Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
File: TDfyfrSZezvvnygmajlpQFD-dPk.mft (raw, json)
Hash identifier: o92tIbHlSfbJ0d/AN1gJlV+mIhvL/h0Kd0yzjTyHCEM=
Subject key identifier: 56:98:67:D0:33:44:9A:1A:01:86:2B:58:1B:2D:01:40:B6:3B:5A:3A
Authority key identifier: 4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
Certificate issuer: /CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Certificate serial: 0199FE1001865BB37DF1B0BF3D5EE74A7311
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
Manifest number: 1743
Signing time: Sun 19 Oct 2025 20:01:25 +0000
Manifest this update: Sun 19 Oct 2025 20:01:25 +0000
Manifest next update: Mon 20 Oct 2025 20:01:25 +0000
Files and hashes: 1: O9nHfOl2QVEFkw8z5PZAG-bDmQE.roa (hash: CmUudjBRBoLhGNB6o4EaSfh+UkgJVlz+52jeWbtrV5A=)
2: SzyIBUJURbOXMTDJ4Z_haTgvNpI.roa (hash: wJIDwOiFxDwrE3GURrkhai8iWOYh1f3lI6qeGAaNPyc=)
3: TDfyfrSZezvvnygmajlpQFD-dPk.crl (hash: upBCAzqtoLiTmj4PelQ4b5Lil3Cdp5Na6pXEq1N1kqw=)
4: UVW-IEFCCq7ahpPdj9WY7Kn8QqE.roa (hash: MZl++GgZA3uWjf7S8QTsOZZtzVITuzAAAAPegKRXupI=)
5: VIrZrIPn5JgwIWuerakwG37U7jA.roa (hash: +9EBlzR1H7BphSJTPeOlUDa4YDh16MokR5NsBCSFTMs=)
6: dQ4y2x688XsG8rEL7o8Sp4uIl8M.roa (hash: LuvxH8ju8nmShoj6OHN3o8s0V6hBxEddqrv3+BFDAgQ=)
7: gQDaBeXH0szJXrJTEvqe4lIGCV4.roa (hash: fhlImZ1nrh4i7H6LIP2R5ZbAmjbxd5MHcou/l4C25qU=)
8: lPoIPYo1ITlq-R71JXKfxiC_US0.roa (hash: 1ODRbC1wRix1ieOTK6Ku3fYNq0UfGPEvF5Esjd3aqDM=)
9: luug-CwXmvS54qQ88cgMGt-f5zU.roa (hash: HAfj14rHhfvfAv/i1MqUIJYZwmFczeoc01ZA/poLVk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:01:86:5b:b3:7d:f1:b0:bf:3d:5e:e7:4a:73:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Validity
Not Before: Oct 19 20:01:25 2025 GMT
Not After : Oct 20 20:01:25 2025 GMT
Subject: CN=569867d033449a1a01862b581b2d0140b63b5a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:24:86:64:0d:62:3f:2e:45:2a:9f:21:37:d1:
b0:80:72:18:e2:51:a8:c2:c7:5a:3f:24:cb:31:ff:
83:48:ae:0e:57:eb:9c:19:a5:0b:60:ab:a1:ae:6f:
e5:e5:ec:e6:bd:56:c0:6a:17:8c:c7:14:f2:17:72:
8e:8d:df:94:59:ca:36:5c:8b:a4:f7:eb:55:37:25:
a4:d1:b4:67:d3:34:e4:ba:eb:14:11:80:76:36:a4:
37:0b:a5:86:e5:39:f6:a6:ad:81:cd:db:ea:03:98:
31:17:82:6b:c1:05:e8:5e:14:32:58:48:06:d8:58:
1b:31:c3:90:82:4e:67:ae:92:e5:e0:e6:02:91:68:
78:40:03:b9:d7:29:c2:b3:f1:ca:b1:57:3e:bb:7f:
23:4f:11:2a:7c:a5:70:be:58:3c:ed:98:9a:94:6c:
e3:2c:22:e6:6c:d0:b9:72:ae:f8:82:cf:5f:29:ed:
af:ca:75:74:e7:62:63:16:55:f8:fb:12:fa:2f:d4:
3a:1d:e8:bf:aa:20:24:5a:c2:9f:7a:ad:67:de:a4:
fe:99:a6:64:69:ce:b5:78:fe:1d:d4:eb:a1:f6:1f:
3a:a5:bd:c8:d1:a0:b5:43:1b:12:a3:dd:53:d3:ad:
2f:83:93:97:3a:8e:6a:e5:b2:4f:50:97:14:03:42:
be:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:98:67:D0:33:44:9A:1A:01:86:2B:58:1B:2D:01:40:B6:3B:5A:3A
X509v3 Authority Key Identifier:
keyid:4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:da:ab:a0:67:1d:a6:48:6c:94:64:9b:d7:4a:9d:c8:f4:f6:
fe:a9:93:4d:77:2b:25:a6:29:05:09:77:a8:c4:e3:c1:01:68:
c6:e5:d3:91:48:f4:34:c1:a4:0b:a9:bf:0a:cb:8c:86:54:55:
f3:89:63:34:3b:29:44:ac:61:f9:c5:f1:a0:7c:57:d7:d6:6b:
48:bb:ce:79:66:25:5b:ef:46:f5:46:be:68:52:86:56:4a:36:
c4:3b:c3:91:c0:0c:43:fc:0d:cf:2c:a0:a5:e4:4f:e3:f2:d4:
bd:3f:65:30:84:3f:d9:7b:21:03:96:32:1f:7d:ee:08:80:5f:
b4:24:00:f4:56:fd:80:29:5d:d7:f1:34:68:eb:d2:c8:c7:ea:
20:c5:cf:26:89:99:de:a4:09:49:87:22:26:22:0a:ab:a9:3f:
e7:6b:94:33:05:a2:2f:43:3a:f0:71:bc:69:ce:ee:81:94:bd:
65:49:f1:9c:06:26:6c:ed:72:c8:1d:da:f7:5c:91:1c:34:c6:
d9:f1:a3:7c:f8:66:16:7f:ae:54:ac:85:7b:53:84:1d:f3:43:
78:cd:4a:0a:1a:b6:a4:a5:d7:b0:a0:ed:c5:77:20:77:63:da:
26:33:c1:60:36:ae:d7:37:f4:35:e8:b2:8a:c0:b2:c8:10:06:
d0:7a:be:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:32:32 2025 by rpki-client