
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
File: TQreVMJ-b83aziYsT995DzIP7Zw.mft (raw, json)
Hash identifier: I7hgiAWTddbFiTW7YDh4TqVhwi9ADDwf4jk9wYXzqaw=
Subject key identifier: 07:82:DA:CE:7D:3D:6E:69:6D:A4:90:A9:4C:D1:3B:C2:51:61:FE:20
Authority key identifier: 4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C
Certificate issuer: /CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
Certificate serial: 0199375D78B816911F731D4BA1D024D77D5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
Manifest number: 1683
Signing time: Thu 11 Sep 2025 06:01:36 +0000
Manifest this update: Thu 11 Sep 2025 06:01:36 +0000
Manifest next update: Fri 12 Sep 2025 06:01:36 +0000
Files and hashes: 1: 93DmKZhPP6C3A8rfNYLNAOSD7nY.roa (hash: dt3s4SYU1dR+fLajxJTR3/3GKKVmv0f+WTIVOmO+2as=)
2: A1lFiDlkwzd2kuuHtwLxrVifjIM.roa (hash: bheq6y6BKOc+FBTnE7aA9p7E54SloHCzl+8cgE33f9o=)
3: TQreVMJ-b83aziYsT995DzIP7Zw.crl (hash: Vy+YbnXU718xUdjUCvuCK/j/yazS5p2R/SIZeuzu4fM=)
4: UD9G2KurtNeaAxJdizQiQcSD0uc.roa (hash: Es9ToT28+rspmgTLqxqTlnHgsgNlKjrlO13bAnzcF2g=)
5: XDIQZzxZW5-uUuoXNVfYPGALZY8.roa (hash: xZyhu94HluR+zrM/qfXRNVxIfS3klNJwNP/Gh4p7kNE=)
6: cYs_upIMBFM1qTzwqySxwaPDCLc.roa (hash: xI0Q9MYkvDP8hv/SnI33zJTsy3M/0ZO4tON1nbaFCD4=)
7: jk-_IfFTaD-MzFizpWx0AA1TkH4.roa (hash: wezPiSGoo0rul4hPDHDdcRTaZb8xQPAVvKZ9GBZZNU8=)
8: luOuJQnFXQhNggwM6MUJDK19PDQ.roa (hash: yd7LbwhPMHWjUutNzr3ySSl/LTeLlprMji5U1R9GXsM=)
9: mmpsKeeO5JUD0kNNB4aUsbfsoEs.roa (hash: mRAg2xOUvTrNMtJyTqYFatxVEZidyGOVjXZ4XpUtMSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:5d:78:b8:16:91:1f:73:1d:4b:a1:d0:24:d7:7d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
Validity
Not Before: Sep 11 06:01:36 2025 GMT
Not After : Sep 12 06:01:36 2025 GMT
Subject: CN=0782dace7d3d6e696da490a94cd13bc25161fe20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f3:61:9c:0f:0e:11:e3:21:32:af:9e:66:87:
b4:ed:b8:86:64:ee:98:c5:3f:af:3f:37:8a:f1:9d:
71:1a:4b:45:fd:da:94:80:93:e4:d2:94:c5:73:c1:
b4:93:bc:24:68:20:5a:d5:1d:85:2d:4a:ff:0d:1b:
9b:17:e7:b5:d7:c4:8e:c4:d1:c5:2f:1f:eb:0c:e3:
e8:96:ee:01:b3:66:66:45:48:41:f0:26:98:ca:ed:
3a:c3:48:07:31:2e:32:36:c3:13:0b:50:63:98:41:
9e:42:12:c6:d4:04:8b:7d:d4:72:dc:be:fc:4e:39:
af:f6:9d:14:dd:e9:35:ac:77:d3:67:bd:0c:b6:08:
dc:d1:58:b7:98:c9:d0:9a:4a:e6:38:9a:14:f7:ad:
ba:b9:9a:c5:fa:11:2c:2a:e1:c2:f2:14:c6:c5:c5:
45:cb:2a:eb:d4:00:a7:98:2e:0b:f5:c0:18:9e:0d:
ef:eb:36:94:77:fe:22:ce:3f:31:5b:33:00:45:02:
3f:b5:c0:49:76:75:11:c7:be:dc:60:07:d7:00:40:
b9:69:99:37:0f:07:fd:26:0a:88:36:84:2c:9c:84:
fb:80:0c:85:20:fc:30:17:b1:32:2b:4c:32:52:fa:
05:22:15:de:d7:e5:66:ec:af:47:e8:6f:08:2b:68:
cd:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:82:DA:CE:7D:3D:6E:69:6D:A4:90:A9:4C:D1:3B:C2:51:61:FE:20
X509v3 Authority Key Identifier:
keyid:4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:3b:b7:fa:8d:9f:47:7c:1e:02:8c:dd:eb:0b:7a:d0:31:53:
1f:31:79:6e:d6:da:aa:67:a9:df:de:53:b1:c0:f8:45:40:7f:
9a:db:f9:c2:59:8f:ae:eb:42:75:34:a8:26:b0:2e:84:20:34:
e1:43:67:4f:80:4b:53:44:a6:5c:97:dd:c6:56:d4:5b:d3:db:
d1:c5:b1:e7:45:ad:56:c9:c5:3c:f2:af:b3:dc:bb:0b:e5:2e:
43:e6:41:77:23:69:e4:18:d5:ee:98:b1:38:93:f7:78:ee:9f:
3f:14:f1:f9:b9:80:0c:8f:88:6d:f6:90:70:67:a1:38:55:41:
1d:9f:2f:e2:1c:45:dd:4a:86:8b:e1:01:18:92:a5:11:5c:31:
5d:78:12:e1:f6:fa:19:e9:51:52:3d:d3:51:e8:78:dc:d8:c5:
c4:a5:19:1f:8c:24:79:de:ae:4c:af:58:d0:2b:c8:70:aa:78:
48:ff:4b:df:07:c2:50:65:2e:e9:71:a4:ec:de:fb:3b:50:66:
f4:0c:db:5c:96:37:b1:ec:5e:38:be:e0:7e:24:0e:e7:a5:64:
d0:ff:cf:3a:50:3e:1b:99:1e:26:65:3f:33:95:d2:aa:71:ed:
c7:36:aa:f7:c5:45:10:9b:94:55:ba:d5:68:14:98:fa:98:1b:
2f:5b:db:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 11:22:58 2025 by rpki-client