
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft
File: Tt5MZdc1r3knftFOtsTPVATHiNU.mft (raw, json)
Hash identifier: jSyOgbeAmZymP9/H8lUVVLeYMnK3WtoNOSwv1dHIGtA=
Subject key identifier: 67:F9:7F:B0:54:20:90:44:D6:23:CA:3E:C7:6F:BC:C7:BA:B3:22:81
Authority key identifier: 4E:DE:4C:65:D7:35:AF:79:27:7E:D1:4E:B6:C4:CF:54:04:C7:88:D5
Certificate issuer: /CN=4ede4c65d735af79277ed14eb6c4cf5404c788d5
Certificate serial: 0198733D10BF9C14529EE1398CAA02439220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tt5MZdc1r3knftFOtsTPVATHiNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft
Manifest number: 0857
Signing time: Mon 04 Aug 2025 04:00:38 +0000
Manifest this update: Mon 04 Aug 2025 04:00:38 +0000
Manifest next update: Tue 05 Aug 2025 04:00:38 +0000
Files and hashes: 1: CNpxwuWXiobnr753WTcJ-SvZEQU.roa (hash: +W4soYxTO8aYTDMgF940blaVc3sdpMhU9iF5WZMoCzU=)
2: Tt5MZdc1r3knftFOtsTPVATHiNU.crl (hash: ARm3f0BVYpqBE5YQ/XQqXqerbmSBDj14VJhx46oOqHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tt5MZdc1r3knftFOtsTPVATHiNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:10:bf:9c:14:52:9e:e1:39:8c:aa:02:43:92:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ede4c65d735af79277ed14eb6c4cf5404c788d5
Validity
Not Before: Aug 4 04:00:38 2025 GMT
Not After : Aug 5 04:00:38 2025 GMT
Subject: CN=67f97fb054209044d623ca3ec76fbcc7bab32281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:39:9f:2e:78:3e:07:b8:6a:03:98:45:3b:27:
b0:34:32:90:a3:65:27:1f:db:43:17:45:25:fe:a2:
5e:a7:7c:2b:d2:f4:77:67:bb:cb:54:cb:3e:ca:02:
95:ef:0f:a5:bc:9b:c1:c4:c1:52:0a:92:0c:3e:0f:
a4:b5:05:f3:86:54:83:53:6c:38:b6:0b:63:70:03:
3e:da:a4:2c:91:5f:62:d9:d1:e1:d8:35:a2:eb:f8:
88:e7:d2:75:39:57:5f:f4:62:ea:d1:e7:ce:70:68:
e9:fd:c2:76:e7:3a:02:71:a2:7f:bc:ef:eb:72:89:
5a:5f:a8:c4:30:e5:1d:06:96:7a:1a:3b:01:4b:90:
82:7d:7d:98:7c:f8:7a:db:76:40:06:87:9f:e6:7b:
52:2d:c7:1d:ef:78:cb:8c:ab:75:ec:21:51:f1:90:
01:b0:ad:2c:d9:ef:af:f2:8c:e2:3c:c9:b6:54:21:
b7:69:94:df:b3:c6:7c:7b:9d:6d:80:0c:92:f2:02:
b5:97:34:fe:e3:7e:94:04:ae:31:3c:93:ee:f7:bd:
ed:06:04:f9:10:fb:a6:c6:ae:b1:2a:1c:50:6c:e4:
7d:e5:fc:b4:94:0e:70:0b:1c:25:8e:e9:2d:93:be:
5d:c3:89:2c:58:3d:f3:86:ca:fd:4e:ef:0a:a1:e9:
16:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F9:7F:B0:54:20:90:44:D6:23:CA:3E:C7:6F:BC:C7:BA:B3:22:81
X509v3 Authority Key Identifier:
keyid:4E:DE:4C:65:D7:35:AF:79:27:7E:D1:4E:B6:C4:CF:54:04:C7:88:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tt5MZdc1r3knftFOtsTPVATHiNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:5a:9b:53:bd:de:a7:a0:80:fe:9b:0e:25:04:fd:72:21:c8:
b9:08:e8:75:b1:56:d0:75:5a:80:a8:cf:ac:3a:a0:f5:aa:88:
4a:82:8d:3e:c8:dc:fc:5f:82:b9:34:ba:dd:a9:4d:0d:63:c6:
74:ba:69:f9:91:e8:c4:a8:1f:2c:a4:0e:6a:9e:de:96:3a:e1:
e8:c1:1f:d3:c2:d4:a3:e1:71:ff:5c:5b:e5:0f:8a:fb:6e:63:
00:dc:18:ca:5d:16:fc:3c:37:ff:91:b4:a8:f2:d4:86:53:01:
dc:d6:8d:d0:63:7f:f7:82:9c:b9:a6:c9:f9:a9:49:93:a9:6f:
df:65:8f:c2:1c:ae:3d:09:d1:e4:3f:01:32:c7:0b:f1:ea:60:
7d:1f:9a:ee:90:e7:3c:5a:bc:e6:e0:77:6c:1a:1f:6d:f5:dd:
eb:15:58:6e:dd:c5:2f:33:1c:ab:22:94:10:0c:28:c7:41:63:
81:c9:ce:2c:f8:6d:48:2b:99:95:84:a3:36:37:64:fd:bd:43:
32:51:55:20:bd:35:9c:9c:8d:16:5d:5c:1f:29:72:c2:ea:a2:
24:39:9e:d8:0c:04:55:f8:b4:89:40:8a:6b:67:9b:90:82:58:
33:4a:a5:62:64:e9:74:ec:e5:6b:4a:8b:34:47:c0:a3:41:f9:
4e:c3:5b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:25 2025 by rpki-client