Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
File: TD6do79ZOALMgz_l2UelJpb1jI0.mft (raw, json)
Hash identifier: Qa/Ny/DyOXtMWnncJKxz1wMLcSezdv00JOVzqLxXiYo=
Subject key identifier: 01:B6:E5:CD:53:BD:90:09:41:1C:F8:10:09:5D:19:67:82:76:4A:C7
Authority key identifier: 4C:3E:9D:A3:BF:59:38:02:CC:83:3F:E5:D9:47:A5:26:96:F5:8C:8D
Certificate issuer: /CN=4c3e9da3bf593802cc833fe5d947a52696f58c8d
Certificate serial: 01976F2BF8DA3883BDAD78A8113F2565A301
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
Manifest number: 14D0
Signing time: Sat 14 Jun 2025 16:00:42 +0000
Manifest this update: Sat 14 Jun 2025 16:00:42 +0000
Manifest next update: Sun 15 Jun 2025 16:00:42 +0000
Files and hashes: 1: EWuOguv1P9Rw7Q-U1qAW9dBN2No.roa (hash: rN97euvDe5WCriK9EjJsNO5wn2cUGLmPhpQvNqo71q8=)
2: TD6do79ZOALMgz_l2UelJpb1jI0.crl (hash: Yc616AizhqRSlYaA0BnWxM4Keui8RXQ1yyt3LOy7vfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2b:f8:da:38:83:bd:ad:78:a8:11:3f:25:65:a3:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3e9da3bf593802cc833fe5d947a52696f58c8d
Validity
Not Before: Jun 14 16:00:42 2025 GMT
Not After : Jun 15 16:00:42 2025 GMT
Subject: CN=01b6e5cd53bd9009411cf810095d196782764ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d0:5b:f0:f9:36:d8:af:8e:8c:43:69:db:9b:
f4:4a:2d:27:66:b8:ea:07:b2:80:a7:c5:3b:cc:45:
56:f7:36:32:98:a2:d9:bc:5f:a2:09:4f:ab:18:2b:
08:76:47:13:b5:3d:cc:9c:1e:0d:ca:47:5c:25:b2:
56:ef:3b:dd:0a:17:50:ae:31:8c:9a:29:89:bc:9c:
12:b6:86:26:b2:01:ef:e3:a7:f5:2b:2f:8c:38:eb:
fc:7f:cb:de:6d:d1:91:8e:5c:cc:08:78:9a:89:d9:
29:05:38:05:7f:96:a3:03:f0:43:38:f7:da:30:c9:
9f:ac:59:f3:2f:89:3a:56:06:99:7b:e4:e9:d3:bb:
e1:69:af:ae:34:97:64:f8:a4:02:93:11:9b:4f:0a:
16:a5:a2:fb:ed:d1:0a:41:f7:6d:59:ac:e4:fc:60:
fd:27:d8:dc:40:68:a5:17:bc:20:2a:ca:f3:c9:3d:
9a:c8:37:f2:00:4a:2b:01:cd:f2:69:a2:6a:eb:ca:
a9:d0:97:08:25:86:52:24:e8:be:e5:2d:6e:ea:a1:
f2:7e:53:98:ee:2c:22:cd:6a:94:61:75:6f:03:65:
d4:0d:fe:81:13:8c:d8:7b:dc:92:3a:b5:31:a1:63:
8d:25:a8:c7:dc:ef:b4:f2:05:4e:84:dc:9d:da:8e:
a1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B6:E5:CD:53:BD:90:09:41:1C:F8:10:09:5D:19:67:82:76:4A:C7
X509v3 Authority Key Identifier:
keyid:4C:3E:9D:A3:BF:59:38:02:CC:83:3F:E5:D9:47:A5:26:96:F5:8C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:b5:3e:a3:9a:2b:99:ed:78:bb:86:fc:7e:a6:ea:04:76:8e:
c8:d9:3e:3e:9f:51:f9:10:de:00:68:6a:d2:cf:d3:6d:8c:3b:
63:55:92:b9:6b:d5:f8:2e:70:95:37:3d:03:60:9a:81:99:80:
32:36:65:bd:37:30:f6:fa:c1:31:1f:4e:fa:ce:e4:5e:8b:78:
d2:a7:38:40:2f:80:8d:94:77:1d:ab:80:1a:db:c3:36:af:88:
64:b5:42:bb:39:58:74:f6:ac:6f:a3:3d:44:72:e6:b7:d2:87:
fc:ec:c2:ff:35:d8:c9:9f:2a:3d:5f:33:88:97:ab:75:58:21:
72:f6:63:74:c9:14:69:1a:ea:69:8c:f8:a6:53:05:a9:a2:76:
3c:6a:73:20:e2:cf:de:02:27:8a:4b:a0:68:9d:33:54:f2:f0:
a0:99:3c:4b:ad:e2:f6:c2:8d:85:67:c1:4b:cd:bf:90:12:c7:
9a:3a:4f:0f:9d:d7:18:f1:d0:76:d0:84:1a:52:f6:f2:9f:f8:
3c:54:b0:59:5d:13:01:8e:c4:62:f2:40:3c:32:d7:fd:2c:90:
e7:d3:74:45:82:7c:17:0b:4e:ab:38:54:e7:10:19:30:b5:c7:
3e:34:0f:8f:f4:5e:f7:e3:51:ae:f7:57:9a:37:cd:4a:6a:fa:
1c:ce:00:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:15:18 2025 by rpki-client