
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
File: TDOTsqG9eRmFmAeDirHjsAN7i08.mft (raw, json)
Hash identifier: H4G89jdVJdQJoHJrRn76czTcckbtjUdq+dVBIiOin7I=
Subject key identifier: 8C:63:A9:3C:42:A5:0F:E7:E1:AA:3E:10:A8:23:17:ED:6E:42:10:78
Authority key identifier: 4C:33:93:B2:A1:BD:79:19:85:98:07:83:8A:B1:E3:B0:03:7B:8B:4F
Certificate issuer: /CN=4c3393b2a1bd7919859807838ab1e3b0037b8b4f
Certificate serial: 01976BF3EDEC25EDDB9F40DFA448309F5165
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDOTsqG9eRmFmAeDirHjsAN7i08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
Manifest number: 0C8A
Signing time: Sat 14 Jun 2025 01:00:37 +0000
Manifest this update: Sat 14 Jun 2025 01:00:37 +0000
Manifest next update: Sun 15 Jun 2025 01:00:37 +0000
Files and hashes: 1: TDOTsqG9eRmFmAeDirHjsAN7i08.crl (hash: LHbzVk1/2KTBY9TfVFXe0u2HDra2qqsxXJ+mNlbqjJ8=)
2: y6xk5yyaeCIuQcfJUMGsvyLuakI.roa (hash: 5cTQO7InxQ4ef2VY7Tlc4nQ2LkIPqai+B4whSvQRHdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDOTsqG9eRmFmAeDirHjsAN7i08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f3:ed:ec:25:ed:db:9f:40:df:a4:48:30:9f:51:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3393b2a1bd7919859807838ab1e3b0037b8b4f
Validity
Not Before: Jun 14 01:00:37 2025 GMT
Not After : Jun 15 01:00:37 2025 GMT
Subject: CN=8c63a93c42a50fe7e1aa3e10a82317ed6e421078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:45:49:83:ec:9b:d0:a6:b6:4f:50:b3:e4:fd:
1b:f4:75:9b:3e:c8:66:17:1c:af:a6:88:8b:7c:dc:
25:cf:10:dc:48:dc:99:dc:26:42:c4:70:fb:0c:39:
94:6c:dc:bb:c6:6a:1b:0e:a3:1d:46:c4:c6:65:f9:
a5:96:c4:b8:5f:fc:bd:88:dc:9a:39:2d:43:2a:65:
15:40:da:2d:04:6e:30:e9:7e:f5:94:41:f1:7f:b8:
14:59:63:40:ef:c2:c3:e0:4c:90:19:56:55:fd:d9:
05:03:13:83:6d:e9:33:af:a1:b4:33:d0:e1:7d:52:
96:88:7e:61:be:03:b1:3c:16:95:01:01:81:ea:fd:
78:11:f9:bb:eb:b1:9f:cc:53:22:10:ba:b7:2c:5d:
bb:7d:3e:da:09:68:a5:85:86:b1:c0:ea:5d:6f:47:
d5:6a:6e:a2:a3:6f:d6:82:7c:8a:c4:bc:59:5b:62:
95:2f:46:1f:88:ab:47:de:89:04:f5:47:fd:06:19:
88:25:09:fa:21:69:74:9b:67:8d:4e:ae:27:c7:b9:
1f:76:7b:02:89:26:e4:a6:d3:d9:5c:e4:29:e7:29:
5d:5a:f9:95:a2:e9:da:64:17:b0:27:e0:39:0d:75:
71:3f:8b:f1:f1:f1:9b:df:a0:88:75:53:19:2b:7c:
34:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:63:A9:3C:42:A5:0F:E7:E1:AA:3E:10:A8:23:17:ED:6E:42:10:78
X509v3 Authority Key Identifier:
keyid:4C:33:93:B2:A1:BD:79:19:85:98:07:83:8A:B1:E3:B0:03:7B:8B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDOTsqG9eRmFmAeDirHjsAN7i08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:6b:c3:cc:ec:a7:51:55:d3:bd:ed:de:b9:d1:d7:05:5c:e1:
3f:6b:7c:d9:6b:77:c6:25:3f:b7:48:26:a4:18:f6:52:c1:ab:
f4:06:33:c5:b0:51:92:75:78:5a:2e:32:5b:a6:4a:e1:f1:c0:
4f:a8:9d:c5:54:62:97:7a:fb:f6:43:3f:0a:20:56:13:ac:4b:
e8:88:07:be:29:ae:d5:11:50:14:36:3b:08:32:cc:1d:c9:fa:
68:c7:f1:97:1c:74:0e:f3:9a:f9:73:04:cd:3d:9b:a7:b7:c1:
f4:70:fa:de:87:91:1c:f0:09:b9:49:ce:29:5e:cf:b0:4f:da:
0d:31:1f:a9:99:db:de:ab:6f:94:a4:45:01:56:ab:05:6b:d7:
8f:8a:9b:83:96:0a:e7:dc:58:5f:d4:83:bd:bb:7f:cd:ac:c5:
db:1b:5c:c7:f1:22:06:47:ec:75:2f:2b:4d:65:f0:17:7c:7e:
ad:dc:29:19:67:a2:2f:34:4f:af:ab:39:6f:8d:63:ca:58:36:
63:a0:5f:4d:5a:14:39:97:37:31:27:3f:8c:12:3f:f3:14:26:
2b:47:f5:6c:55:b3:e2:a9:49:cd:f2:b2:be:0f:57:0c:d1:79:
e8:e9:1a:88:5d:c1:8c:90:5d:b6:91:ff:a6:3c:b9:df:0a:a2:
74:8c:4d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:12:45 2025 by rpki-client