Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
File: TDfyfrSZezvvnygmajlpQFD-dPk.mft (raw, json)
Hash identifier: JeDCBBej7blqzX+o+tm1Qyk2vN36HqvPUI3Tk4LVjZw=
Subject key identifier: FA:E7:CF:C8:3C:44:4C:D2:05:26:53:13:97:96:06:20:0D:07:D4:E9
Authority key identifier: 4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
Certificate issuer: /CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Certificate serial: 01967454C58CE9FAE061DE5266824F9CD3E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
Manifest number: 156E
Signing time: Sat 26 Apr 2025 23:00:34 +0000
Manifest this update: Sat 26 Apr 2025 23:00:34 +0000
Manifest next update: Sun 27 Apr 2025 23:00:34 +0000
Files and hashes: 1: O9nHfOl2QVEFkw8z5PZAG-bDmQE.roa (hash: CmUudjBRBoLhGNB6o4EaSfh+UkgJVlz+52jeWbtrV5A=)
2: SzyIBUJURbOXMTDJ4Z_haTgvNpI.roa (hash: wJIDwOiFxDwrE3GURrkhai8iWOYh1f3lI6qeGAaNPyc=)
3: TDfyfrSZezvvnygmajlpQFD-dPk.crl (hash: EVm/BgrjSsO8b7WiqU3yrwDUSOcp2Zi3AdTRgsEZQ7c=)
4: UVW-IEFCCq7ahpPdj9WY7Kn8QqE.roa (hash: MZl++GgZA3uWjf7S8QTsOZZtzVITuzAAAAPegKRXupI=)
5: VIrZrIPn5JgwIWuerakwG37U7jA.roa (hash: +9EBlzR1H7BphSJTPeOlUDa4YDh16MokR5NsBCSFTMs=)
6: dQ4y2x688XsG8rEL7o8Sp4uIl8M.roa (hash: LuvxH8ju8nmShoj6OHN3o8s0V6hBxEddqrv3+BFDAgQ=)
7: gQDaBeXH0szJXrJTEvqe4lIGCV4.roa (hash: fhlImZ1nrh4i7H6LIP2R5ZbAmjbxd5MHcou/l4C25qU=)
8: lPoIPYo1ITlq-R71JXKfxiC_US0.roa (hash: 1ODRbC1wRix1ieOTK6Ku3fYNq0UfGPEvF5Esjd3aqDM=)
9: luug-CwXmvS54qQ88cgMGt-f5zU.roa (hash: HAfj14rHhfvfAv/i1MqUIJYZwmFczeoc01ZA/poLVk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:54:c5:8c:e9:fa:e0:61:de:52:66:82:4f:9c:d3:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Validity
Not Before: Apr 26 23:00:34 2025 GMT
Not After : Apr 27 23:00:34 2025 GMT
Subject: CN=fae7cfc83c444cd205265313979606200d07d4e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d7:64:dd:e4:0e:25:c4:f8:a5:6e:a3:7a:3e:
58:57:63:02:11:b7:20:5f:68:7c:09:30:8d:4c:90:
ff:7c:b8:5c:65:f4:af:c9:27:a7:97:f3:2b:d3:a8:
6a:de:25:a4:32:77:b4:e6:d5:88:13:20:3d:83:ee:
15:35:26:65:59:bc:75:1e:8d:23:c6:79:a1:bb:0e:
1b:92:32:6d:ad:16:ff:03:5e:89:31:d3:a1:d2:3c:
95:dc:e0:fe:56:57:34:2c:d9:fa:5f:94:5f:af:f9:
a6:73:47:aa:64:64:ed:57:b7:61:02:be:90:61:c6:
6e:b6:c4:17:17:09:67:a9:fb:ea:45:20:b7:dc:c1:
e1:a5:32:05:e0:2b:d8:3e:7f:12:02:85:17:22:8a:
4d:57:92:70:06:60:1b:21:7b:ca:38:1c:d1:f3:90:
1e:38:67:43:88:98:29:0a:2e:f7:03:8c:ae:24:c4:
76:fe:d4:aa:78:23:c1:7f:9b:29:ae:1f:e5:04:b8:
51:a8:be:54:84:89:87:cc:b0:44:a8:91:71:fe:d1:
d6:61:b6:99:be:e1:9b:a2:79:df:03:cd:74:aa:e2:
fd:a4:fa:15:7d:49:b8:62:04:df:f8:9d:74:80:73:
8d:c9:33:ad:71:08:35:8c:96:e4:55:6c:d1:be:16:
bc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E7:CF:C8:3C:44:4C:D2:05:26:53:13:97:96:06:20:0D:07:D4:E9
X509v3 Authority Key Identifier:
keyid:4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:1f:1c:32:fe:89:65:75:5f:9d:c1:c7:b0:93:e4:a7:1c:f7:
76:5f:b9:b2:e1:68:fa:81:4a:32:1a:df:a5:57:08:90:9a:5e:
d8:93:ec:7b:da:49:98:e3:ca:5d:0d:a9:fe:93:55:09:3a:88:
f2:0e:de:3d:8d:aa:ff:d0:6c:65:1a:91:94:8b:d0:c9:b4:73:
7a:40:42:c9:c2:c0:64:87:84:0c:4f:31:5d:ab:55:93:76:a4:
b1:da:a6:2b:77:11:f3:eb:33:b8:41:d2:97:d6:ac:59:55:84:
33:55:eb:aa:46:2c:b7:cf:bd:23:76:2a:35:20:1c:8d:72:20:
4c:a8:df:bc:42:10:e7:6d:5f:e0:67:f1:d2:32:11:2f:9f:77:
0d:e8:be:68:94:c2:49:69:83:35:f4:ea:e3:53:bd:25:2e:17:
f0:85:25:8e:21:bb:67:cb:49:c7:f3:1f:2c:b7:a7:11:08:e0:
a3:87:4a:bb:24:d0:0f:ca:9a:d6:5a:41:f0:d9:26:8a:63:86:
68:6a:95:92:c4:85:23:cc:c1:b9:8d:30:cb:92:5a:a1:8b:d9:
bd:b7:3f:18:0c:75:64:b8:59:25:1a:b0:97:c3:a7:84:45:d3:
ca:16:7e:33:00:05:81:02:31:73:31:4e:c8:36:49:e7:e6:3e:
6e:0e:2b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:38:34 2025 by rpki-client