Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
File: TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft (raw, json)
Hash identifier: HbmVEKNtwhOCF19BXCgrHqwBidBfzM2CA8DdqMkQvWY=
Subject key identifier: 8E:80:61:BC:94:8E:76:AB:80:B3:D3:62:9B:D3:AD:F0:D6:57:8E:D7
Authority key identifier: 4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
Certificate issuer: /CN=4d3f54f304e6b851608c293978b16ba51ac0350e
Certificate serial: 0196993CE2F3E03FE6A443F0148DA36679E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
Manifest number: 1521
Signing time: Sun 04 May 2025 03:00:26 +0000
Manifest this update: Sun 04 May 2025 03:00:26 +0000
Manifest next update: Mon 05 May 2025 03:00:26 +0000
Files and hashes: 1: 2-8ODfbSISRCVrFLypE1beop4mI.roa (hash: CTu3Z/KQAufmJs+pAxP0V5GvviRUTQPwl9gEk4hUm6E=)
2: TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl (hash: aO939kmjo5Zk61FzvNIV4boU/rq5umhJndlg+Z2MBbc=)
3: xOYkGw3SqmDNjUBUXBvZW0U-4J4.roa (hash: CMrEVMiwQAaT7qSr6cVaZ45q/VR6zzPcJBOroZoc7n8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 03:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:99:3c:e2:f3:e0:3f:e6:a4:43:f0:14:8d:a3:66:79:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3f54f304e6b851608c293978b16ba51ac0350e
Validity
Not Before: May 4 03:00:26 2025 GMT
Not After : May 5 03:00:26 2025 GMT
Subject: CN=8e8061bc948e76ab80b3d3629bd3adf0d6578ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bf:d5:e2:49:dd:a7:7a:75:b3:a4:1d:aa:79:
76:a1:e7:78:73:fe:94:da:fd:ae:87:c4:b6:df:78:
f4:bd:02:d6:77:06:68:4e:84:31:60:13:5c:b1:28:
57:62:82:41:68:e3:7b:93:6f:c5:c4:7f:3e:5b:3e:
5e:39:4b:8c:db:8a:4b:f5:82:84:78:5e:2e:11:24:
84:ef:b4:41:81:6d:46:bc:f6:eb:84:29:c2:ab:b0:
c0:0a:d8:51:c7:f7:5b:aa:ef:c0:ca:ef:c4:ee:de:
d2:78:97:d6:b0:03:6a:12:11:82:af:31:c6:e3:03:
5e:cf:75:c7:cb:20:5a:71:e3:a0:ba:6a:7f:1c:9b:
ea:a7:97:cc:2f:b8:a8:ac:ee:59:5f:f4:30:e1:ff:
b5:3d:97:6e:3f:98:39:77:bf:1e:4d:59:19:86:38:
07:45:fa:f9:4d:13:11:5d:a3:d4:75:01:a4:3c:09:
27:b5:d8:88:4f:23:0b:27:18:71:7b:ce:4c:bf:04:
66:05:cc:77:2b:39:a1:b4:90:f7:9e:c6:52:f5:15:
de:bf:4f:30:bd:52:2e:36:f3:bd:26:b1:e3:af:d6:
13:e7:2c:3d:fa:e8:ac:7f:c2:c9:cc:0d:7a:df:26:
16:99:f7:86:a7:05:f5:2c:ad:1b:84:25:74:e9:46:
cb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:80:61:BC:94:8E:76:AB:80:B3:D3:62:9B:D3:AD:F0:D6:57:8E:D7
X509v3 Authority Key Identifier:
keyid:4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:a6:5a:fa:14:12:2c:4f:b3:46:e4:6a:92:1a:a3:bf:3d:34:
0d:04:2a:59:6f:72:18:33:40:ab:a6:41:d3:84:54:e5:9b:25:
68:43:c2:1c:dc:b5:19:c0:af:8f:12:c7:cc:1f:ef:e4:53:d4:
8d:58:1e:0c:88:d0:b4:22:4c:ff:e0:c2:62:e1:42:6b:48:00:
7c:84:47:5f:76:eb:32:52:47:61:ae:9d:aa:36:35:87:0d:06:
97:18:37:37:13:4a:bd:c3:80:d7:53:17:df:f9:2e:e8:2d:c7:
28:03:6c:2c:39:eb:de:62:31:44:9d:b1:6d:8a:82:3a:d0:b0:
0b:dd:31:f0:13:23:1f:cb:a5:bd:78:78:9f:e9:9e:31:f8:5b:
fb:39:b8:98:08:49:43:88:f0:46:1a:5c:e4:c1:3a:5b:6b:82:
98:0a:29:0c:82:cf:71:36:b8:ac:98:f1:d7:df:ca:38:f4:ef:
d8:60:4f:11:55:ad:a9:3d:22:af:74:62:77:c4:85:c8:4c:8d:
1d:8b:d5:00:67:f8:4f:14:f8:f6:bf:3f:83:b4:17:25:12:6d:
4a:fa:8b:bb:94:27:2c:f2:3d:6a:0a:01:c5:76:8b:5b:cc:4e:
fa:e7:0e:dd:82:0d:2f:c2:ee:38:9e:61:13:2c:ad:22:6e:1f:
6a:79:a9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 09:44:06 2025 by rpki-client