Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
File: TDfyfrSZezvvnygmajlpQFD-dPk.mft (raw, json)
Hash identifier: yE10XiKF5nd4SwVwZ1uJA049kgzFXcO4Lo14hNazp14=
Subject key identifier: 27:83:60:D9:06:55:90:B1:F8:02:0E:B1:DB:CC:96:47:35:24:D8:59
Authority key identifier: 4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
Certificate issuer: /CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Certificate serial: 0198D4A781F8BA4009F7E0F4017C6C36D26F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
Manifest number: 16A9
Signing time: Sat 23 Aug 2025 02:00:04 +0000
Manifest this update: Sat 23 Aug 2025 02:00:04 +0000
Manifest next update: Sun 24 Aug 2025 02:00:04 +0000
Files and hashes: 1: O9nHfOl2QVEFkw8z5PZAG-bDmQE.roa (hash: CmUudjBRBoLhGNB6o4EaSfh+UkgJVlz+52jeWbtrV5A=)
2: SzyIBUJURbOXMTDJ4Z_haTgvNpI.roa (hash: wJIDwOiFxDwrE3GURrkhai8iWOYh1f3lI6qeGAaNPyc=)
3: TDfyfrSZezvvnygmajlpQFD-dPk.crl (hash: edqKn6q2cLLasoXPh5BR1hqQ3rrTyHGH6nQDEVUZ1iY=)
4: UVW-IEFCCq7ahpPdj9WY7Kn8QqE.roa (hash: MZl++GgZA3uWjf7S8QTsOZZtzVITuzAAAAPegKRXupI=)
5: VIrZrIPn5JgwIWuerakwG37U7jA.roa (hash: +9EBlzR1H7BphSJTPeOlUDa4YDh16MokR5NsBCSFTMs=)
6: dQ4y2x688XsG8rEL7o8Sp4uIl8M.roa (hash: LuvxH8ju8nmShoj6OHN3o8s0V6hBxEddqrv3+BFDAgQ=)
7: gQDaBeXH0szJXrJTEvqe4lIGCV4.roa (hash: fhlImZ1nrh4i7H6LIP2R5ZbAmjbxd5MHcou/l4C25qU=)
8: lPoIPYo1ITlq-R71JXKfxiC_US0.roa (hash: 1ODRbC1wRix1ieOTK6Ku3fYNq0UfGPEvF5Esjd3aqDM=)
9: luug-CwXmvS54qQ88cgMGt-f5zU.roa (hash: HAfj14rHhfvfAv/i1MqUIJYZwmFczeoc01ZA/poLVk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:81:f8:ba:40:09:f7:e0:f4:01:7c:6c:36:d2:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Validity
Not Before: Aug 23 02:00:04 2025 GMT
Not After : Aug 24 02:00:04 2025 GMT
Subject: CN=278360d9065590b1f8020eb1dbcc96473524d859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:09:bf:71:4d:73:fc:cc:8f:83:42:c6:92:1c:
a3:0a:0b:9f:bf:30:33:96:7b:15:c1:ee:56:2f:e3:
a4:a2:1e:98:6b:32:a5:a7:ac:cd:42:7a:61:7c:57:
f6:de:ee:8e:88:ad:54:99:2e:4b:21:c2:25:a8:f0:
9f:99:df:ac:3d:63:57:55:75:09:70:0a:6d:00:76:
09:93:7e:3a:ec:88:b9:d4:7c:1e:bb:60:f8:f0:3b:
cf:e7:65:15:9b:cf:e0:67:f6:cc:47:33:57:43:f2:
8e:98:cd:64:77:b4:c5:06:a2:36:c2:a2:a7:d9:cb:
20:09:1b:1c:24:ba:1c:00:5e:ca:4c:a0:2d:b1:d6:
52:57:16:9d:9d:aa:f5:82:f9:4f:aa:e6:ca:61:88:
bc:cc:6d:50:9b:da:7f:6c:5b:9b:d0:29:cf:b9:0b:
b6:f1:b1:67:05:70:a9:e0:79:a7:56:fe:62:bf:26:
45:14:b5:8d:9a:90:2f:3d:66:45:6c:b9:b5:0d:c2:
f5:07:87:06:d9:30:38:36:26:b7:a8:2d:bd:b0:5b:
58:d4:f5:eb:cb:2f:be:fc:f1:79:d4:fa:cd:c2:07:
34:a6:53:81:3b:c1:0d:d3:56:ee:87:85:39:aa:78:
7f:ac:d9:1c:b8:89:cf:c3:d1:00:91:cf:52:fb:96:
69:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:83:60:D9:06:55:90:B1:F8:02:0E:B1:DB:CC:96:47:35:24:D8:59
X509v3 Authority Key Identifier:
keyid:4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:28:35:89:f9:72:99:0a:19:3b:7f:30:98:8b:d2:e6:f3:f4:
5d:92:77:90:e9:2a:ee:b0:9b:8e:29:b3:8f:9c:27:49:21:ea:
1b:48:39:8b:1f:96:a2:4e:36:4c:ea:6f:d1:ae:42:11:e6:94:
cb:2f:38:04:bc:a2:20:96:73:f9:5c:b9:b4:59:47:bf:da:f6:
dc:17:e6:b9:af:1f:6d:1c:58:93:88:75:28:03:c7:6b:63:a8:
0b:0c:16:b1:e1:5f:36:31:ad:e0:6b:94:33:b2:42:77:71:0d:
a9:18:a4:cc:5f:8e:7c:a1:4f:03:62:4d:db:14:6a:1e:90:37:
16:b6:cd:2d:f7:b1:8a:95:11:95:05:2c:df:4f:97:27:9c:b5:
e8:ca:20:d5:d5:26:f9:3c:62:ca:9e:8e:0d:1e:95:00:cb:12:
33:19:3c:1b:5d:54:7b:a1:a1:16:1d:68:8f:38:e9:a6:c0:0e:
7a:30:80:ea:4a:86:d4:75:e8:e9:5d:b6:2c:78:0a:a7:4c:23:
03:0e:22:47:0f:5d:6a:08:79:50:66:1b:76:66:b7:af:ce:6a:
68:38:70:17:63:e7:a4:53:d6:51:d5:20:a5:86:c9:03:23:e5:
0e:24:90:f2:31:65:d2:36:2d:27:83:d6:08:e0:f9:0b:30:58:
c6:fa:94:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:21:27 2025 by rpki-client