Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
File: TzYQM0T807V1ny2z88cHE3b54jM.mft (raw, json)
Hash identifier: yZA6VaQ4yt0v0dEueNtaRsjHS+Yp0qu0b+z7XjUR70s=
Subject key identifier: 2C:9A:8A:8E:21:4D:7D:D7:C3:7F:C6:68:C3:E7:67:F4:6C:1B:C2:F1
Authority key identifier: 4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
Certificate issuer: /CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Certificate serial: 0197B8210F37EDCBB09B89C2F9A07F5A56EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
Manifest number: 15A3
Signing time: Sat 28 Jun 2025 20:01:03 +0000
Manifest this update: Sat 28 Jun 2025 20:01:03 +0000
Manifest next update: Sun 29 Jun 2025 20:01:03 +0000
Files and hashes: 1: 8Wt50oYgSIhV5-nromefXM1xUHs.roa (hash: nonj7X6EJpkPkTZ26/d/JTxCuBr7E4OqIEl5kLX7Uvc=)
2: 8_cQRjzqzZHtBUadp-m1RHbfYtA.roa (hash: UqDtwYBpkHo94AcNyXlmGDGQI5vQH42VfJTVEsv7Dqg=)
3: LlXFwn2Cp-oz5_wkoV4hnOjpZhc.roa (hash: b+9t4WdjfYrQBYgVT5TU7qZAYZFFGjvTZY/AWbdEORo=)
4: TzYQM0T807V1ny2z88cHE3b54jM.crl (hash: 9wqY8Is2pSJ2iL5Z+DD1+5zBDei4nJn075BSc5gBOVc=)
5: X73zSfeynuQ2HFhZg92JJjuC-hI.roa (hash: S3jxFVJaRrRBYwj6SGNBku30PnQhyId+dYaYtS51gvo=)
6: qzzHZUBjcSRGFasL_IeeyUOUJ98.roa (hash: Lhbg0pCg1KfB+dSdb+vO645LuzkQlZQdXs3opMNsPwc=)
7: uFl9Jbyr6wsOz0RTyXyU1uLpiuQ.roa (hash: IIGP5wcOQKkgCwi0o8TwNvlGqyYDZZaNOwMVkOIQtWw=)
8: ugnRmlrkR8TJKKb_eVy88x5cRBU.roa (hash: wA1+l0+3DAminFs23I5vSPrzOSbWOqFz2PTbS6VlnsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:0f:37:ed:cb:b0:9b:89:c2:f9:a0:7f:5a:56:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Validity
Not Before: Jun 28 20:01:03 2025 GMT
Not After : Jun 29 20:01:03 2025 GMT
Subject: CN=2c9a8a8e214d7dd7c37fc668c3e767f46c1bc2f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b8:be:b2:ae:4b:44:92:28:02:6f:68:44:06:
cf:19:68:4c:be:bf:15:8b:74:15:42:fa:8d:cc:78:
af:8d:8d:0b:1f:f0:93:09:d6:5e:8b:af:91:bf:fe:
9f:3b:41:0b:89:93:60:10:57:4c:63:87:70:ef:84:
19:e5:ba:de:92:f9:d0:ad:de:04:69:5a:67:a1:26:
df:36:f1:5f:d4:b2:db:f9:8d:94:40:17:dc:33:40:
1a:41:f4:fc:75:4f:e5:9f:3c:59:f2:98:23:02:67:
34:22:8a:f2:8e:33:14:c6:96:59:01:7d:fd:4c:f5:
ee:ff:ec:84:4d:5c:ec:b4:17:d6:42:22:51:6d:81:
b2:0c:fc:1e:2b:d0:e0:6e:42:2e:6c:95:a8:20:30:
6f:2d:6b:d0:39:9b:ad:31:db:9d:70:ce:1a:8c:d5:
eb:f6:93:7e:89:c1:94:7f:e2:6d:46:bd:dd:58:08:
51:1d:5f:27:b6:b6:e2:46:5e:45:0f:f8:9f:c3:34:
a0:ee:c4:a7:ea:45:70:c8:24:b2:38:88:6b:90:ef:
dc:0e:28:94:0b:21:a3:2e:88:91:57:58:96:19:4b:
93:a5:92:94:7b:b2:dd:9e:19:17:01:e5:b3:5c:dc:
f8:48:18:9a:3e:f2:05:ac:b1:30:15:ce:2e:05:68:
48:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9A:8A:8E:21:4D:7D:D7:C3:7F:C6:68:C3:E7:67:F4:6C:1B:C2:F1
X509v3 Authority Key Identifier:
keyid:4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:48:5f:14:42:6f:19:76:95:03:cd:5e:28:d6:0d:a5:66:4e:
05:1f:3d:f7:de:90:8a:9e:09:b2:d1:97:a7:35:0d:72:0c:52:
67:32:9a:c4:78:b3:be:8c:d3:fe:01:42:72:eb:fc:4e:91:c7:
3d:c4:08:f2:41:5b:fe:d1:55:34:58:b4:e1:7c:c1:81:38:ea:
d8:a3:1b:bc:59:40:fd:70:fe:92:92:ac:d3:7a:f0:e6:d0:b6:
93:c6:91:b0:f1:63:d6:00:e2:8a:6a:a8:2c:52:78:53:d7:b8:
a9:09:62:5a:f7:47:44:e9:a3:58:69:cc:34:bc:0a:5d:2e:8b:
8a:23:a2:d5:de:a3:b0:0d:bd:87:ca:1b:f3:a2:d1:04:c9:4b:
65:a7:c0:a8:56:21:a5:2d:ae:42:a5:7c:5c:34:66:22:db:f8:
bd:3d:c3:b8:03:28:c4:c2:1c:50:ec:3a:f9:17:84:9c:6d:38:
a4:e1:21:85:d1:31:de:d7:3a:51:7a:9e:fb:aa:09:cd:aa:d8:
e3:e6:a4:b5:0c:eb:2b:a3:8a:64:0b:eb:e5:a6:91:8a:41:ef:
a9:ac:c9:40:f6:65:0b:a7:93:e7:b9:7a:40:c2:eb:84:2f:24:
a2:c5:e4:fe:a6:3c:84:0d:c4:b1:fe:60:04:32:05:d1:ef:ab:
c8:b9:2d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:24:44 2025 by rpki-client