Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
File: TtHX3yWkqdXnJ8QvVenjGD02qTo.mft (raw, json)
Hash identifier: GuGHgXo5EBz0HvkJJG/xaaBQu2KeEDw+lc2ybqtAtxI=
Subject key identifier: 78:CE:BC:26:A0:57:B2:10:E4:CE:01:2C:66:F9:41:40:55:47:E8:6F
Authority key identifier: 4E:D1:D7:DF:25:A4:A9:D5:E7:27:C4:2F:55:E9:E3:18:3D:36:A9:3A
Certificate issuer: /CN=4ed1d7df25a4a9d5e727c42f55e9e3183d36a93a
Certificate serial: 0198933639FAA812D74EBC9AD9C288F4F9BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtHX3yWkqdXnJ8QvVenjGD02qTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
Manifest number: 0FB2
Signing time: Sun 10 Aug 2025 09:01:01 +0000
Manifest this update: Sun 10 Aug 2025 09:01:01 +0000
Manifest next update: Mon 11 Aug 2025 09:01:01 +0000
Files and hashes: 1: GjqXm9JUjjlZZ0PJdXVG1lJFjCg.roa (hash: N8pnAe9jWWy/GU0t4cg3SHXORnEo2+UUYssAVJRTLSs=)
2: TtHX3yWkqdXnJ8QvVenjGD02qTo.crl (hash: B4Yr3PKGrd9C54B1DadvesvY/gae95b2UmedLe+bCd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtHX3yWkqdXnJ8QvVenjGD02qTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:36:39:fa:a8:12:d7:4e:bc:9a:d9:c2:88:f4:f9:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed1d7df25a4a9d5e727c42f55e9e3183d36a93a
Validity
Not Before: Aug 10 09:01:01 2025 GMT
Not After : Aug 11 09:01:01 2025 GMT
Subject: CN=78cebc26a057b210e4ce012c66f941405547e86f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fc:d0:9a:a1:ab:14:10:35:3b:8e:b2:66:de:
50:df:28:9f:b6:70:13:77:91:31:26:8a:d8:19:b8:
e0:82:be:72:4f:81:5c:49:b8:87:0a:7d:eb:26:a8:
56:97:dc:a0:87:9e:61:c3:dc:89:5d:55:9a:17:58:
9b:11:10:ed:f8:f3:e7:b8:94:e5:bb:38:e4:f1:3e:
da:8e:f1:28:59:64:0c:6b:ea:9c:63:b3:bc:72:40:
03:ae:41:43:73:65:f9:62:64:16:ff:15:c1:6e:cc:
46:6d:21:f2:02:33:a6:59:ee:98:72:9e:4b:83:06:
f8:4b:23:d3:f4:8e:66:86:e2:de:86:8f:35:1b:d4:
ec:50:2f:c4:73:b5:b8:cd:97:9a:01:58:95:83:5c:
73:59:f7:0c:49:92:dd:7c:09:66:29:1b:5d:1b:f4:
63:8b:f8:14:1f:6c:83:dd:91:f3:64:81:33:50:2d:
74:fe:88:93:8c:57:ff:d0:17:fa:4b:73:83:a8:4d:
72:70:b8:73:2f:f4:41:57:61:58:d1:30:00:1b:8c:
67:e6:f4:ec:4f:05:4a:3e:87:4a:c4:ec:c2:6f:8b:
ad:60:93:a6:df:bb:93:78:77:20:7c:9a:78:92:2d:
16:6f:8a:67:b4:cd:5f:0b:5b:26:b3:e0:7d:79:dd:
e8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:CE:BC:26:A0:57:B2:10:E4:CE:01:2C:66:F9:41:40:55:47:E8:6F
X509v3 Authority Key Identifier:
keyid:4E:D1:D7:DF:25:A4:A9:D5:E7:27:C4:2F:55:E9:E3:18:3D:36:A9:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtHX3yWkqdXnJ8QvVenjGD02qTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:fc:42:46:f4:4a:b0:c1:1a:e4:38:0f:46:c8:76:58:1f:b5:
16:ff:3d:29:96:09:62:56:15:41:f2:c5:fd:0d:ad:1c:63:ed:
67:aa:9e:a2:32:90:60:1d:c5:a8:80:05:44:e0:40:51:04:c1:
7f:a3:0a:b9:d2:5b:e0:68:7a:f7:6b:49:a1:7c:00:3c:e3:08:
71:82:79:bf:f0:2b:51:f5:4c:f5:a9:79:84:63:b3:6e:68:06:
ec:7f:8e:29:0f:80:ec:80:ae:ae:ee:db:8e:ef:1f:05:c6:a4:
a9:84:1d:fd:55:3c:69:9e:3e:54:57:3d:19:ac:e5:4b:68:ab:
2f:b8:70:22:72:2e:40:a5:d1:5a:5a:62:17:64:9e:12:0a:78:
26:54:cb:22:0f:38:55:3e:ef:35:a6:e1:32:b4:81:33:e4:54:
de:f4:a7:a5:04:d4:20:72:22:20:d4:f3:bb:4b:6e:7c:a2:c2:
63:97:b1:ca:d2:fe:e4:4f:2b:ca:45:cd:a8:b4:33:f7:6c:55:
06:99:6d:ca:00:bb:b4:1a:ff:e3:fd:b1:02:f5:ec:e7:b1:50:
18:a2:9b:e5:eb:2c:16:f4:fb:df:e3:23:4a:e7:56:d2:99:da:
6e:eb:78:bb:64:d9:b0:d6:75:6c:ce:cf:e9:42:c0:4a:6f:40:
0f:91:27:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:47:48 2025 by rpki-client