Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.mft
File: tdh_3Ccq4Fhhh4bnQXB1V79OGjM.mft (raw, json)
Hash identifier: qbSFO7TUgst6XD5K5wpQql+pNFQQtWS5hkb/7obD5dg=
Subject key identifier: 50:14:F2:AC:05:68:1A:FD:CD:3E:23:74:DD:85:13:BA:49:98:5B:15
Authority key identifier: B5:D8:7F:DC:27:2A:E0:58:61:87:86:E7:41:70:75:57:BF:4E:1A:33
Certificate issuer: /CN=b5d87fdc272ae058618786e741707557bf4e1a33
Certificate serial: 0197B8212BFE4FAB57C1E69263D3F92BB238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.mft
Manifest number: 0351
Signing time: Sat 28 Jun 2025 20:01:11 +0000
Manifest this update: Sat 28 Jun 2025 20:01:11 +0000
Manifest next update: Sun 29 Jun 2025 20:01:11 +0000
Files and hashes: 1: qQy9nbutIB840i93Gc6Vw1Yt6lA.roa (hash: 65g5a8+QhFyUXfSxWzLsMCFvk+W/xMxKhOR8kW2aeMw=)
2: tdh_3Ccq4Fhhh4bnQXB1V79OGjM.crl (hash: yRd0zheRpTKV0/8O5gOtMkPeVkWg6QWAZ80yTNqqbm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:2b:fe:4f:ab:57:c1:e6:92:63:d3:f9:2b:b2:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5d87fdc272ae058618786e741707557bf4e1a33
Validity
Not Before: Jun 28 20:01:11 2025 GMT
Not After : Jun 29 20:01:11 2025 GMT
Subject: CN=5014f2ac05681afdcd3e2374dd8513ba49985b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e6:79:08:02:03:8c:bd:b6:6e:e6:cc:3f:5b:
4a:9f:e1:9a:48:43:5a:3e:a8:ec:44:96:46:0c:33:
9b:92:b9:da:53:77:6a:e8:fd:a2:b2:9a:5e:b4:31:
66:4f:f7:cd:9c:8d:7f:53:33:b3:41:b8:56:47:eb:
a3:0e:bd:c0:e9:de:e8:85:5c:22:3c:10:b5:a6:fe:
1a:53:e3:b1:b9:5c:b9:1c:c1:57:6b:72:d3:b2:90:
dc:3b:5f:9d:15:9f:84:28:9f:6d:04:04:34:5b:35:
af:65:b7:30:d6:39:75:85:9e:90:54:d7:a0:96:06:
0f:42:d3:00:4a:e0:38:53:87:40:77:36:6c:f7:85:
c2:fb:8d:2f:ce:3e:d7:e8:04:a6:d0:bb:ce:d9:47:
a6:0b:5f:6f:a9:78:4c:a8:19:49:42:5f:cd:a5:27:
42:cd:7e:d0:d3:17:a9:3e:d8:43:04:42:b5:dd:e3:
53:c0:56:97:dc:9b:b6:93:5d:c9:be:bd:9a:3e:12:
e8:5c:fd:2c:db:ab:de:f0:56:4a:44:9a:6a:a2:d8:
ee:8a:f3:b5:c5:20:db:6c:71:42:15:0d:bb:54:46:
5a:83:7d:96:fa:32:b0:ec:aa:15:8e:52:8c:b7:af:
3e:b8:fa:80:19:5e:9c:62:b0:bd:53:df:60:63:b4:
f4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:14:F2:AC:05:68:1A:FD:CD:3E:23:74:DD:85:13:BA:49:98:5B:15
X509v3 Authority Key Identifier:
keyid:B5:D8:7F:DC:27:2A:E0:58:61:87:86:E7:41:70:75:57:BF:4E:1A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:70:0d:db:dd:3d:fd:5b:b2:a7:8d:af:54:6e:ab:94:e2:14:
