Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft
File: Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft (raw, json)
Hash identifier: h7XyNbKG4KiyDjCAR36zAtCVRRwCiJdVZESvQwkbRpE=
Subject key identifier: 0C:85:EE:D8:9D:81:44:4F:74:A4:7A:20:FD:1D:E5:E5:BE:72:B2:52
Authority key identifier: 4E:DC:68:9B:B2:2D:09:47:55:74:F4:1C:0E:5D:97:C0:45:93:09:28
Certificate issuer: /CN=4edc689bb22d09475574f41c0e5d97c045930928
Certificate serial: 01987418E4F05376D4124AC5C920F5F97317
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ttxom7ItCUdVdPQcDl2XwEWTCSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 08:00:45 +0000
Manifest this update: Mon 04 Aug 2025 08:00:45 +0000
Manifest next update: Tue 05 Aug 2025 08:00:45 +0000
Files and hashes: 1: Ttxom7ItCUdVdPQcDl2XwEWTCSg.crl (hash: O2BKreGbytO8m2gMiw/7nK1Rb3fkjreuhmGS639R5QQ=)
2: zj8x9LPhXlzEHQ9u1uzhgnhO97g.roa (hash: e3RgXnvTwkUusOiV6XnE/u7ua1aPibK0pF3ch7NYWK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ttxom7ItCUdVdPQcDl2XwEWTCSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:e4:f0:53:76:d4:12:4a:c5:c9:20:f5:f9:73:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4edc689bb22d09475574f41c0e5d97c045930928
Validity
Not Before: Aug 4 08:00:45 2025 GMT
Not After : Aug 5 08:00:45 2025 GMT
Subject: CN=0c85eed89d81444f74a47a20fd1de5e5be72b252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ec:2a:0c:b5:3b:4c:60:1a:5a:5b:6d:5f:03:
98:58:71:9d:31:0d:a5:be:cf:c3:6c:c0:f9:03:b7:
09:16:51:f9:65:2d:cd:6b:45:d6:c4:df:40:cf:c5:
b7:10:b1:e8:a9:0a:72:ca:4a:29:6c:ee:64:d2:85:
3b:b7:bf:b3:e2:22:e9:81:33:1c:88:8b:b2:49:81:
54:66:f5:b9:91:76:f3:c7:82:1e:08:18:09:3e:33:
64:df:2b:4d:7e:c0:07:ca:9a:15:83:df:55:78:09:
e5:22:df:e6:8f:b6:b4:6a:b2:10:62:5a:0b:a0:e3:
c1:ac:02:db:fa:b1:74:f9:b8:99:4c:0e:9c:01:e1:
1a:cf:e4:74:75:5f:da:ec:64:84:57:17:f4:51:c4:
4c:d1:86:54:4f:ac:96:28:91:44:de:0c:08:0a:ad:
27:66:97:47:6b:8d:fb:0f:16:3d:d1:cf:cb:c8:84:
87:a5:9b:09:00:c0:66:1f:55:b0:24:be:a1:f4:35:
04:ae:bb:80:7f:9c:88:14:4d:c8:8e:87:09:87:6f:
ef:c7:17:8b:e6:01:17:9b:fa:93:2d:cc:36:67:da:
8d:47:fa:19:bd:b9:95:cf:87:15:3e:45:ed:49:d2:
6b:ae:1a:cc:3b:59:de:77:30:a5:36:90:e9:51:2a:
73:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:85:EE:D8:9D:81:44:4F:74:A4:7A:20:FD:1D:E5:E5:BE:72:B2:52
X509v3 Authority Key Identifier:
keyid:4E:DC:68:9B:B2:2D:09:47:55:74:F4:1C:0E:5D:97:C0:45:93:09:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ttxom7ItCUdVdPQcDl2XwEWTCSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:83:fd:05:47:17:6f:b6:9f:43:e9:bd:1f:50:3d:47:51:09:
57:6a:60:fe:84:58:60:3a:4d:2c:23:e2:27:c4:b7:ab:d5:42:
e7:ee:1d:1f:24:db:bc:71:68:1d:e5:72:de:8b:f9:58:bf:1f:
25:07:c2:41:5a:1f:60:7d:ca:c5:18:cd:3d:06:fd:ea:c8:b5:
0b:86:14:42:48:23:d0:fb:e2:18:ba:65:b8:81:e3:a9:9d:43:
fd:b8:93:ea:ab:93:90:3e:03:47:68:cc:0d:8f:87:ca:ba:28:
fa:bd:8b:e2:16:a3:cc:dd:04:47:57:30:17:5b:e2:88:a1:18:
0c:f8:6b:9a:c4:da:ed:22:f4:ea:e2:34:f2:92:d5:91:3c:ff:
e1:a9:20:63:72:30:cd:45:0e:70:c9:ea:9b:cd:c4:ba:4b:af:
d1:91:8b:b9:5c:00:3f:5d:cc:cd:7a:3e:8e:25:42:4c:42:9c:
08:95:7a:69:23:ba:35:4e:2b:c6:0f:ca:59:92:f2:04:5f:b9:
17:5e:4c:54:14:29:1f:14:c5:a8:b9:49:e4:f8:ee:e4:11:9b:
b9:2a:3f:35:80:5c:bc:9a:8f:de:2e:db:45:41:a9:83:72:7d:
24:45:f7:ff:62:5f:32:31:9f:44:43:46:4a:a0:1d:31:00:8c:
4f:31:3e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:36 2025 by rpki-client