Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft
File: TtaClltaFeoMReqF7z20vnFnlpY.mft (raw, json)
Hash identifier: cvZ36XuNvIn3SWKuBK1LHGwkfeUz9+teWX0yAUNrhl0=
Subject key identifier: F2:6E:2A:0C:F8:D8:56:E7:3C:96:51:42:56:46:7C:C3:F5:C5:C5:DD
Authority key identifier: 4E:D6:82:96:5B:5A:15:EA:0C:45:EA:85:EF:3D:B4:BE:71:67:96:96
Certificate issuer: /CN=4ed682965b5a15ea0c45ea85ef3db4be71679696
Certificate serial: 0196794401FD09A9521D1925FC50F28D236D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtaClltaFeoMReqF7z20vnFnlpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft
Manifest number: 0337
Signing time: Sun 27 Apr 2025 22:00:22 +0000
Manifest this update: Sun 27 Apr 2025 22:00:22 +0000
Manifest next update: Mon 28 Apr 2025 22:00:22 +0000
Files and hashes: 1: 3aqe87dN2fz6qQQtxNwtFo2__ps.roa (hash: Lt1Bd1g6jAvktpInXW5Oo10n3abY0buPeadfOybeVY0=)
2: TtaClltaFeoMReqF7z20vnFnlpY.crl (hash: toLhDfk2T1ArkrN4RvRyxLuDGhgMzmGTEpd3T/GDRQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtaClltaFeoMReqF7z20vnFnlpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 22:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:44:01:fd:09:a9:52:1d:19:25:fc:50:f2:8d:23:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed682965b5a15ea0c45ea85ef3db4be71679696
Validity
Not Before: Apr 27 22:00:22 2025 GMT
Not After : Apr 28 22:00:22 2025 GMT
Subject: CN=f26e2a0cf8d856e73c96514256467cc3f5c5c5dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9b:b1:4b:c7:e3:df:12:13:d4:2d:ec:a9:20:
e1:72:d5:40:ec:3b:45:e5:f8:c6:5e:82:8e:78:ba:
73:a4:b7:76:cf:49:e4:28:13:9e:db:8b:04:7c:99:
b6:3a:2f:bd:11:01:c1:7d:c8:87:7a:20:38:c1:b3:
a9:b4:d7:0d:83:7e:d8:c9:f6:49:45:c7:b6:b6:36:
e2:9e:5b:e2:c1:ad:6b:49:78:8b:c3:2e:fa:1d:ff:
8b:27:ab:a2:46:eb:55:b9:4c:c0:86:b6:b3:b5:7a:
0b:c1:4e:92:fe:11:17:14:e7:a9:07:47:f7:30:c5:
c2:4d:5e:e3:b6:62:4e:43:96:d9:cf:6a:06:56:f7:
09:29:6a:2e:85:60:66:3c:ae:44:77:f3:03:8c:cd:
a1:81:65:8a:31:e9:bd:9e:8e:ed:3b:26:8a:d1:e5:
14:77:47:f4:2c:ad:53:b0:57:15:10:a8:b7:2d:59:
d2:44:b8:a8:14:d5:36:bb:c1:c5:54:a2:49:0c:47:
de:20:40:bb:73:b2:c2:36:66:3d:1b:40:5c:4a:c1:
61:66:7b:44:55:69:f1:18:48:59:21:af:4b:f0:db:
8b:b5:cb:39:ce:5d:19:93:bd:37:3c:46:e4:b3:5c:
3a:e5:c3:72:4e:bc:2a:48:7d:04:cf:f0:69:64:5a:
06:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6E:2A:0C:F8:D8:56:E7:3C:96:51:42:56:46:7C:C3:F5:C5:C5:DD
X509v3 Authority Key Identifier:
keyid:4E:D6:82:96:5B:5A:15:EA:0C:45:EA:85:EF:3D:B4:BE:71:67:96:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtaClltaFeoMReqF7z20vnFnlpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:0f:5b:a2:7d:3b:fe:27:c9:62:da:c9:68:a1:63:4c:cb:47:
6f:e0:74:8a:62:d2:9e:4c:58:a0:12:71:9d:47:c6:09:11:1e:
d4:4c:7e:fc:19:86:11:02:1d:82:3b:93:ca:d9:76:51:c5:d2:
a6:02:ff:87:f4:7c:0f:3d:22:15:0d:3b:e8:d9:f9:7d:ad:3a:
c5:5e:05:5b:96:92:62:a2:b0:4d:5e:59:f3:7a:22:3d:7b:e6:
6e:93:b5:2a:e9:92:03:2e:f2:9d:23:b5:68:6d:de:b4:03:23:
9d:7c:71:35:93:83:1d:6e:25:b0:22:8c:63:4e:5b:b1:d8:50:
6e:8d:a2:f7:53:9c:51:c1:74:6f:f1:db:27:23:c6:57:96:30:
65:25:d6:b1:ba:17:ef:02:a0:7c:bc:da:66:a6:a2:da:2d:af:
a9:46:62:d5:b6:07:1e:fb:bf:ef:15:47:33:c5:46:59:c6:51:
85:c6:88:ad:b2:e3:78:a7:cf:78:a3:a2:a6:06:6c:b8:d3:a8:
fa:d2:f0:d4:1a:42:36:f1:03:85:51:98:48:c4:63:21:a0:4a:
b9:db:86:3e:db:3b:eb:f7:82:34:05:b7:8f:29:35:eb:64:7c:
b2:82:e6:17:1d:2a:76:19:cb:45:33:a2:a8:85:a5:33:70:50:
77:e9:e5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:30:49 2025 by rpki-client