Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft
File: Tds9zfXmvuCYJcN787i98otvtZM.mft (raw, json)
Hash identifier: zkpoNFIe+HXtk/u8tnn/xZGYFd5cRzylFaf5BIEuoTA=
Subject key identifier: 55:3C:9C:A4:F9:16:8C:2A:5F:E5:72:D2:61:03:75:12:17:91:ED:2F
Authority key identifier: 4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93
Certificate issuer: /CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593
Certificate serial: 0197B857AF5C46B633DC5FA1896F7764C2C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft
Manifest number: 15C1
Signing time: Sat 28 Jun 2025 21:00:43 +0000
Manifest this update: Sat 28 Jun 2025 21:00:43 +0000
Manifest next update: Sun 29 Jun 2025 21:00:43 +0000
Files and hashes: 1: 3wToZwYlYJhmj7mm8PpwNtnWHVk.roa (hash: O8XdzrDLKhZRvl13MXXTR1JiyTE2ZlieoyWEJ7nOUTA=)
2: 46uAO_7C_hVEQvZIAiRuYmh3QSo.roa (hash: MFUM6s6M1weGqv2Xn6LhhIWodXnFo4p8KwKjPUo7OXo=)
3: 4imq6_MMpyIjPy7JyGjrhcoftH4.roa (hash: htblR8fOEERQI20b0BNRdDO8FoijKodXH42ZRIpJlTM=)
4: 4mGseaRg6egaG3HIgmeDQNxN1fE.roa (hash: FljGcaDpbXdbXqPdJOkNLnFoXkPv5nApI4xvVtBOm2M=)
5: BhB4QRUPoERbo_tuXIOvKFT5tus.roa (hash: asfvJzhTCTkNeMXKQv12QThiuP/0k3pLDDHOuHxC3r4=)
6: C8n9SA-vtMnKteRpcg33EeLCkBY.roa (hash: dcgbkPREY7h1gJcsZMkjYfTiY5mWG7OMCifA9QvuodY=)
7: Tds9zfXmvuCYJcN787i98otvtZM.crl (hash: 18PQUF2F48oss4ZG81S+a6JcBTdvP5Tc+r/ZuW14bbc=)
8: Tw0TTktdyzp0HyCOraKp8Ikm9Zw.roa (hash: z4UO2288Zpke2+cJIS0jIR44dlwwS+r5fy09OgwTYzs=)
9: xMtiBvCdtWdpBztykMPhn-kY_9s.roa (hash: GpBtwdAknau8bMjJICf5aFSnmGTM0dxBI9Qhq4iCudQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:57:af:5c:46:b6:33:dc:5f:a1:89:6f:77:64:c2:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593
Validity
Not Before: Jun 28 21:00:43 2025 GMT
Not After : Jun 29 21:00:43 2025 GMT
Subject: CN=553c9ca4f9168c2a5fe572d2610375121791ed2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b2:ad:bb:7e:66:0e:88:90:98:fd:ad:33:cb:
71:45:a5:5e:20:c8:b5:7f:78:eb:5d:e4:27:e1:be:
6c:2f:85:49:f6:13:65:b1:da:af:2e:67:0f:b1:b0:
e4:fa:63:9a:7c:ff:18:81:33:ac:a1:74:1d:91:4e:
bc:48:e1:cb:00:56:25:b4:7c:dc:2a:9b:54:9f:a8:
a1:69:bb:6f:69:d4:d2:91:04:aa:6a:9b:4a:36:6b:
27:54:9c:4d:02:11:84:8e:c8:04:3e:e8:bc:18:32:
db:3b:90:a9:36:2e:3c:12:20:7c:65:96:b2:1b:cd:
cd:8e:0c:0f:3a:08:a7:4b:bf:ad:83:38:1f:c1:89:
47:8e:a9:bf:2d:27:87:cb:8c:a8:ba:a5:68:4e:76:
df:af:d3:d6:b2:93:fd:37:74:13:6d:82:dc:ec:77:
c4:18:1f:d8:c5:94:4a:74:42:1a:ad:fc:06:05:8f:
12:5d:03:7d:8d:1c:dd:ed:47:e1:71:58:d4:de:82:
d2:22:25:f2:f9:18:99:66:e7:2f:03:e9:46:7d:f1:
23:fb:e7:3d:c3:28:4a:b2:73:57:0c:c5:ea:a5:19:
ec:35:80:7b:0d:34:f0:82:09:99:f3:c7:3e:9c:5b:
36:29:98:89:1b:eb:07:a9:d3:c7:e5:af:4a:51:2c:
56:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:3C:9C:A4:F9:16:8C:2A:5F:E5:72:D2:61:03:75:12:17:91:ED:2F
X509v3 Authority Key Identifier:
keyid:4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:36:a4:c1:ea:f5:86:3e:05:89:bb:3f:11:13:c6:78:52:79:
a4:57:fd:a4:e5:ae:34:63:b5:f6:a9:db:f8:39:f2:c3:ff:aa:
61:b4:78:b9:d7:c6:35:8a:5a:0d:60:ca:a3:c1:97:5e:50:fd:
48:84:7b:c7:0e:ab:9d:6e:18:9a:2f:9d:d2:34:b3:dd:0d:c4:
46:6f:65:3e:c8:16:9a:5e:f9:5c:cb:d9:a0:82:ad:8b:0f:d1:
40:78:b8:1a:26:91:80:c8:e6:43:c9:ce:f9:93:d6:61:83:a4:
ee:8c:71:97:97:93:24:06:80:61:98:c4:05:15:f9:ec:bd:99:
e7:2a:09:8c:48:b6:9e:de:79:9e:67:17:1d:f6:61:ba:ee:95:
de:c4:47:6a:78:ef:96:02:37:b2:b3:b4:0f:ae:cb:23:a2:55:
4b:60:be:a5:79:7b:db:e1:92:73:f0:9a:13:cf:d1:b8:f2:4d:
f0:01:a5:45:17:20:72:96:e8:5e:00:f3:8f:ad:c5:96:74:9d:
d2:fe:8c:e7:b9:f4:da:92:e2:2b:bc:31:1b:89:7a:c4:76:39:
59:fd:cb:64:15:af:f3:51:46:ea:60:7b:15:e3:c2:ad:da:45:
15:0b:1e:e7:b4:bc:b0:97:64:08:90:78:4c:01:df:f8:e9:c6:
31:be:5c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:28:43 2025 by rpki-client