Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft
File: Tds9zfXmvuCYJcN787i98otvtZM.mft (raw, json)
Hash identifier: KFw7ytBh94fiK1jOso7nQPhuFkpoL1yo+Ly1g9ys7lw=
Subject key identifier: FD:B3:C3:26:EB:5E:A8:61:FC:E0:C6:FD:A8:23:CA:26:B3:55:BE:5B
Authority key identifier: 4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93
Certificate issuer: /CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593
Certificate serial: 01988B45CA6EDC3113B4D789EBBCDDEC485C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft
Manifest number: 1635
Signing time: Fri 08 Aug 2025 20:01:03 +0000
Manifest this update: Fri 08 Aug 2025 20:01:03 +0000
Manifest next update: Sat 09 Aug 2025 20:01:03 +0000
Files and hashes: 1: 3wToZwYlYJhmj7mm8PpwNtnWHVk.roa (hash: O8XdzrDLKhZRvl13MXXTR1JiyTE2ZlieoyWEJ7nOUTA=)
2: 46uAO_7C_hVEQvZIAiRuYmh3QSo.roa (hash: MFUM6s6M1weGqv2Xn6LhhIWodXnFo4p8KwKjPUo7OXo=)
3: 4imq6_MMpyIjPy7JyGjrhcoftH4.roa (hash: htblR8fOEERQI20b0BNRdDO8FoijKodXH42ZRIpJlTM=)
4: BhB4QRUPoERbo_tuXIOvKFT5tus.roa (hash: asfvJzhTCTkNeMXKQv12QThiuP/0k3pLDDHOuHxC3r4=)
5: FFPDMHJ-Jqx3kk-gvkD1qDp-v9k.roa (hash: Ymsup5BEwzDp7E2mJg5hRNMRIrzKpWGEglwuk0pdV74=)
6: Tds9zfXmvuCYJcN787i98otvtZM.crl (hash: Lnhmuqau2e7rVpN8yvYgXHbTQY1Tum+6GUCMtnl+o5U=)
7: Tw0TTktdyzp0HyCOraKp8Ikm9Zw.roa (hash: z4UO2288Zpke2+cJIS0jIR44dlwwS+r5fy09OgwTYzs=)
8: Y7zkYH7Aw7PVsj10RPb-MkdugUk.roa (hash: o+fhjuQlK8kmiCnbZvXdSlpO05Hoo31DLBlRx7EaZLM=)
9: h90uqc_De15c5RcLX88cwk7dD8c.roa (hash: o2sSFjPuw1OAEBfBb9Dp1k2BsAtNCgsonI20CxguO14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:45:ca:6e:dc:31:13:b4:d7:89:eb:bc:dd:ec:48:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593
Validity
Not Before: Aug 8 20:01:03 2025 GMT
Not After : Aug 9 20:01:03 2025 GMT
Subject: CN=fdb3c326eb5ea861fce0c6fda823ca26b355be5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:93:98:7d:6d:17:8c:17:b6:ad:94:03:ec:4b:
1b:3f:e7:76:bd:a5:f2:6e:0e:dc:e7:65:75:5d:1a:
11:df:c2:31:24:de:bb:fd:b7:d3:ff:c5:fc:f6:0e:
2c:8a:37:ca:71:de:20:ba:7c:08:b9:16:57:49:6c:
91:71:7b:a6:ba:c1:96:54:0b:0c:cf:0d:88:3f:44:
02:bc:fe:1a:45:ec:a5:d2:62:33:43:fc:8c:22:b1:
e8:29:45:b1:46:7f:9a:88:ae:c3:05:b5:91:9c:3a:
d6:d1:8e:54:b6:65:18:c5:96:46:95:f0:85:f5:09:
6b:2c:8e:6d:a8:9e:ec:80:ef:ba:6b:90:8a:90:dd:
26:29:bd:bf:4e:50:17:b3:da:f7:9a:5b:7d:b0:2b:
58:b0:f8:14:e2:7e:0d:02:0b:51:ca:9b:4f:3c:d9:
7f:b8:07:3f:f2:93:20:68:a8:15:15:53:29:0d:12:
a6:1d:15:ca:3a:90:26:02:aa:78:54:a7:9a:fb:e8:
32:6f:02:ac:da:b5:30:46:75:c7:79:91:e0:dc:62:
92:07:32:b9:6c:5e:ba:d3:27:07:24:5d:f8:00:d9:
36:21:c4:27:4e:f7:a8:f7:f2:6f:b0:93:3a:e9:00:
f6:bf:33:c2:bc:14:70:06:c1:f6:d1:d2:6e:ef:b4:
07:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B3:C3:26:EB:5E:A8:61:FC:E0:C6:FD:A8:23:CA:26:B3:55:BE:5B
X509v3 Authority Key Identifier:
keyid:4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:8f:e1:15:17:2f:e8:ae:0b:51:47:b0:17:b2:83:9a:db:0e:
99:2e:27:fc:c9:cc:97:5d:74:2b:8a:97:13:20:92:b9:14:2e:
f7:5b:46:58:5e:ae:b8:22:88:b1:55:45:69:cf:74:82:b8:29:
4c:fb:8a:e8:bb:74:f0:7b:a0:80:0e:46:32:eb:b9:67:86:dc:
55:e4:b2:b0:22:82:89:ac:6c:52:ad:28:2d:11:6b:05:a3:d1:
b5:1b:9f:6e:99:19:fc:fd:1f:0e:04:47:f0:9b:73:d0:d7:d9:
d8:ab:37:e5:80:c4:6d:24:49:e2:59:9c:f4:aa:31:80:eb:0d:
ee:6c:2e:39:06:5d:df:5b:cd:45:34:0f:ce:88:f2:dd:7a:f3:
41:01:0b:45:a6:43:bc:e6:8b:a6:cc:81:2c:8a:20:24:01:cb:
ad:cf:7e:b9:8c:a6:80:7d:45:06:82:ab:8d:cb:35:ba:3d:2e:
fe:b0:e7:c9:c4:0c:8c:d1:30:f0:2e:52:de:d9:66:ba:65:e6:
97:c7:ce:82:7d:83:2c:a3:5e:3d:c5:a1:f4:15:64:0c:fa:f5:
8d:95:f5:02:1f:77:bc:98:95:0b:42:e2:6f:34:3d:03:a0:00:
5e:7b:ad:18:ad:65:1e:80:17:bf:e6:73:fc:d1:b7:4d:dd:5c:
b5:9c:ca:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:44:55 2025 by rpki-client