Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
File: TQreVMJ-b83aziYsT995DzIP7Zw.mft (raw, json)
Hash identifier: Vp0Wo4aSkz2u1Fte9Ko+ptcjV78pNfFlJtd/F+hsGBo=
Subject key identifier: D2:77:F9:0B:A8:6A:C8:DA:97:DC:72:1A:0F:36:66:37:2A:74:6F:9E
Authority key identifier: 4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C
Certificate issuer: /CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
Certificate serial: 019849D3318FC7399656FBCC163BEBF2626C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
Manifest number: 1608
Signing time: Sun 27 Jul 2025 03:00:34 +0000
Manifest this update: Sun 27 Jul 2025 03:00:34 +0000
Manifest next update: Mon 28 Jul 2025 03:00:34 +0000
Files and hashes: 1: 93DmKZhPP6C3A8rfNYLNAOSD7nY.roa (hash: dt3s4SYU1dR+fLajxJTR3/3GKKVmv0f+WTIVOmO+2as=)
2: A1lFiDlkwzd2kuuHtwLxrVifjIM.roa (hash: bheq6y6BKOc+FBTnE7aA9p7E54SloHCzl+8cgE33f9o=)
3: TQreVMJ-b83aziYsT995DzIP7Zw.crl (hash: jhPqEc+CErY8v8LsRutDpV8pvJKwGHAZqTXhlLFoQCQ=)
4: UD9G2KurtNeaAxJdizQiQcSD0uc.roa (hash: Es9ToT28+rspmgTLqxqTlnHgsgNlKjrlO13bAnzcF2g=)
5: XDIQZzxZW5-uUuoXNVfYPGALZY8.roa (hash: xZyhu94HluR+zrM/qfXRNVxIfS3klNJwNP/Gh4p7kNE=)
6: cYs_upIMBFM1qTzwqySxwaPDCLc.roa (hash: xI0Q9MYkvDP8hv/SnI33zJTsy3M/0ZO4tON1nbaFCD4=)
7: jk-_IfFTaD-MzFizpWx0AA1TkH4.roa (hash: wezPiSGoo0rul4hPDHDdcRTaZb8xQPAVvKZ9GBZZNU8=)
8: luOuJQnFXQhNggwM6MUJDK19PDQ.roa (hash: yd7LbwhPMHWjUutNzr3ySSl/LTeLlprMji5U1R9GXsM=)
9: mmpsKeeO5JUD0kNNB4aUsbfsoEs.roa (hash: mRAg2xOUvTrNMtJyTqYFatxVEZidyGOVjXZ4XpUtMSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:31:8f:c7:39:96:56:fb:cc:16:3b:eb:f2:62:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
Validity
Not Before: Jul 27 03:00:34 2025 GMT
Not After : Jul 28 03:00:34 2025 GMT
Subject: CN=d277f90ba86ac8da97dc721a0f3666372a746f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2d:f3:8a:b8:a8:d1:60:89:5f:33:d3:8d:92:
d6:ae:20:e6:42:72:aa:bc:ca:da:49:92:50:c8:36:
fa:46:38:d6:99:62:f1:44:e1:21:25:fc:78:75:f2:
58:a6:ee:70:38:f7:69:e8:4f:30:b6:82:57:de:35:
bb:45:7c:db:ff:4d:04:e9:03:bf:87:ca:1c:04:f2:
d6:19:cd:3f:b2:e8:71:9c:59:64:37:47:67:1c:d2:
11:34:a7:bc:90:51:f1:e2:18:b7:ae:7a:b6:1f:4a:
01:f9:9a:b7:ae:d2:ce:32:40:b7:df:3c:9d:1b:d4:
08:4c:7b:33:40:6a:6a:bc:55:68:1e:d1:67:ae:c5:
c4:4d:23:bb:2c:75:e3:a1:67:d9:dc:20:4d:d0:e2:
7b:04:ac:db:0f:c3:c4:a8:fa:05:7b:45:ac:a0:3e:
76:79:0a:6a:36:71:28:c7:95:72:ed:eb:f7:4e:b4:
64:74:16:cc:28:50:47:5d:ef:c2:32:1d:1b:3e:39:
0f:b9:f7:97:33:5c:8e:0f:2a:b5:f2:4f:b4:f9:c8:
73:4b:61:52:5a:ef:13:b3:51:b8:4a:48:8f:53:31:
0f:96:be:89:50:76:cb:68:bb:ac:2b:5d:77:aa:bc:
4a:2a:ed:69:3d:af:c5:8f:21:f8:7b:c9:10:16:ff:
8a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:77:F9:0B:A8:6A:C8:DA:97:DC:72:1A:0F:36:66:37:2A:74:6F:9E
X509v3 Authority Key Identifier:
keyid:4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:cd:22:f4:aa:79:cb:d9:08:c1:40:04:55:36:8c:27:0a:51:
2f:bb:39:06:d3:5f:e7:cc:1f:1c:75:40:54:ee:66:a8:b5:22:
3b:22:34:11:e9:69:04:f8:bd:a6:c9:09:92:bd:d6:d4:fc:1f:
4e:22:22:b7:5e:e3:7d:ca:da:af:6c:0d:56:6c:19:69:a4:48:
44:0c:f5:7d:49:fa:dd:b5:b8:95:7e:01:27:6e:fb:35:12:8b:
fc:b6:2d:dc:16:ea:e2:07:b4:ab:c2:e2:c5:51:ed:5d:89:c8:
f7:ab:82:d2:22:c6:e9:67:49:d2:38:a6:67:36:61:6c:48:4f:
07:89:b6:44:f5:68:32:22:a7:42:ca:63:fa:39:e4:9e:ad:33:
e8:26:ff:73:69:0b:86:a0:0a:7c:ad:14:b1:ed:2d:17:dd:6d:
d8:38:d2:d5:1b:91:7f:fa:9c:92:a7:1c:b2:c5:a3:c8:c2:6e:
41:fc:2e:93:0f:42:de:69:3a:dc:fa:02:92:b1:45:a4:81:89:
b0:da:1b:d7:92:92:bd:11:cd:7d:98:f2:5f:ec:b4:2b:24:71:
23:d3:01:5c:5e:52:f6:96:23:07:07:22:3d:05:bf:c2:80:e0:
b3:31:ab:38:db:9e:8d:b5:39:45:f2:17:18:29:02:08:ce:0f:
95:21:d0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:03:34 2025 by rpki-client