ac92c39889d897f2f2c38e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:08:d9:e9:15:a9:d6:71:50:5e:14:dc:4e:88:
5a:d2:23:31:5a:0f:9e:78:7b:82:2c:ac:e6:e9:56:
71:6c:b1:86:c6:f5:3b:52:a2:6f:f8:f3:f7:f7:c9:
69:2b:18:5c:fc:0a:d5:fe:c8:22:bd:8e:db:f3:3d:
d2:cf:57:f0:79:8c:c9:d0:0d:cc:80:e9:3f:9a:e4:
02:8a:ba:77:57:52:07:e3:87:3b:46:f9:11:cc:11:
23:79:94:92:c2:4a:26:93:c5:0a:f6:b3:0d:4b:eb:
aa:4b:bc:ca:41:46:34:23:60:07:b4:27:ca:f5:cd:
e9:63:84:8e:d4:67:06:87:76:a1:94:08:22:cc:9e:
56:0a:8a:6e:fd:6c:ed:87:70:10:59:2a:33:26:19:
f2:75:7d:49:c1:31:d0:62:46:f7:8f:ee:79:94:03:
f6:ff:30:8b:63:21:e5:8a:63:a5:a5:58:99:aa:c4:
6f:07:c0:ec:dc:1b:6d:97:36:1c:5b:c7:3f:ff:9e:
29:74:f8:8c:e9:7e:f1:91:f2:37:4f:5a:55:0f:11:
de:d7:39:94:f6:ff:96:40:3f:db:86:e6:8f:42:6f:
93:ed:8b:6b:98:8c:23:3e:18:7d:a9:a3:47:bf:91:
94:ad:66:10:eb:a5:e0:13:d9:52:43:b2:dc:9c:2e:
82:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:FA:2C:B9:C9:3E:1D:A9:A9:AC:92:C3:98:89:D8:97:F2:F2:C3:8E
X509v3 Authority Key Identifier:
keyid:4C:3E:9D:A3:BF:59:38:02:CC:83:3F:E5:D9:47:A5:26:96:F5:8C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:33:a8:43:9b:ae:ef:00:2c:59:87:b5:eb:c3:f6:6f:0e:b8:
e9:a2:d7:50:99:21:fb:78:1d:63:e6:06:3c:8b:d2:89:7a:c8:
3e:0c:ab:9d:f1:88:e4:9c:b4:56:4f:d5:24:ea:b8:65:32:aa:
e0:66:ce:e0:24:5e:17:2a:89:ea:18:90:e1:e8:53:7e:11:ae:
3b:ea:ba:0d:1b:70:7b:4b:26:9c:5e:af:2d:08:ee:60:72:5b:
94:e6:72:49:11:c5:07:c7:94:1a:4e:1c:e9:db:b6:fe:4e:eb:
de:e3:9b:95:a5:48:45:b0:7d:d5:24:99:11:20:21:10:e5:a4:
8c:e3:e5:4f:be:ed:f9:a8:d4:b0:49:d3:c4:75:71:a5:0d:5c:
82:7f:43:eb:51:db:fb:ca:fd:48:4a:c5:ff:2e:64:a4:0a:32:
85:a4:af:06:34:52:e6:76:c6:5a:41:1f:9f:0f:07:dd:74:3e:
6a:c9:60:b5:d5:67:15:09:62:c1:81:67:f4:01:8f:4b:7e:3e:
79:73:f7:9a:0b:c7:12:de:37:f9:48:6b:c9:9c:d2:7f:f1:eb:
7d:0b:9b:2b:ac:bf:8b:bd:1b:9e:6e:ee:48:93:4e:ba:b6:e7:
2e:b7:24:be:f4:f2:4a:f4:e4:da:0f:86:fa:b4:63:89:7c:44:
47:21:c0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:50:18 2025 by rpki-client