5e:9e:1a:d9:d3:b9:20:8c:59:9c:19:04:33:57:f6:14:89:94:
27:f4:75:6c:c1:92:86:be:5c:88:9f:d4:4c:50:cf:09:75:0a:
4d:d8:a6:85:7b:90:41:1a:ad:b5:98:df:bf:18:f6:0f:79:1a:
11:8a:49:b1:70:92:91:3a:45:26:56:72:ee:09:7b:e8:9a:fd:
9e:9a:c5:0a:ac:f3:a6:9b:13:51:82:ef:8f:33:b1:13:96:dd:
80:fd:d1:a5:ca:09:10:1e:36:83:fe:79:e0:a7:2c:57:a0:f4:
9b:f5:7e:71:07:bc:65:1d:71:bc:d3:d3:10:86:c9:7f:98:3a:
b0:fe:69:8f:0f:c8:1b:1f:e8:46:9b:eb:b2:1e:f5:22:af:ce:
e6:5f:a8:5b:36:3c:81:69:a7:4b:9c:58:bc:86:78:73:77:17:
16:35:97:62:b9:03:a5:30:b9:94:fd:d5:e0:95:00:fc:b6:d3:
a6:0b:6f:3b:8d:af:55:af:47:69:dc:6f:43:6e:9a:7b:0d:77:
69:8b:bb:c3:06:82:97:52:cb:f2:cb:f8:56:f4:25:d4:34:90:
fc:04:73:6e:4b:87:49:06:d3:d3:e5:29:f5:a3:6d:b3:8c:47:
29:f4:82:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4ISv+T6tXweaSY9P5K7I4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1ZDg3ZmRjMjcyYWUwNTg2MTg3ODZlNzQxNzA3NTU3YmY0
ZTFhMzMwHhcNMjUwNjI4MjAwMTExWhcNMjUwNjI5MjAwMTExWjAzMTEwLwYDVQQD
Eyg1MDE0ZjJhYzA1NjgxYWZkY2QzZTIzNzRkZDg1MTNiYTQ5OTg1YjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeZ5CAIDjL22bubMP1tKn+GaSENa
PqjsRJZGDDObkrnaU3dq6P2isppetDFmT/fNnI1/UzOzQbhWR+ujDr3A6d7ohVwi
PBC1pv4aU+OxuVy5HMFXa3LTspDcO1+dFZ+EKJ9tBAQ0WzWvZbcw1jl1hZ6QVNeg
lgYPQtMASuA4U4dAdzZs94XC+40vzj7X6ASm0LvO2UemC19vqXhMqBlJQl/NpSdC
zX7Q0xepPthDBEK13eNTwFaX3Ju2k13Jvr2aPhLoXP0s26ve8FZKRJpqotjuivO1
xSDbbHFCFQ27VEZag32W+jKw7KoVjlKMt68+uPqAGV6cYrC9U99gY7T0/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFAU8qwFaBr9zT4jdN2FE7pJmFsVMB8GA1UdIwQY
MBaAFLXYf9wnKuBYYYeG50FwdVe/ThozMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGRoXzNDY3E0RmhoaDRiblFYQjFWNzlPR2pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC82NzBiMTAtMTBlYi00NzZmLTg0ZWYt
MTU2ZWRhMmI1NWI2LzEvdGRoXzNDY3E0RmhoaDRiblFYQjFWNzlPR2pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC82NzBiMTAtMTBlYi00NzZmLTg0ZWYtMTU2ZWRhMmI1NWI2
LzEvdGRoXzNDY3E0RmhoaDRiblFYQjFWNzlPR2pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhXAN2909
/Vuyp42vVG6rlOIUXp4a2dO5IIxZnBkEM1f2FImUJ/R1bMGShr5ciJ/UTFDPCXUK
TdimhXuQQRqttZjfvxj2D3kaEYpJsXCSkTpFJlZy7gl76Jr9nprFCqzzppsTUYLv
jzOxE5bdgP3RpcoJEB42g/554KcsV6D0m/V+cQe8ZR1xvNPTEIbJf5g6sP5pjw/I
Gx/oRpvrsh71Iq/O5l+oWzY8gWmnS5xYvIZ4c3cXFjWXYrkDpTC5lP3V4JUA/LbT
pgtvO42vVa9HadxvQ26aew13aYu7wwaCl1LL8sv4VvQl1DSQ/ARzbkuHSQbT0+Up
9aNts4xHKfSCnw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:08:21 2025 by rpki-client