Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
File: TDfyfrSZezvvnygmajlpQFD-dPk.mft (raw, json)
Hash identifier: 39RnXfIIQ9DS2OuVv7fLINaJQ50p04T2JvR1FPT5YvE=
Subject key identifier: 01:7E:8A:F0:38:0C:04:9E:A3:1E:83:45:68:DB:4D:0C:4A:E5:B8:38
Authority key identifier: 4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
Certificate issuer: /CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Certificate serial: 019879E4000850A78A3555F575111EDCE991
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
Manifest number: 167A
Signing time: Tue 05 Aug 2025 11:00:41 +0000
Manifest this update: Tue 05 Aug 2025 11:00:41 +0000
Manifest next update: Wed 06 Aug 2025 11:00:41 +0000
Files and hashes: 1: O9nHfOl2QVEFkw8z5PZAG-bDmQE.roa (hash: CmUudjBRBoLhGNB6o4EaSfh+UkgJVlz+52jeWbtrV5A=)
2: SzyIBUJURbOXMTDJ4Z_haTgvNpI.roa (hash: wJIDwOiFxDwrE3GURrkhai8iWOYh1f3lI6qeGAaNPyc=)
3: TDfyfrSZezvvnygmajlpQFD-dPk.crl (hash: 4CzZdJPNLt064ii340pPtGXNRj31qVAIOKUmvMEH4sc=)
4: UVW-IEFCCq7ahpPdj9WY7Kn8QqE.roa (hash: MZl++GgZA3uWjf7S8QTsOZZtzVITuzAAAAPegKRXupI=)
5: VIrZrIPn5JgwIWuerakwG37U7jA.roa (hash: +9EBlzR1H7BphSJTPeOlUDa4YDh16MokR5NsBCSFTMs=)
6: dQ4y2x688XsG8rEL7o8Sp4uIl8M.roa (hash: LuvxH8ju8nmShoj6OHN3o8s0V6hBxEddqrv3+BFDAgQ=)
7: gQDaBeXH0szJXrJTEvqe4lIGCV4.roa (hash: fhlImZ1nrh4i7H6LIP2R5ZbAmjbxd5MHcou/l4C25qU=)
8: lPoIPYo1ITlq-R71JXKfxiC_US0.roa (hash: 1ODRbC1wRix1ieOTK6Ku3fYNq0UfGPEvF5Esjd3aqDM=)
9: luug-CwXmvS54qQ88cgMGt-f5zU.roa (hash: HAfj14rHhfvfAv/i1MqUIJYZwmFczeoc01ZA/poLVk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 11:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:e4:00:08:50:a7:8a:35:55:f5:75:11:1e:dc:e9:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Validity
Not Before: Aug 5 11:00:41 2025 GMT
Not After : Aug 6 11:00:41 2025 GMT
Subject: CN=017e8af0380c049ea31e834568db4d0c4ae5b838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:42:4f:9d:92:da:85:7b:22:52:53:ae:9b:dc:
af:ea:d0:42:f2:56:07:04:69:64:69:8f:8d:0f:09:
de:7f:47:ef:39:24:4b:39:eb:af:08:17:cf:1e:9b:
38:bb:f3:37:b9:1e:b7:83:06:23:b5:6e:21:83:30:
9b:26:19:8b:2b:69:1d:b2:6e:c3:54:7c:2f:eb:b4:
01:6c:7e:c0:01:82:d5:6d:39:8d:41:e8:1b:d1:32:
74:bd:4b:a1:05:92:f5:83:f3:82:54:54:1f:af:4b:
78:ff:bb:6b:0a:d7:89:87:8b:bd:76:1f:53:0e:2b:
f9:11:7d:27:65:25:40:51:38:5f:7d:6f:bc:30:ec:
dc:ff:a4:26:bc:38:72:4d:18:e7:37:cb:3c:64:fe:
bf:97:49:23:fa:a3:9e:11:97:c3:30:9d:e2:34:8f:
57:f9:66:39:5a:0e:52:a3:3c:96:55:0a:89:1d:47:
85:07:bf:cc:81:a7:6b:dc:6b:b3:98:ce:ec:ed:23:
59:66:ea:a9:96:f9:3b:8f:c2:97:ba:90:58:2f:d9:
b3:aa:f5:07:c0:0e:f0:f8:79:c8:31:b1:f9:ed:8f:
93:a2:0f:4b:b7:4b:71:ad:c8:96:64:86:61:7d:33:
37:2c:80:ab:2c:48:58:22:28:fb:ab:61:ec:71:21:
f3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:7E:8A:F0:38:0C:04:9E:A3:1E:83:45:68:DB:4D:0C:4A:E5:B8:38
X509v3 Authority Key Identifier:
keyid:4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:d4:89:ee:ce:89:70:f1:fe:cd:d0:c7:a4:76:84:3a:11:78:
88:c2:33:b1:6f:65:c1:a5:f1:c3:53:5d:3d:a2:69:31:3b:30:
d2:31:da:82:d5:7f:87:f5:8b:66:fb:b5:36:16:57:40:a8:73:
3c:a3:4a:b0:46:40:c2:61:dc:c0:16:e1:2c:03:6f:cc:f0:4a:
4e:c6:ec:56:3e:73:d8:8a:d8:a3:33:72:bc:8f:8d:c1:b2:c5:
d2:eb:0b:0b:13:11:3e:90:fd:2a:25:9e:a6:a1:ec:a1:39:a6:
36:8a:e3:bf:30:75:97:b3:e4:44:ee:de:0c:35:ad:1b:95:24:
97:66:9a:43:99:0a:17:36:fe:62:53:3f:a5:d5:12:4f:fe:3d:
c2:6d:e4:9a:2b:8d:10:77:19:88:2b:70:d2:66:99:c6:4d:26:
a4:d5:fa:b7:22:37:6b:b5:5f:8a:0d:25:0f:40:d3:d4:a0:52:
5d:cd:2f:58:10:57:bf:66:91:9b:e3:c4:dd:0d:cd:34:70:5e:
0c:33:05:9e:58:5f:3d:db:75:74:04:17:23:50:3b:29:76:f5:
be:f5:ff:b3:8a:be:9f:1f:57:bc:47:73:c2:04:83:74:1c:a2:
c8:88:22:38:50:8e:40:9a:cb:69:85:f3:7e:87:ef:ce:15:f5:
ba:ea:10:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:21:42 2025 by rpki-client