Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
File: TtMkzMCQuDGCmReur3ODTwg0Ss4.mft (raw, json)
Hash identifier: LekzIC3I158tv+2RHIyFNEtWA99S9BaGQVt911JuNoo=
Subject key identifier: C0:FA:24:EF:A0:11:4E:E5:4A:8F:4D:55:43:44:2C:BD:90:A3:1D:27
Authority key identifier: 4E:D3:24:CC:C0:90:B8:31:82:99:17:AE:AF:73:83:4F:08:34:4A:CE
Certificate issuer: /CN=4ed324ccc090b831829917aeaf73834f08344ace
Certificate serial: 0197759C120C4E2027182CC5B9D761426E85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
Manifest number: A3
Signing time: Sun 15 Jun 2025 22:00:51 +0000
Manifest this update: Sun 15 Jun 2025 22:00:51 +0000
Manifest next update: Mon 16 Jun 2025 22:00:51 +0000
Files and hashes: 1: LpPDa_hMKwPOheYcHrNv5BDTWog.roa (hash: 2CoZfLFeobkKqc9qZWTYrYW94wPP5u5Zmz2xUC1WQvs=)
2: TtMkzMCQuDGCmReur3ODTwg0Ss4.crl (hash: Zmt5YnVsV/E4jrPaSc4ULMKHjvnYGk3lAJ6qjz+kejo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:75:9c:12:0c:4e:20:27:18:2c:c5:b9:d7:61:42:6e:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed324ccc090b831829917aeaf73834f08344ace
Validity
Not Before: Jun 15 22:00:51 2025 GMT
Not After : Jun 16 22:00:51 2025 GMT
Subject: CN=c0fa24efa0114ee54a8f4d5543442cbd90a31d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:87:07:82:43:00:03:4d:21:a9:a0:a6:b7:17:
c4:d6:fb:b2:3b:1d:2c:cf:f3:fc:3e:57:f0:b7:c0:
08:e0:e5:95:7c:71:b6:3e:2a:05:79:c3:15:2c:7d:
fb:6e:c2:aa:3e:49:50:cc:d1:37:17:42:88:6a:76:
fe:05:b4:de:94:6f:7a:5c:88:b3:dd:80:74:23:c0:
02:c2:a3:69:21:b1:64:5c:3a:a6:fc:64:27:c7:17:
6c:a3:dc:1a:e2:05:f6:67:3d:6b:7d:98:db:7e:f3:
5b:48:e0:73:0a:5e:c4:26:58:8e:5d:98:95:56:8c:
1b:2f:86:3f:86:35:33:4e:fe:88:4f:f9:c6:c2:d5:
b7:2b:0d:df:59:4c:8c:1e:f2:b1:88:0d:ee:16:17:
90:64:30:20:cf:89:39:1a:a6:d5:ce:64:00:02:b6:
74:44:74:61:40:1c:93:95:e6:c5:d5:e7:2a:cb:92:
30:81:fe:43:04:2d:f9:c9:e8:81:02:88:ce:20:d6:
e0:f5:73:b7:08:27:30:dc:ac:e5:b0:32:f0:db:2b:
cc:67:f5:db:83:f9:4e:5b:0a:be:b6:f1:f4:ae:54:
5d:73:5d:a1:19:1e:61:4d:f2:9e:8e:6e:89:b8:7e:
3a:c5:b9:99:21:43:b3:ab:27:34:5e:63:02:2b:0c:
d7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:FA:24:EF:A0:11:4E:E5:4A:8F:4D:55:43:44:2C:BD:90:A3:1D:27
X509v3 Authority Key Identifier:
keyid:4E:D3:24:CC:C0:90:B8:31:82:99:17:AE:AF:73:83:4F:08:34:4A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:e4:79:6e:38:d0:ff:56:36:c9:22:38:05:51:dd:69:3d:5f:
b0:c3:ca:4e:fa:ad:5c:98:fb:b9:c8:31:8a:6b:ea:37:3b:a9:
6a:6a:9c:08:c5:f9:d9:c2:92:a1:29:5b:8e:f6:55:98:d7:8e:
7f:9a:36:14:12:54:cd:1b:6a:f0:17:64:33:57:2b:f3:5f:18:
ff:51:64:f4:26:ef:67:8f:fe:17:2e:89:8f:e7:4c:ce:23:03:
ec:ef:32:40:9d:a1:bb:52:21:a1:b9:f3:36:65:d9:bc:8a:73:
52:d7:1f:50:85:f5:ee:66:51:71:03:da:63:b7:24:3a:67:92:
7a:02:9c:e2:7f:ff:2f:3a:9c:ab:4e:84:e8:ca:17:90:b6:80:
9d:e9:2f:a7:87:06:b3:0f:a2:81:a0:f5:ee:b4:58:8a:3d:8f:
cd:9d:25:2c:9a:c5:cd:0d:fb:56:18:3b:48:3e:93:9b:09:4a:
e2:11:df:2e:ff:46:cf:47:92:67:54:6a:79:bd:0f:00:4b:85:
58:da:66:7a:94:0f:62:af:77:6a:13:b5:31:18:cf:5d:b0:4c:
9e:af:e3:3d:44:6e:71:9b:ed:01:69:ce:2b:a0:92:db:12:ac:
e1:99:e3:3d:cf:dd:2f:5f:c8:6e:1d:12:ab:06:37:aa:56:4b:
b8:58:27:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 08:07:35 2025 by rpki-client