Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
File: TDfyfrSZezvvnygmajlpQFD-dPk.mft (raw, json)
Hash identifier: EX2Cp/mdEGINv14KtEWt+NlihugLHotMHEYG8hFP66A=
Subject key identifier: BD:5F:2E:77:AE:2D:E3:99:DC:D9:32:E1:05:1A:C3:8B:0F:61:22:D8
Authority key identifier: 4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
Certificate issuer: /CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Certificate serial: 01976D746D65B5010F09085A33307332B937
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
Manifest number: 15EF
Signing time: Sat 14 Jun 2025 08:00:36 +0000
Manifest this update: Sat 14 Jun 2025 08:00:36 +0000
Manifest next update: Sun 15 Jun 2025 08:00:36 +0000
Files and hashes: 1: O9nHfOl2QVEFkw8z5PZAG-bDmQE.roa (hash: CmUudjBRBoLhGNB6o4EaSfh+UkgJVlz+52jeWbtrV5A=)
2: SzyIBUJURbOXMTDJ4Z_haTgvNpI.roa (hash: wJIDwOiFxDwrE3GURrkhai8iWOYh1f3lI6qeGAaNPyc=)
3: TDfyfrSZezvvnygmajlpQFD-dPk.crl (hash: gjRUZN0Ds/1bcRjiDN9tK2J8sqnxjRnj9QIiCQ78MO8=)
4: UVW-IEFCCq7ahpPdj9WY7Kn8QqE.roa (hash: MZl++GgZA3uWjf7S8QTsOZZtzVITuzAAAAPegKRXupI=)
5: VIrZrIPn5JgwIWuerakwG37U7jA.roa (hash: +9EBlzR1H7BphSJTPeOlUDa4YDh16MokR5NsBCSFTMs=)
6: dQ4y2x688XsG8rEL7o8Sp4uIl8M.roa (hash: LuvxH8ju8nmShoj6OHN3o8s0V6hBxEddqrv3+BFDAgQ=)
7: gQDaBeXH0szJXrJTEvqe4lIGCV4.roa (hash: fhlImZ1nrh4i7H6LIP2R5ZbAmjbxd5MHcou/l4C25qU=)
8: lPoIPYo1ITlq-R71JXKfxiC_US0.roa (hash: 1ODRbC1wRix1ieOTK6Ku3fYNq0UfGPEvF5Esjd3aqDM=)
9: luug-CwXmvS54qQ88cgMGt-f5zU.roa (hash: HAfj14rHhfvfAv/i1MqUIJYZwmFczeoc01ZA/poLVk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:6d:65:b5:01:0f:09:08:5a:33:30:73:32:b9:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Validity
Not Before: Jun 14 08:00:36 2025 GMT
Not After : Jun 15 08:00:36 2025 GMT
Subject: CN=bd5f2e77ae2de399dcd932e1051ac38b0f6122d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fb:58:d1:1e:fe:75:d2:0b:35:be:62:10:32:
80:e7:c3:88:ff:82:78:08:7d:d2:73:11:ff:27:7c:
10:af:27:c2:9a:c0:76:6c:bf:aa:4c:cc:7c:1c:77:
d7:74:68:97:a5:a8:15:00:f0:97:cf:71:52:9c:6e:
f6:af:14:3d:57:e7:58:c0:fd:67:2c:a6:a8:92:91:
05:32:e7:9c:de:d2:22:82:40:bd:85:43:5b:fc:19:
1a:3a:7e:b8:94:cb:0a:bb:11:3f:61:31:a2:3d:62:
97:d6:4b:0c:c6:17:7a:3b:0d:8a:9e:8a:49:91:a2:
a6:30:2f:87:37:15:be:ea:a1:99:54:0a:1f:c8:3a:
37:80:64:93:37:4d:4f:82:69:ee:74:b8:b5:55:47:
88:19:8e:18:69:de:af:54:b7:a4:c3:42:27:8f:50:
b0:ad:dc:61:ae:35:49:7c:5c:43:e8:12:f3:08:06:
ab:71:02:18:64:51:49:4c:34:1f:f2:0d:0a:24:8d:
9d:65:2d:4b:01:ca:6b:67:1b:1c:c1:55:60:14:65:
a0:13:e2:b6:98:fb:e5:95:9d:d1:6a:54:71:c8:8f:
fd:0c:19:5b:7a:e3:21:a1:83:e9:fa:33:f6:26:f6:
61:5b:11:be:03:36:26:a6:5a:63:29:d1:0e:14:7e:
08:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:5F:2E:77:AE:2D:E3:99:DC:D9:32:E1:05:1A:C3:8B:0F:61:22:D8
X509v3 Authority Key Identifier:
keyid:4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:c4:37:40:93:36:20:ed:fa:95:42:57:41:d1:24:10:ac:e1:
cb:d9:e4:9e:7e:f1:e1:9f:47:6e:d5:0e:f4:d9:08:93:f0:16:
d6:96:13:23:2a:f0:24:e4:80:a7:8d:b8:ab:1e:81:0a:dc:03:
8b:28:15:a6:4c:56:2f:50:23:98:7d:20:6a:8a:3e:41:09:8e:
22:5b:e3:55:dd:7f:83:7f:22:06:b8:14:1d:af:91:e4:d5:c2:
f3:d0:e4:6d:d8:3b:f2:87:51:42:6d:75:73:be:6d:d0:84:4a:
15:04:46:56:16:d9:82:2e:de:45:a1:e1:41:7a:d5:29:97:12:
d6:b0:45:62:f7:05:a1:f6:4f:88:a0:ef:e6:74:ee:9f:b6:1a:
59:8e:b7:d5:be:41:1a:6b:59:8d:49:0f:b5:f4:1c:e6:5d:02:
79:f8:ff:ef:7a:af:d6:75:4b:be:d5:09:e2:18:2d:03:1b:94:
cc:ee:e0:f5:fb:a0:5a:5a:d0:00:e6:1b:d4:3f:b9:6e:4b:69:
e9:68:14:5e:cc:8e:80:91:79:30:2f:ca:50:28:a7:26:f2:cc:
d7:c5:b7:0f:cb:af:6e:ee:02:14:70:ea:6b:79:c1:50:93:2c:
e4:f4:7e:c3:15:80:c7:d0:7b:42:bc:17:6f:c6:58:21:07:4d:
8f:a7:dd:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:00:49 2025 by rpki-client