Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft
File: Tds9zfXmvuCYJcN787i98otvtZM.mft (raw, json)
Hash identifier: dmgyRh2VSY468M5aJaMX3DksgVycymCJLtQtGNZyUaE=
Subject key identifier: 03:93:0F:71:8F:32:69:F4:BA:75:C7:D0:43:B6:9E:EC:9C:C1:83:FF
Authority key identifier: 4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93
Certificate issuer: /CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593
Certificate serial: 0198D88467A653681E0BDCC1B92A9BB59F7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft
Manifest number: 165D
Signing time: Sat 23 Aug 2025 20:00:12 +0000
Manifest this update: Sat 23 Aug 2025 20:00:12 +0000
Manifest next update: Sun 24 Aug 2025 20:00:12 +0000
Files and hashes: 1: 3wToZwYlYJhmj7mm8PpwNtnWHVk.roa (hash: O8XdzrDLKhZRvl13MXXTR1JiyTE2ZlieoyWEJ7nOUTA=)
2: 46uAO_7C_hVEQvZIAiRuYmh3QSo.roa (hash: MFUM6s6M1weGqv2Xn6LhhIWodXnFo4p8KwKjPUo7OXo=)
3: 4imq6_MMpyIjPy7JyGjrhcoftH4.roa (hash: htblR8fOEERQI20b0BNRdDO8FoijKodXH42ZRIpJlTM=)
4: BhB4QRUPoERbo_tuXIOvKFT5tus.roa (hash: asfvJzhTCTkNeMXKQv12QThiuP/0k3pLDDHOuHxC3r4=)
5: FFPDMHJ-Jqx3kk-gvkD1qDp-v9k.roa (hash: Ymsup5BEwzDp7E2mJg5hRNMRIrzKpWGEglwuk0pdV74=)
6: Tds9zfXmvuCYJcN787i98otvtZM.crl (hash: 6i0tZY6kVF+RQse3XdlDM9Io/gQfa6WM5rxt5jitXHo=)
7: Tw0TTktdyzp0HyCOraKp8Ikm9Zw.roa (hash: z4UO2288Zpke2+cJIS0jIR44dlwwS+r5fy09OgwTYzs=)
8: Y7zkYH7Aw7PVsj10RPb-MkdugUk.roa (hash: o+fhjuQlK8kmiCnbZvXdSlpO05Hoo31DLBlRx7EaZLM=)
9: h90uqc_De15c5RcLX88cwk7dD8c.roa (hash: o2sSFjPuw1OAEBfBb9Dp1k2BsAtNCgsonI20CxguO14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:84:67:a6:53:68:1e:0b:dc:c1:b9:2a:9b:b5:9f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593
Validity
Not Before: Aug 23 20:00:12 2025 GMT
Not After : Aug 24 20:00:12 2025 GMT
Subject: CN=03930f718f3269f4ba75c7d043b69eec9cc183ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e1:db:f0:c8:7d:ed:d1:de:8c:bf:23:35:a4:
fe:07:c8:a9:6e:e6:1f:33:d7:84:c4:e8:cc:1c:9d:
1c:5d:36:4b:7b:e8:5e:62:6a:2c:ef:49:98:60:e5:
e6:ea:49:98:90:a4:36:bb:01:88:a2:06:c8:7c:c4:
39:bb:dd:81:0d:bc:0a:a8:39:d0:14:e2:99:d4:ac:
d6:2f:9c:c7:30:1a:2b:6d:63:ef:08:e1:fa:30:ba:
4a:0b:2f:83:33:49:73:6a:72:6a:1d:17:aa:97:2e:
04:ca:99:19:41:4f:8a:0c:a1:ab:52:30:b1:7d:3a:
f6:58:92:14:88:df:0a:ce:3a:47:bf:59:bb:36:dd:
d4:a4:af:b9:a7:1d:f4:40:83:c7:86:eb:a8:7a:fe:
ef:30:9f:ae:42:8d:13:5a:ce:dc:12:0e:c7:9d:15:
41:d3:1f:2c:f3:56:dc:72:ce:62:6e:c4:c8:26:ce:
27:a0:49:25:4c:67:6e:25:f7:d9:99:e9:1f:ca:63:
81:12:cd:d2:30:99:7e:a6:5b:c9:38:d2:82:3a:4c:
63:61:f7:52:a9:76:41:20:65:d4:4e:95:96:ad:4b:
18:88:24:43:ef:66:0d:38:aa:19:2f:9e:18:4a:85:
ba:43:34:3f:93:06:40:c2:15:ce:5f:c7:13:95:ea:
6d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:93:0F:71:8F:32:69:F4:BA:75:C7:D0:43:B6:9E:EC:9C:C1:83:FF
X509v3 Authority Key Identifier:
keyid:4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:17:b4:9b:50:dc:de:04:e5:9b:2c:97:80:96:bb:92:c2:d0:
93:05:e5:0d:c6:c0:0e:af:de:5d:9b:2b:7a:3a:70:cd:8d:71:
4a:57:0b:0f:39:b3:1d:15:21:c3:94:46:ae:96:d5:d0:df:e6:
ee:32:72:e8:95:b4:07:66:a4:5d:45:35:eb:cf:62:cf:49:df:
b8:c6:f0:f8:d1:66:7d:de:f6:88:58:bd:e6:01:31:b1:a9:fd:
94:e3:de:d9:78:b2:02:8d:40:ff:d2:5e:69:c1:56:be:5c:c3:
a3:a7:46:a8:b7:86:25:99:d0:dd:79:01:8c:98:00:04:2d:6e:
cd:ce:e4:eb:9f:4b:ac:5e:8a:a7:f4:eb:f2:94:9f:b5:97:ed:
81:b1:30:6e:5f:57:07:6c:14:ee:b2:36:da:0d:6b:32:a9:d9:
94:60:8a:cd:81:f2:e9:84:f7:2a:ff:e2:f6:f0:f2:ae:0d:78:
df:0d:8a:dd:42:d6:c1:dc:68:d1:e4:c9:4e:6b:d3:0f:fd:e4:
52:0a:af:ec:2e:df:d6:0b:e1:c0:46:88:a7:8b:75:51:1d:b0:
83:ee:89:e3:77:ff:95:fd:dd:41:e0:29:59:eb:40:3f:40:1b:
e2:ab:25:65:39:5c:5f:34:af:0e:a8:11:a2:4a:96:d2:24:f6:
a4:08:9d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:31:13 2025 by rpki-client