Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
File: ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft (raw, json)
Hash identifier: /hBqfPHjwBkLuDbKfbJfT93ABAAJ4J9OdgOxqWOvRlE=
Subject key identifier: 9E:0A:67:D9:B3:42:6B:72:99:49:45:8B:3D:90:E9:0F:A5:3B:CC:DD
Authority key identifier: B6:D7:F3:68:FA:1C:F5:B1:AA:AA:76:B0:F1:F2:3C:06:75:0A:84:26
Certificate issuer: /CN=b6d7f368fa1cf5b1aaaa76b0f1f23c06750a8426
Certificate serial: 0198941234BFF930BC921CA157DCCF91467D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
Manifest number: 04FD
Signing time: Sun 10 Aug 2025 13:01:17 +0000
Manifest this update: Sun 10 Aug 2025 13:01:17 +0000
Manifest next update: Mon 11 Aug 2025 13:01:17 +0000
Files and hashes: 1: mgO2bfWYu0Z3yfKtycB0eHY39X8.roa (hash: 60DQx4kpFtDfON86MP27ODodoK2c+Xs/qbF18XYACcg=)
2: rg97vUvro1QUCZLNC-zT_PYGVh8.roa (hash: iZBiJSmpj/Q8UocwtFDbOX3xmzAVEyiNjKTvOdI8ZqE=)
3: ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl (hash: 6m5LSHGx79lD7BjGNHbZ6OHMP4Op5HY1DxDIgLhTFCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:12:34:bf:f9:30:bc:92:1c:a1:57:dc:cf:91:46:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6d7f368fa1cf5b1aaaa76b0f1f23c06750a8426
Validity
Not Before: Aug 10 13:01:17 2025 GMT
Not After : Aug 11 13:01:17 2025 GMT
Subject: CN=9e0a67d9b3426b729949458b3d90e90fa53bccdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:58:18:fb:18:a0:5b:8c:4c:95:c7:8a:77:96:
ea:7f:e3:ec:66:70:33:62:48:74:0c:b7:27:dc:b1:
e1:8a:62:2b:98:96:7e:6e:eb:68:eb:f7:81:2a:72:
5c:c1:ad:88:36:41:04:e1:1a:58:ea:28:9b:32:77:
08:8f:f8:26:94:1a:b6:ad:35:f0:5b:51:64:30:32:
10:ef:9a:76:36:b8:e7:43:7d:64:e3:54:62:00:88:
e1:70:c2:0c:cb:f6:f1:e5:50:45:90:ca:d7:fc:43:
8d:e8:ba:d7:60:37:7a:43:f7:96:e7:75:81:c8:92:
81:a1:42:ba:26:0a:b1:4e:29:22:b0:07:58:2c:e5:
23:1e:82:d0:72:51:b9:c1:3b:4b:33:a7:21:67:ac:
4d:b1:2c:6c:a1:3e:2c:76:a4:ef:92:54:04:93:7f:
3c:46:e9:85:bd:63:19:f1:b6:09:96:4c:ba:a2:e8:
c0:11:18:0f:28:fe:f4:1c:f5:e3:af:5a:fc:4c:b6:
5d:aa:4e:87:5f:b8:bf:f0:1e:31:dd:74:8d:e7:29:
20:1a:2e:b4:27:1b:40:ca:a4:14:f4:48:f4:1b:07:
c1:8a:f5:fd:25:55:ec:d6:b6:1d:87:c7:e3:d8:27:
48:0d:95:56:b3:c5:16:96:ad:92:d4:4f:c0:56:75:
3e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:0A:67:D9:B3:42:6B:72:99:49:45:8B:3D:90:E9:0F:A5:3B:CC:DD
X509v3 Authority Key Identifier:
keyid:B6:D7:F3:68:FA:1C:F5:B1:AA:AA:76:B0:F1:F2:3C:06:75:0A:84:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:5b:d0:a9:39:5f:08:e1:34:3a:54:19:94:b2:5c:1a:0e:4f:
28:39:b4:2d:41:dd:5c:6c:7e:7a:78:38:7d:bb:5e:e6:f8:b7:
4c:91:a7:05:28:d7:13:fa:cf:fb:28:98:7f:73:0e:b9:02:53:
09:cb:9c:9c:1d:6f:f7:6a:e3:62:99:11:6e:af:02:02:fa:9c:
8c:8c:12:af:d9:98:dc:0f:c0:35:8a:33:5b:6a:83:f6:5a:f7:
79:e4:eb:6f:88:fc:25:b8:dc:cf:79:0c:cc:bf:d8:11:8f:27:
6d:23:f6:57:eb:75:5d:df:8e:1e:d5:54:a0:7b:a3:b0:71:89:
b9:32:b2:46:73:8f:45:3f:b7:f2:dd:1f:bb:6f:32:0c:79:52:
be:23:6f:aa:1e:0b:00:0e:dc:ef:76:e4:26:39:84:30:64:85:
59:d7:92:73:02:03:00:36:5b:c7:d3:20:71:f0:bf:93:56:53:
8d:5a:41:b4:18:45:1e:6e:75:3b:d5:99:7d:54:93:06:f2:6f:
58:38:f0:d1:e2:ef:69:45:12:68:a6:35:ab:26:9e:d4:86:fb:
40:71:14:5f:58:d7:ec:99:ba:e2:1c:3f:48:3a:a6:bf:25:4e:
9f:b3:82:c6:43:5d:16:a6:91:75:86:05:c5:5d:10:88:60:bf:
79:0a:ca:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:49:43 2025 by rpki-client