Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
File: Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft (raw, json)
Hash identifier: y0f7+jBYgT2TrIyjsaW0WphW/RCR2k2ziGTcaugMgis=
Subject key identifier: 39:9B:60:92:5D:E8:71:AC:6E:BD:09:89:8C:DB:6A:4D:C1:3A:9B:FE
Authority key identifier: 4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
Certificate issuer: /CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Certificate serial: 01988EEC2E71F24F9AE7C80341673F52F412
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
Manifest number: 1684
Signing time: Sat 09 Aug 2025 13:01:39 +0000
Manifest this update: Sat 09 Aug 2025 13:01:39 +0000
Manifest next update: Sun 10 Aug 2025 13:01:39 +0000
Files and hashes: 1: 5kjETkXDgRN5AQgcYVTyCfHcaTs.roa (hash: bOiEMOwDVjt7cP9F2mzpRd1dgn6o9/86wmrWhaYcqlc=)
2: 77nHJ74F1fFAwUbmMeRLrxeDdWA.roa (hash: 2Mtt2AaUFR4ZOfRNdKyuPT3cj2EQ+qy46BQe2ut00YY=)
3: G7v3pCkQ6hmfhpbVxzOwUWwmzDY.roa (hash: nVHjBCeWZEPbhgav/+qfuSQLmW0a+8zRMZx9D7jY6PU=)
4: Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl (hash: /YZjdIhTEcg/9Tn3PKLPiFBr3Gy/6hz6aoZt0Nn1jI8=)
5: ZLnsYJrehSHy13eQaMRY1Tbep5I.roa (hash: beMY8QS7fWlkYI5VTaRGjskfF3hsi1HR7CrNo9yaWBM=)
6: jUW3uJuzvpMts6ZS_PpOE0-vHy4.roa (hash: QVsKQjI9Ob132etLfwnFEQDpraGA87DL9fvaD59Kiac=)
7: s2kaxqyHVyCTqaRomO4ohfBebsc.roa (hash: vuPF+RwNPBvTGLZXAOB0JJk86Umi+Vc+1JKtKmoQbqM=)
8: zImDYSLcloov9WzDzhBWGXc0A7I.roa (hash: veTCbJ+PnIb/PrMHjVaZ1OLBsy65AdbQAzVQVe/0HZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ec:2e:71:f2:4f:9a:e7:c8:03:41:67:3f:52:f4:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Validity
Not Before: Aug 9 13:01:39 2025 GMT
Not After : Aug 10 13:01:39 2025 GMT
Subject: CN=399b60925de871ac6ebd09898cdb6a4dc13a9bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:57:0c:d1:4c:d1:9e:91:36:33:61:3a:c2:bc:
93:2a:ee:76:a7:9d:8a:70:45:3a:e4:87:32:51:e3:
0d:29:be:52:b4:85:37:82:fa:a0:7d:83:83:a7:68:
b5:62:a0:de:dd:41:dd:47:ce:03:05:e3:4b:16:81:
b0:57:4f:ee:f7:58:88:5b:73:f3:2a:79:8c:ab:cd:
4b:a7:69:9a:19:bf:ae:59:bd:d6:d0:a5:2d:22:8d:
94:15:60:78:28:ea:0f:fc:6f:c0:df:e2:ee:2a:02:
b8:d5:c6:8a:21:5b:64:f1:64:17:b9:b9:67:15:71:
d1:b9:23:3f:d6:e8:8e:5b:fe:d2:d6:8e:46:6a:2d:
3b:f5:c2:86:d9:68:51:37:22:af:72:c2:9b:c7:6a:
cc:9d:92:5c:2a:bf:6b:21:9e:f0:24:99:b8:78:fd:
c7:a4:81:79:07:2d:9f:a5:b0:aa:c6:e5:bd:41:1d:
29:16:70:cb:2f:3a:2c:07:ba:7f:38:fa:eb:3c:4d:
2d:5c:b1:36:5e:cb:c4:3f:8f:be:e9:6f:fa:a8:21:
8f:38:92:80:84:86:0d:e6:38:55:2d:88:a5:b9:a0:
08:82:07:d7:b1:2a:e8:8c:d1:0e:04:e1:06:c3:96:
17:bd:36:d2:64:db:c7:80:1e:4d:b2:49:74:9c:61:
84:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:9B:60:92:5D:E8:71:AC:6E:BD:09:89:8C:DB:6A:4D:C1:3A:9B:FE
X509v3 Authority Key Identifier:
keyid:4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:fb:8e:69:ea:d6:9e:c3:15:25:f9:e5:5b:c4:15:ee:18:5e:
ca:73:ef:22:b8:fb:a1:5e:34:25:70:3b:7e:31:01:4f:c0:2e:
4d:f2:40:89:61:96:ea:04:73:a8:f8:66:a2:87:5b:ab:14:4e:
56:cf:12:0b:c7:f2:cc:01:fa:b5:cf:02:ba:c3:86:de:1c:51:
e7:3c:43:80:1d:7f:03:26:ca:14:34:b7:10:db:91:45:e2:95:
1b:00:a8:98:d3:c0:d5:ff:18:0b:47:09:5d:4c:71:42:ba:0b:
4c:b8:ac:7d:6e:d7:5c:6a:eb:bc:10:b5:bf:66:48:f4:8e:31:
c1:fc:9f:5b:0c:bb:9b:63:cc:c7:14:c2:ef:7e:65:e0:c0:51:
93:db:51:94:31:d7:66:98:8e:a3:9c:16:c5:03:eb:b5:98:60:
08:d5:5c:d1:84:7c:b6:28:cc:71:5f:60:fa:b9:0c:1e:83:c4:
c0:06:4b:eb:76:9a:06:bc:46:4f:5c:fe:00:71:e8:11:c1:21:
10:13:3c:2f:05:fd:8c:0d:e1:62:61:c4:dc:6b:5b:65:86:d4:
07:42:c2:8a:4d:68:76:15:da:14:6e:78:72:1a:10:0e:51:ad:
80:ba:95:51:ca:79:31:95:66:61:91:9d:32:8f:0b:7e:06:0e:
d3:a9:00:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:20:44 2025 by rpki-client