Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
File: TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft (raw, json)
Hash identifier: IDs/R3/HE8qjupi4IGPYOi1iPH3apMvdtrOJSbIAkTM=
Subject key identifier: 55:26:C4:27:5A:C4:A8:8A:F2:22:AD:5B:59:1D:F1:2D:8A:C1:52:42
Authority key identifier: 4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
Certificate issuer: /CN=4d3f54f304e6b851608c293978b16ba51ac0350e
Certificate serial: 0198898DBE4525BF9183C018EEF8485FFB3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
Manifest number: 1622
Signing time: Fri 08 Aug 2025 12:00:24 +0000
Manifest this update: Fri 08 Aug 2025 12:00:24 +0000
Manifest next update: Sat 09 Aug 2025 12:00:24 +0000
Files and hashes: 1: 2-8ODfbSISRCVrFLypE1beop4mI.roa (hash: CTu3Z/KQAufmJs+pAxP0V5GvviRUTQPwl9gEk4hUm6E=)
2: TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl (hash: BTHm6FIc+4U1IBwloJPfnlG1dTknk56wE3HNK3qqu7I=)
3: xOYkGw3SqmDNjUBUXBvZW0U-4J4.roa (hash: CMrEVMiwQAaT7qSr6cVaZ45q/VR6zzPcJBOroZoc7n8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:8d:be:45:25:bf:91:83:c0:18:ee:f8:48:5f:fb:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3f54f304e6b851608c293978b16ba51ac0350e
Validity
Not Before: Aug 8 12:00:24 2025 GMT
Not After : Aug 9 12:00:24 2025 GMT
Subject: CN=5526c4275ac4a88af222ad5b591df12d8ac15242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b3:dd:11:1e:72:49:64:5a:b0:12:8f:05:f6:
33:f3:ba:94:bc:f6:3c:76:17:71:38:10:1d:0e:88:
aa:e0:88:8a:4a:7a:d0:3e:a6:1f:df:ac:6e:0d:90:
e5:4b:33:19:67:36:ea:e1:69:26:5e:a7:9e:8f:b2:
28:46:9c:b3:d8:fe:5c:c6:00:e1:15:01:50:ff:27:
80:54:5c:85:c4:dd:26:da:ed:e7:5f:c3:be:7d:d7:
38:9b:b3:16:db:0f:9c:27:59:d8:f4:a3:a0:4b:c8:
fe:8a:b9:bb:58:3d:0c:7b:ec:fd:8f:f8:c0:9a:c3:
2f:5c:55:e5:61:01:a2:79:73:ca:7e:c2:21:80:21:
d8:d7:c1:f1:b7:06:a7:47:03:92:2e:0f:1c:36:4c:
35:7f:6a:fc:c6:f5:43:07:55:1b:58:48:6c:f1:1d:
97:52:17:e6:77:c1:f8:78:9e:d0:1c:8e:28:41:12:
18:32:69:3d:5f:98:65:a1:10:47:f4:af:2d:83:3c:
03:8e:81:1c:9a:9c:f9:72:fd:83:09:b3:4c:a1:f2:
b5:b7:9b:84:95:f7:0e:b7:09:58:ad:2c:a7:a6:2c:
14:91:75:6c:71:1e:d2:1e:60:2c:c9:88:f3:b3:c4:
8e:b3:4c:a3:14:44:05:45:7c:f2:91:62:42:6c:20:
2f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:26:C4:27:5A:C4:A8:8A:F2:22:AD:5B:59:1D:F1:2D:8A:C1:52:42
X509v3 Authority Key Identifier:
keyid:4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:08:45:85:c7:74:08:fc:26:21:1b:da:ab:3f:ca:6f:cd:e8:
e4:2c:34:50:9e:83:09:8d:cb:36:c1:6f:ec:79:bb:b0:e2:b0:
43:c0:a2:f6:35:70:bf:f7:39:0a:27:d3:30:b8:c1:a5:c9:67:
9e:26:30:1e:9c:f9:c9:c9:79:fc:34:eb:21:0e:6c:91:d7:cb:
fa:32:00:3b:14:8f:6e:4c:b7:5d:f6:f6:06:60:cb:fa:fc:e2:
b6:f6:1f:f4:86:69:ac:69:66:6e:18:89:bf:0d:c1:e9:04:7d:
3f:56:41:1c:c4:f8:a7:01:57:5c:f3:92:5f:ec:66:2b:30:f0:
40:4c:1a:7b:92:f1:a5:8e:57:33:cd:1c:c9:e8:f5:4f:93:99:
ae:f8:32:0d:cf:7c:47:77:5a:c8:2c:29:cd:a1:dc:dc:83:3c:
5b:6c:82:ea:36:0c:34:46:06:35:29:0a:13:d0:4f:f2:8d:2e:
b2:22:af:e6:a5:84:3c:25:67:1f:9b:4a:70:93:2a:b3:3b:86:
db:e9:b4:36:86:d6:80:7f:15:42:4f:68:e1:36:ea:f5:2a:98:
2c:8b:e5:34:4b:43:53:11:e9:eb:cd:8d:c3:a9:d6:03:95:5a:
37:1c:ff:df:9c:c0:d6:08:a0:e0:8f:2d:4b:76:a7:f2:97:2f:
df:51:f3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:40:02 2025 by rpki-client