Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
File: TDfyfrSZezvvnygmajlpQFD-dPk.mft (raw, json)
Hash identifier: ECmhN3M4z263n0AJhUAX9kb/0bc+NAjw3e/CsezIIFo=
Subject key identifier: 97:66:85:B4:55:E1:42:32:A7:80:29:92:31:07:A1:29:5A:7A:36:67
Authority key identifier: 4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
Certificate issuer: /CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Certificate serial: 0197BAB430D83024F51EFE5A7D5F06F57852
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
Manifest number: 1617
Signing time: Sun 29 Jun 2025 08:01:00 +0000
Manifest this update: Sun 29 Jun 2025 08:01:00 +0000
Manifest next update: Mon 30 Jun 2025 08:01:00 +0000
Files and hashes: 1: O9nHfOl2QVEFkw8z5PZAG-bDmQE.roa (hash: CmUudjBRBoLhGNB6o4EaSfh+UkgJVlz+52jeWbtrV5A=)
2: SzyIBUJURbOXMTDJ4Z_haTgvNpI.roa (hash: wJIDwOiFxDwrE3GURrkhai8iWOYh1f3lI6qeGAaNPyc=)
3: TDfyfrSZezvvnygmajlpQFD-dPk.crl (hash: gTa8HWhBF4WhDdy32NvxhpsCMeFSLI+ZBcQVVc0eAMY=)
4: UVW-IEFCCq7ahpPdj9WY7Kn8QqE.roa (hash: MZl++GgZA3uWjf7S8QTsOZZtzVITuzAAAAPegKRXupI=)
5: VIrZrIPn5JgwIWuerakwG37U7jA.roa (hash: +9EBlzR1H7BphSJTPeOlUDa4YDh16MokR5NsBCSFTMs=)
6: dQ4y2x688XsG8rEL7o8Sp4uIl8M.roa (hash: LuvxH8ju8nmShoj6OHN3o8s0V6hBxEddqrv3+BFDAgQ=)
7: gQDaBeXH0szJXrJTEvqe4lIGCV4.roa (hash: fhlImZ1nrh4i7H6LIP2R5ZbAmjbxd5MHcou/l4C25qU=)
8: lPoIPYo1ITlq-R71JXKfxiC_US0.roa (hash: 1ODRbC1wRix1ieOTK6Ku3fYNq0UfGPEvF5Esjd3aqDM=)
9: luug-CwXmvS54qQ88cgMGt-f5zU.roa (hash: HAfj14rHhfvfAv/i1MqUIJYZwmFczeoc01ZA/poLVk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:b4:30:d8:30:24:f5:1e:fe:5a:7d:5f:06:f5:78:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Validity
Not Before: Jun 29 08:01:00 2025 GMT
Not After : Jun 30 08:01:00 2025 GMT
Subject: CN=976685b455e14232a78029923107a1295a7a3667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:07:99:cd:9d:02:4d:b1:7d:73:47:36:fc:1e:
29:89:72:fd:39:59:f9:4c:55:0c:3a:8e:d6:75:3d:
17:f8:d6:d4:25:69:d2:e7:d5:55:7e:0e:08:b8:97:
45:21:d4:83:6a:77:54:5b:ba:8a:3f:ec:9a:11:ec:
cd:d2:6d:5c:f8:22:13:43:83:73:d8:a3:a4:77:6f:
fc:ab:62:51:df:4f:5a:a8:a4:a3:45:63:ad:a5:f8:
96:dc:fc:e0:bd:d2:96:77:7a:6b:11:b3:4d:60:ed:
b3:fd:07:ba:25:de:5c:47:84:35:7f:51:2e:6f:b0:
a8:62:42:69:5f:8d:0c:dc:5f:28:d8:2c:93:45:5e:
0b:86:7a:3c:d2:c7:a9:3d:53:4a:10:bb:50:57:8f:
1d:c4:8a:83:58:d5:a5:4c:7e:55:4e:49:21:be:ec:
fb:61:e4:e8:db:07:58:28:62:60:cb:19:ec:97:08:
3c:08:61:67:4d:83:96:24:a5:89:15:20:16:a1:dc:
97:62:2b:cc:ac:57:56:0d:71:17:76:c8:2a:9f:72:
3e:18:9b:11:56:96:3e:32:c8:9d:52:a5:96:6e:41:
7f:17:64:ed:8c:28:5b:9a:61:c9:3d:64:77:01:d2:
96:a1:c5:ad:d5:05:f0:69:7a:65:54:1b:c8:51:6a:
93:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:66:85:B4:55:E1:42:32:A7:80:29:92:31:07:A1:29:5A:7A:36:67
X509v3 Authority Key Identifier:
keyid:4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ce:22:40:5f:10:b9:5d:ac:ac:84:f2:e8:dd:20:0a:07:fc:
78:4e:49:10:b9:54:9a:43:ce:a6:03:29:47:bc:32:a5:ff:ca:
20:ef:f6:60:76:82:73:f5:55:7f:24:b3:73:c9:58:96:8b:4d:
67:73:1b:a3:99:9b:05:e4:97:89:7f:76:db:d6:4d:ec:7c:4a:
24:3a:f4:3a:6a:80:22:dd:2d:cb:3c:9a:e9:e0:0d:b2:02:d6:
ab:b2:de:28:05:57:1e:51:8b:30:5d:eb:18:4b:3d:af:00:61:
e1:77:e1:86:12:07:fd:c2:6f:d5:9f:f1:95:82:20:03:85:db:
7b:dd:69:85:06:61:73:4d:0c:05:ea:b5:6d:04:fe:ef:25:31:
70:28:9a:d1:63:44:b3:1f:3f:8e:5f:7d:4f:1a:89:3e:a9:64:
49:5d:1a:94:87:7d:54:66:52:12:38:3b:53:b1:ec:8f:b2:81:
6c:93:74:8e:a4:d6:10:1d:d5:83:2e:8d:c2:6f:5d:f7:27:69:
66:1b:c3:9e:94:72:33:0b:9d:61:53:be:fc:9d:df:66:59:4b:
a4:41:d0:d9:6c:09:37:9d:b8:f9:d5:65:37:d7:88:03:18:11:
99:03:7b:55:11:ec:f0:fc:49:95:78:63:aa:3f:3d:6a:89:d1:
88:55:b3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:28:36 2025 by rpki-client