Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/25651d-ee73-48ed-af68-29f420752d5e/1/travTd-DFvvxAck2ROZZQUZXB2I.mft
File: travTd-DFvvxAck2ROZZQUZXB2I.mft (raw, json)
Hash identifier: hMFY1RptoBXHU8iKSNe+G/X5cBMWGIJzKdaOZr4TW84=
Subject key identifier: 2A:B2:40:63:7E:7E:45:7D:85:BC:97:DF:E5:B6:71:AC:E2:49:CB:B3
Authority key identifier: B6:B6:AF:4D:DF:83:16:FB:F1:01:C9:36:44:E6:59:41:46:57:07:62
Certificate issuer: /CN=b6b6af4ddf8316fbf101c93644e6594146570762
Certificate serial: 01976F99D89B27FCFB7941576CE4933C5AC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/travTd-DFvvxAck2ROZZQUZXB2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/25651d-ee73-48ed-af68-29f420752d5e/1/travTd-DFvvxAck2ROZZQUZXB2I.mft
Manifest number: 0346
Signing time: Sat 14 Jun 2025 18:00:42 +0000
Manifest this update: Sat 14 Jun 2025 18:00:42 +0000
Manifest next update: Sun 15 Jun 2025 18:00:42 +0000
Files and hashes: 1: XuO7mhRFAxWWJf3a_uruRMjL2IE.roa (hash: RQDFwJe4JCe2zZylFuaxaBjfCKElGwq/EnTU4HdBtkk=)
2: travTd-DFvvxAck2ROZZQUZXB2I.crl (hash: KuheuCF6TRUjOtKNL95kJlYkQlX0nlyI6by0g4k1MgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/25651d-ee73-48ed-af68-29f420752d5e/1/travTd-DFvvxAck2ROZZQUZXB2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/25651d-ee73-48ed-af68-29f420752d5e/1/travTd-DFvvxAck2ROZZQUZXB2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/travTd-DFvvxAck2ROZZQUZXB2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:d8:9b:27:fc:fb:79:41:57:6c:e4:93:3c:5a:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6b6af4ddf8316fbf101c93644e6594146570762
Validity
Not Before: Jun 14 18:00:42 2025 GMT
Not After : Jun 15 18:00:42 2025 GMT
Subject: CN=2ab240637e7e457d85bc97dfe5b671ace249cbb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:06:dd:7d:4f:61:77:e0:42:6e:af:a2:76:01:
9b:99:2a:89:4e:2d:a3:ca:64:8a:9d:94:2c:89:a1:
eb:c7:d4:e4:b0:a3:68:f0:2a:ee:23:fc:69:58:19:
d4:71:8c:61:ff:92:dc:b9:d0:92:69:d5:1d:c9:3c:
e3:24:ee:6e:46:5a:ee:f0:55:d3:11:29:c5:e2:22:
91:c2:8f:46:ee:af:7e:07:11:fe:d2:f2:9d:76:d4:
19:8a:6d:3e:09:10:a6:90:dc:20:e3:6c:0e:37:7e:
56:b4:8b:4e:82:78:10:01:25:76:3e:11:63:d3:29:
fd:ce:f0:84:ad:46:80:f3:d8:d2:3d:12:cd:b2:b2:
64:95:97:cc:9a:b0:c7:a2:46:d3:67:55:40:6f:87:
50:e2:f4:2e:e3:64:6b:3d:a4:31:d3:60:69:ca:d5:
4e:9e:ad:db:b8:62:aa:3c:fa:6f:d7:82:62:2d:e4:
8f:22:e9:b8:6b:50:6f:55:3f:a7:b6:af:f9:75:a8:
eb:28:32:ce:83:ab:76:4a:5c:6b:ca:3f:ac:4d:21:
23:76:f3:45:56:52:32:e7:fa:c7:e0:dd:e8:b7:bc:
79:9e:a6:e8:8a:fa:a3:ee:98:c6:17:88:48:3d:4f:
b7:e4:14:25:75:4f:c0:60:92:43:90:9f:59:d3:c5:
38:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B2:40:63:7E:7E:45:7D:85:BC:97:DF:E5:B6:71:AC:E2:49:CB:B3
X509v3 Authority Key Identifier:
keyid:B6:B6:AF:4D:DF:83:16:FB:F1:01:C9:36:44:E6:59:41:46:57:07:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/travTd-DFvvxAck2ROZZQUZXB2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/25651d-ee73-48ed-af68-29f420752d5e/1/travTd-DFvvxAck2ROZZQUZXB2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/25651d-ee73-48ed-af68-29f420752d5e/1/travTd-DFvvxAck2ROZZQUZXB2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:31:9c:70:75:e8:71:df:01:36:3a:55:27:20:1b:b5:6a:c7:
70:8c:aa:a6:3c:86:ce:16:25:a3:2f:a3:f3:06:62:bc:0f:18:
d5:31:8d:3c:34:27:25:89:8b:19:f0:55:7b:91:24:ac:17:54:
30:b4:21:81:cd:1a:c9:40:c2:85:63:78:97:aa:9d:43:3c:30:
2e:dc:e1:03:f3:73:e7:99:c9:b2:30:34:2d:d7:32:bd:55:eb:
0b:94:a1:34:d2:b3:54:b5:e4:49:6b:f3:eb:c4:08:51:c2:2a:
d2:00:dd:19:0a:f8:db:3f:c6:df:b1:2d:a5:5c:d3:a5:ca:63:
22:ad:64:ae:0c:04:ec:b9:3d:82:3a:20:9d:5b:e0:cb:89:9e:
0e:9a:3d:32:1d:d3:da:29:13:6c:20:09:19:ce:26:e9:b9:37:
d6:36:33:bd:97:f3:52:57:57:35:d5:34:17:e7:e1:84:79:83:
d2:cf:17:34:44:49:51:2b:6a:78:f2:a7:86:51:6e:72:69:a4:
a6:9f:6a:d3:3a:94:c1:f6:68:61:eb:15:b6:47:81:28:36:c9:
db:6d:4e:b1:f0:59:86:d2:3e:e9:70:3c:bd:ec:6c:ab:39:81:
6f:1a:1c:1f:dc:fd:dc:71:02:e6:e1:31:c1:cd:ca:ec:d7:d6:
78:0a:13:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:22:08 2025 by rpki-client