Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft
File: Tds9zfXmvuCYJcN787i98otvtZM.mft (raw, json)
Hash identifier: NQgf+8oDqcvQNZqHW2zjw4ZNR4n9sL/y/Jf7kYoM0+w=
Subject key identifier: F6:F9:43:EA:2F:6F:A7:54:C0:8C:67:1D:52:FA:31:E2:CA:81:45:6A
Authority key identifier: 4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93
Certificate issuer: /CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593
Certificate serial: 0198402B94D4AA51F5193E30A80E61FE1011
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft
Manifest number: 160A
Signing time: Fri 25 Jul 2025 06:00:54 +0000
Manifest this update: Fri 25 Jul 2025 06:00:54 +0000
Manifest next update: Sat 26 Jul 2025 06:00:54 +0000
Files and hashes: 1: 0sw1E1wRwNZ2s8OGh-xzhwKQQrs.roa (hash: B8ClOCRaPbbry5Tpq6ngr90gsPdgXxRHJPf4KXsBcWg=)
2: 3wToZwYlYJhmj7mm8PpwNtnWHVk.roa (hash: O8XdzrDLKhZRvl13MXXTR1JiyTE2ZlieoyWEJ7nOUTA=)
3: 46uAO_7C_hVEQvZIAiRuYmh3QSo.roa (hash: MFUM6s6M1weGqv2Xn6LhhIWodXnFo4p8KwKjPUo7OXo=)
4: 4imq6_MMpyIjPy7JyGjrhcoftH4.roa (hash: htblR8fOEERQI20b0BNRdDO8FoijKodXH42ZRIpJlTM=)
5: BhB4QRUPoERbo_tuXIOvKFT5tus.roa (hash: asfvJzhTCTkNeMXKQv12QThiuP/0k3pLDDHOuHxC3r4=)
6: Ed42cA-zlGSxziIawQwcb1FDX08.roa (hash: 4F2FvV2Cc4LfdAZdtq/lrpCkvJIef6bPoCHs44x1OVQ=)
7: FFPDMHJ-Jqx3kk-gvkD1qDp-v9k.roa (hash: Ymsup5BEwzDp7E2mJg5hRNMRIrzKpWGEglwuk0pdV74=)
8: Tds9zfXmvuCYJcN787i98otvtZM.crl (hash: mG8gw7AloSSu4psaOs6id9yO0jRuahFXRNkkZZY7m7k=)
9: Tw0TTktdyzp0HyCOraKp8Ikm9Zw.roa (hash: z4UO2288Zpke2+cJIS0jIR44dlwwS+r5fy09OgwTYzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:40:2b:94:d4:aa:51:f5:19:3e:30:a8:0e:61:fe:10:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593
Validity
Not Before: Jul 25 06:00:54 2025 GMT
Not After : Jul 26 06:00:54 2025 GMT
Subject: CN=f6f943ea2f6fa754c08c671d52fa31e2ca81456a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:55:33:fd:b2:01:08:90:61:fe:25:f0:7b:93:
fe:fc:1f:71:9b:14:ec:37:c9:95:f2:7c:94:34:a1:
ce:a9:a9:65:af:e9:66:c2:66:3f:7c:41:15:be:33:
4f:4f:ed:66:7a:2a:40:b0:6f:96:8c:42:ca:1b:3e:
e6:87:3b:c0:e9:98:6e:27:9f:d4:9e:f7:39:ad:2f:
f4:d3:0c:5f:7d:67:1f:8c:50:5c:f6:b9:45:e9:94:
29:46:76:01:f6:1c:e8:3e:54:1b:17:16:bd:48:01:
fc:96:b9:ef:32:49:88:32:07:40:86:60:b5:29:6a:
06:a1:55:93:79:74:c7:59:bc:ec:13:a1:01:36:91:
fa:58:48:07:31:a2:d2:4c:4e:15:01:cf:eb:43:44:
e0:07:0e:18:b1:e1:4a:0a:59:f7:b1:e6:f4:c3:ad:
f4:e9:ad:e2:27:e1:21:16:84:26:4e:d9:17:f5:94:
a9:3e:b0:3b:ca:34:38:ee:80:19:3e:c7:02:5b:6d:
d3:24:fa:cd:94:35:04:85:a2:2b:e3:be:4b:8a:bb:
7b:c2:e2:f8:f5:4f:aa:55:9d:5f:37:34:9a:1a:ed:
63:32:49:a2:95:08:89:49:33:91:d7:6c:ed:3f:f7:
a2:0c:32:c0:aa:ed:05:bb:3a:ea:d2:c0:1e:bf:6d:
59:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F9:43:EA:2F:6F:A7:54:C0:8C:67:1D:52:FA:31:E2:CA:81:45:6A
X509v3 Authority Key Identifier:
keyid:4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:dc:48:65:64:af:1e:98:62:15:bb:97:43:18:49:ce:25:bd:
d8:f7:e9:4b:db:15:cb:ac:30:b7:c6:d4:fe:b9:d9:d4:2f:2d:
17:a2:81:6f:22:6f:c4:3b:e4:08:0e:d2:cc:16:88:70:1c:8b:
27:0c:1e:5d:40:bf:fa:06:e3:0e:99:e1:44:56:6e:17:93:80:
98:b4:9c:94:fe:57:9b:b5:c3:f5:d9:67:3a:2e:88:56:65:99:
10:db:36:0a:0f:7c:07:16:d8:f1:e2:d1:59:d2:2d:3a:56:27:
9e:98:61:8d:79:86:3a:b8:63:3b:33:ff:34:85:50:94:6a:9a:
4e:74:6b:dc:6a:5b:a5:88:da:c2:10:1d:b6:06:93:53:73:7e:
f2:7b:77:9d:e8:47:41:bc:6c:c4:8b:8c:1a:5e:cb:1f:58:7e:
0f:c4:6a:7b:d0:05:ca:f1:64:c7:fb:bd:c0:ff:71:55:ce:13:
12:02:5e:68:c1:de:56:0f:92:28:ab:29:38:b6:fa:08:94:b1:
53:d4:72:8f:ed:a1:a5:6a:7b:51:d7:1f:7f:4b:a9:41:1e:1f:
05:2f:51:98:63:b1:72:50:af:7c:a6:27:a7:39:83:bb:0a:09:
93:31:f4:67:0a:e7:2b:e8:6a:ec:5d:e4:53:13:49:43:69:8d:
53:af:c6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 13:09:58 2025 by rpki-client