Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
File: TQreVMJ-b83aziYsT995DzIP7Zw.mft (raw, json)
Hash identifier: kDZFFxi8ad00G55LiZsOv3AuN3Gh6DOr+TGsvRgbjao=
Subject key identifier: 38:3D:5C:A8:78:D4:58:16:96:09:E8:1F:23:D7:8C:27:68:AD:4E:63
Authority key identifier: 4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C
Certificate issuer: /CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
Certificate serial: 0198D4E0F2DF2967E9F14EE1D5C08DF4E722
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 03:02:48 +0000
Manifest this update: Sat 23 Aug 2025 03:02:48 +0000
Manifest next update: Sun 24 Aug 2025 03:02:48 +0000
Files and hashes: 1: 93DmKZhPP6C3A8rfNYLNAOSD7nY.roa (hash: dt3s4SYU1dR+fLajxJTR3/3GKKVmv0f+WTIVOmO+2as=)
2: A1lFiDlkwzd2kuuHtwLxrVifjIM.roa (hash: bheq6y6BKOc+FBTnE7aA9p7E54SloHCzl+8cgE33f9o=)
3: TQreVMJ-b83aziYsT995DzIP7Zw.crl (hash: P7EGKbJC3BsL65405HrL6+E3hJnUtbwjqGi0RxeJHv0=)
4: UD9G2KurtNeaAxJdizQiQcSD0uc.roa (hash: Es9ToT28+rspmgTLqxqTlnHgsgNlKjrlO13bAnzcF2g=)
5: XDIQZzxZW5-uUuoXNVfYPGALZY8.roa (hash: xZyhu94HluR+zrM/qfXRNVxIfS3klNJwNP/Gh4p7kNE=)
6: cYs_upIMBFM1qTzwqySxwaPDCLc.roa (hash: xI0Q9MYkvDP8hv/SnI33zJTsy3M/0ZO4tON1nbaFCD4=)
7: jk-_IfFTaD-MzFizpWx0AA1TkH4.roa (hash: wezPiSGoo0rul4hPDHDdcRTaZb8xQPAVvKZ9GBZZNU8=)
8: luOuJQnFXQhNggwM6MUJDK19PDQ.roa (hash: yd7LbwhPMHWjUutNzr3ySSl/LTeLlprMji5U1R9GXsM=)
9: mmpsKeeO5JUD0kNNB4aUsbfsoEs.roa (hash: mRAg2xOUvTrNMtJyTqYFatxVEZidyGOVjXZ4XpUtMSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:f2:df:29:67:e9:f1:4e:e1:d5:c0:8d:f4:e7:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
Validity
Not Before: Aug 23 03:02:48 2025 GMT
Not After : Aug 24 03:02:48 2025 GMT
Subject: CN=383d5ca878d458169609e81f23d78c2768ad4e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4f:48:94:ef:14:77:e4:0b:a2:30:a3:67:a2:
5a:f3:c8:a6:64:d9:85:bb:a5:b0:1b:c1:6b:7c:87:
38:8a:11:69:fd:05:7e:ae:d4:b1:4e:a4:63:a8:1f:
c7:66:21:73:29:8d:1f:15:72:45:74:d2:1a:a1:2a:
26:84:cf:2a:b1:5b:6d:9d:90:82:75:d5:02:3d:53:
84:4a:8f:3b:90:c0:c6:c8:e7:22:b2:c6:8c:5c:20:
2c:92:f0:8b:54:ad:12:5e:d6:0c:ef:d1:43:85:65:
8d:73:5e:96:4e:c4:c6:84:62:3d:c5:19:2c:b1:da:
5a:eb:85:43:ab:57:91:6c:f6:28:36:eb:a6:f5:be:
ff:47:e2:8a:8b:b9:24:0d:7e:b9:38:ed:f7:19:5a:
08:b5:3f:11:65:6b:fd:c0:da:ad:d4:d9:d3:60:4c:
14:8b:b1:87:9a:43:c4:fa:eb:f4:ef:3b:e3:89:df:
b0:59:b3:dd:31:45:dd:f5:6e:c3:d8:e3:6e:87:73:
eb:25:ea:c5:6c:fc:28:5b:fe:a8:9d:ab:23:b7:f7:
e7:50:fc:6d:90:54:35:9a:3f:20:93:e2:4e:1d:e0:
27:06:23:20:46:07:46:5b:f0:89:43:7b:5f:59:5d:
d1:ba:0e:b9:1c:a5:fc:23:40:a4:8f:04:9a:54:3d:
72:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:3D:5C:A8:78:D4:58:16:96:09:E8:1F:23:D7:8C:27:68:AD:4E:63
X509v3 Authority Key Identifier:
keyid:4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a5:0c:48:85:e6:2c:5c:db:ab:e6:44:6d:48:10:6b:2c:5e:
4f:2d:d3:e3:7d:3e:e7:6a:63:07:0e:d0:be:c5:4a:a7:81:1f:
4f:d9:d7:48:53:e2:2f:31:24:d7:66:f1:c9:69:30:78:58:d0:
1e:4d:45:1d:73:9a:eb:8b:e2:a7:d6:6f:44:04:ad:ec:fe:14:
f8:5d:b3:c0:25:fd:2f:ab:8e:d9:0b:83:1d:9e:3d:05:2e:6a:
aa:18:9e:a3:f8:8b:83:43:d9:77:14:2c:02:36:3a:5e:98:cc:
94:5a:4a:18:06:e1:7f:81:21:2e:dc:76:9c:59:84:a5:a4:0b:
04:d1:bf:82:b8:2e:d3:3d:b8:43:ec:d3:f3:7c:85:2a:d4:81:
35:04:8a:3a:8c:11:29:9d:e3:1e:d6:3c:0a:a6:b3:25:2a:7f:
00:0d:38:b3:70:15:aa:9e:03:9c:ac:27:29:fa:4e:75:90:95:
49:f7:10:06:0f:3a:2e:fa:73:bf:fd:16:2f:cd:54:63:d2:48:
09:e9:14:f1:98:25:4a:6a:be:85:3f:e2:ba:29:1a:c7:a4:a5:
b1:bf:24:4c:6e:d1:8e:81:b4:00:07:8f:c5:2d:28:fa:c8:5e:
2e:4e:26:1a:82:03:97:4f:8d:fd:f3:eb:0c:de:08:76:3b:e6:
65:5f:83:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:55 2025 by rpki-client