Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/d885bb-a3dc-4390-bf24-103b17d3eb45/1/TTaHdCvs89CAgu0S6fNHC4LafP8.mft
File: TTaHdCvs89CAgu0S6fNHC4LafP8.mft (raw, json)
Hash identifier: xq21VfBowgQzJ9DIpzrN/KnXwt4QlC6dWZ3X02xrQT8=
Subject key identifier: 36:0C:14:EE:AB:6B:E4:C9:13:AE:BD:17:66:01:D1:0A:F4:61:1B:9F
Authority key identifier: 4D:36:87:74:2B:EC:F3:D0:80:82:ED:12:E9:F3:47:0B:82:DA:7C:FF
Certificate issuer: /CN=4d3687742becf3d08082ed12e9f3470b82da7cff
Certificate serial: 0197684E03FA66AE169BF6A3B045CF1872F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTaHdCvs89CAgu0S6fNHC4LafP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/d885bb-a3dc-4390-bf24-103b17d3eb45/1/TTaHdCvs89CAgu0S6fNHC4LafP8.mft
Manifest number: 0C6E
Signing time: Fri 13 Jun 2025 08:00:32 +0000
Manifest this update: Fri 13 Jun 2025 08:00:32 +0000
Manifest next update: Sat 14 Jun 2025 08:00:32 +0000
Files and hashes: 1: TTaHdCvs89CAgu0S6fNHC4LafP8.crl (hash: g/KZcO56yBHYF9XT7MPyKrXcZNaURQkXNhronjpZb0w=)
2: ehQIMYmYwJQIMwezxzrnCxQWXrQ.roa (hash: K5j8O7wSUuuth3uj2946HM7L4q3WosF43ObE+K/eL8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/d885bb-a3dc-4390-bf24-103b17d3eb45/1/TTaHdCvs89CAgu0S6fNHC4LafP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/d885bb-a3dc-4390-bf24-103b17d3eb45/1/TTaHdCvs89CAgu0S6fNHC4LafP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TTaHdCvs89CAgu0S6fNHC4LafP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:03:fa:66:ae:16:9b:f6:a3:b0:45:cf:18:72:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3687742becf3d08082ed12e9f3470b82da7cff
Validity
Not Before: Jun 13 08:00:32 2025 GMT
Not After : Jun 14 08:00:32 2025 GMT
Subject: CN=360c14eeab6be4c913aebd176601d10af4611b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:98:21:06:07:9b:5a:bd:19:1d:d3:19:5c:59:
63:ad:0a:ad:b2:8a:d4:2f:a9:df:08:da:48:2f:d1:
cb:56:c1:ab:19:7b:90:5c:75:18:b9:17:d5:17:92:
35:37:ac:3f:2b:0c:5b:68:56:86:58:05:42:03:ed:
51:d0:85:66:17:97:96:70:25:30:8b:60:38:59:54:
a9:17:5b:70:f7:fc:f5:ac:32:a8:12:13:f2:27:a1:
b5:a1:e2:e9:5c:c3:5a:9a:e5:49:21:b9:20:2f:08:
83:16:57:e5:00:c6:87:91:1d:32:77:c8:58:e1:39:
89:91:b6:e8:82:00:13:57:9b:ea:2d:56:64:db:8b:
7e:c6:ff:1b:45:16:5e:14:eb:a2:2b:ec:65:09:98:
0a:88:08:b5:e9:21:99:1a:93:1f:90:22:2a:2b:7b:
be:25:d8:c9:bc:d5:5d:e5:ac:ad:31:99:0a:41:23:
af:70:70:cb:e6:c7:a5:53:93:76:ba:d1:dd:20:2d:
8f:f7:9e:25:5d:da:f4:c3:bf:e1:37:d7:81:03:3f:
0f:e8:67:3f:f5:78:a5:cc:a8:89:05:87:40:22:25:
c2:56:75:6b:d0:68:3b:73:4d:14:fd:49:96:d2:f6:
4c:8b:27:d2:d4:98:fb:f9:d3:08:17:8a:5e:49:15:
ac:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:0C:14:EE:AB:6B:E4:C9:13:AE:BD:17:66:01:D1:0A:F4:61:1B:9F
X509v3 Authority Key Identifier:
keyid:4D:36:87:74:2B:EC:F3:D0:80:82:ED:12:E9:F3:47:0B:82:DA:7C:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTaHdCvs89CAgu0S6fNHC4LafP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d885bb-a3dc-4390-bf24-103b17d3eb45/1/TTaHdCvs89CAgu0S6fNHC4LafP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d885bb-a3dc-4390-bf24-103b17d3eb45/1/TTaHdCvs89CAgu0S6fNHC4LafP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:39:c0:a5:07:11:e9:40:43:f6:0d:7f:27:12:c6:2b:14:df:
f6:da:36:7c:20:ba:84:2b:79:83:27:97:4c:0a:ce:74:92:17:
0f:1c:45:2d:86:23:ff:e5:8c:6e:c5:16:97:c2:35:7a:aa:aa:
9e:34:03:f8:b8:12:35:e6:6e:89:76:c1:55:a5:dd:02:e7:88:
89:b3:67:36:ec:96:a7:ef:5d:b6:ca:86:f9:bc:a4:04:40:83:
77:ca:43:81:3d:d9:28:49:78:18:bf:02:be:bd:bd:d2:27:a1:
ac:f2:7f:3d:bc:ef:aa:db:d8:10:de:d7:72:db:ad:a4:38:b2:
b3:84:c0:d7:cf:12:70:c5:8c:e4:6d:3e:40:88:34:8f:a3:8f:
5b:e2:ab:9d:45:fe:6d:1c:d9:b0:4d:96:18:9d:7f:e7:bf:f7:
9b:88:e7:ec:e0:c0:f1:b9:27:31:ba:6f:de:76:6c:aa:a1:67:
9d:17:9f:54:ee:07:2e:60:c6:50:4b:3a:a0:80:4d:99:a7:27:
01:b0:12:e6:7c:33:37:a2:52:2f:03:9a:b1:39:99:69:98:02:
ad:11:18:02:04:37:b7:7b:a4:d7:b0:c0:ba:48:64:bc:25:f0:
c0:6b:72:ce:dc:91:4a:65:71:d1:68:e9:cc:8e:9c:a9:27:8f:
e0:e0:59:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:26:39 2025 by rpki-client