
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft
File: TtTTbmM3JKGxeUm8QiR2lk518GU.mft (raw, json)
Hash identifier: Vxb4R1ICtFU3Yg3RqU9nEq9FWEsbJ/OMq4Mh03Fg+SA=
Subject key identifier: F5:B7:99:C0:DA:1A:CB:0E:79:4E:F9:F0:00:8A:C3:25:65:8D:AA:D0
Authority key identifier: 4E:D4:D3:6E:63:37:24:A1:B1:79:49:BC:42:24:76:96:4E:75:F0:65
Certificate issuer: /CN=4ed4d36e633724a1b17949bc422476964e75f065
Certificate serial: 01989825797296E841824D321C5FD67463F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtTTbmM3JKGxeUm8QiR2lk518GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft
Manifest number: 162B
Signing time: Mon 11 Aug 2025 08:00:49 +0000
Manifest this update: Mon 11 Aug 2025 08:00:49 +0000
Manifest next update: Tue 12 Aug 2025 08:00:49 +0000
Files and hashes: 1: CnryW-h9KBqAbLH3yoElsj6kkME.roa (hash: LGWkYgge1+9ItWTLHb68eWMOdZQGepA7ESiUA3d7dLI=)
2: TtTTbmM3JKGxeUm8QiR2lk518GU.crl (hash: tpaRSWt2I/IDIspRfwZKSof0rX47ALnoD9ke+/TbcF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtTTbmM3JKGxeUm8QiR2lk518GU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:98:25:79:72:96:e8:41:82:4d:32:1c:5f:d6:74:63:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed4d36e633724a1b17949bc422476964e75f065
Validity
Not Before: Aug 11 08:00:49 2025 GMT
Not After : Aug 12 08:00:49 2025 GMT
Subject: CN=f5b799c0da1acb0e794ef9f0008ac325658daad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0c:2d:6b:7d:9f:38:67:81:91:2d:49:17:bf:
20:fa:b8:85:ac:c0:d8:19:05:4b:c7:85:5b:c6:2a:
f4:05:b6:1c:49:49:9d:a6:57:0e:bd:57:5e:b5:79:
ad:6a:3a:ff:2e:46:9c:63:84:64:3b:8d:b5:29:c9:
1d:c9:c0:fd:f8:bb:0c:60:df:7d:30:dc:af:dd:cd:
9d:8b:99:bd:a7:12:f7:1f:98:9f:55:31:e6:d0:d2:
c1:52:93:cc:25:d6:dc:c9:07:ae:66:1b:14:37:9e:
3c:05:b2:d7:f8:44:fb:58:58:e4:6d:8b:b4:15:10:
cb:4c:83:12:c4:ec:d1:8c:d1:14:61:c6:50:7b:88:
fc:f2:ea:02:6e:3b:0d:74:ba:15:5b:44:0f:dc:4e:
f4:fa:55:1c:dc:3c:97:97:7b:ad:ee:44:98:04:ed:
d6:a7:84:c8:b1:1d:d2:b9:d2:dd:5b:96:03:50:f2:
e1:6b:6c:30:63:2e:31:e4:d4:97:9d:fc:4c:e2:dd:
b7:9d:d9:35:26:5f:ed:ea:87:eb:a2:1e:1a:9e:a1:
ee:bc:18:e7:83:59:1a:b6:93:cc:b8:b3:ff:36:dd:
2f:8d:fb:fc:f8:0e:90:7d:3f:24:25:32:6e:77:57:
0c:66:6b:66:58:a4:d9:ac:b0:0a:c5:19:16:62:61:
92:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B7:99:C0:DA:1A:CB:0E:79:4E:F9:F0:00:8A:C3:25:65:8D:AA:D0
X509v3 Authority Key Identifier:
keyid:4E:D4:D3:6E:63:37:24:A1:B1:79:49:BC:42:24:76:96:4E:75:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtTTbmM3JKGxeUm8QiR2lk518GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:e8:ca:c0:2a:e3:bc:a1:73:88:b5:ff:26:ed:e0:39:3d:a3:
f0:6f:e5:0b:9c:eb:47:19:ca:1b:bd:44:1e:62:5c:3a:d6:76:
07:6c:e4:70:8e:43:0a:cc:bf:9c:93:86:7e:d0:3d:d6:55:f0:
54:be:ad:cf:48:62:81:a2:7d:09:b2:eb:c8:84:c1:3b:92:8f:
0d:ce:bf:b0:64:0e:87:ca:74:34:18:b6:f8:3f:6b:10:a9:2e:
23:de:83:4c:a5:82:fa:0e:63:ce:d9:fa:5d:09:0a:b3:79:88:
14:f6:4d:8c:a9:36:f5:d3:3b:f6:62:0a:f4:67:c4:70:72:a6:
e6:be:99:20:e5:71:dd:88:98:e4:20:8b:9f:1e:af:ba:5f:90:
8f:eb:02:1f:61:8e:42:dd:02:81:c3:7c:63:ba:44:04:4b:0e:
f6:4a:51:e6:e1:a9:3c:f1:a7:2c:e4:ac:8e:9a:c0:78:17:59:
26:74:12:fc:0f:81:93:b0:af:d7:cd:ea:88:30:79:43:2a:aa:
7a:e5:87:b2:4c:8b:e6:2a:b9:5d:61:15:ca:32:a2:7b:e4:4a:
c2:34:32:14:b1:18:cc:bb:a3:90:c2:2a:c1:1d:15:4f:cc:ed:
e2:75:1c:4b:bf:3f:13:2f:d4:c8:8e:37:9d:62:51:0c:f9:83:
37:ab:f5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:49:49 2025 by rpki-client