Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
File: TTAqLdUXpho7lSdG8u6fvkNtY0k.mft (raw, json)
Hash identifier: ovTTud5/cRc1FL7YzYVSdWvSsqSklkw28b/MDz9rDm4=
Subject key identifier: E3:8F:09:4F:8F:23:E4:71:37:B8:85:C1:37:57:8F:33:5C:EF:3D:BA
Authority key identifier: 4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
Certificate issuer: /CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Certificate serial: 01976E5040181EB27CF8E19B07787D0EC3C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
Manifest number: 1594
Signing time: Sat 14 Jun 2025 12:00:42 +0000
Manifest this update: Sat 14 Jun 2025 12:00:42 +0000
Manifest next update: Sun 15 Jun 2025 12:00:42 +0000
Files and hashes: 1: OS7c8-e6_IPhh6UsfkxpmetgvVM.roa (hash: u4NSl9jjxeT5MDlBDBHxspeJOasrj/ytcidQr1I6tQs=)
2: TTAqLdUXpho7lSdG8u6fvkNtY0k.crl (hash: ftM8UG6vXSwt/zOhgefOSLnIHU6mqVwjFy5tfDwgDnw=)
3: ujFYCfp3NT3vzURuQfX3QSbCmrc.roa (hash: Mq+9HfcpF+4pzQa3kfg+LdSo4w+vmYd+Egj8pIwlOE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:50:40:18:1e:b2:7c:f8:e1:9b:07:78:7d:0e:c3:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Validity
Not Before: Jun 14 12:00:42 2025 GMT
Not After : Jun 15 12:00:42 2025 GMT
Subject: CN=e38f094f8f23e47137b885c137578f335cef3dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3b:81:64:f7:39:bf:03:4a:35:f2:12:2a:12:
d8:83:78:9f:8f:34:dd:e7:52:b5:72:f4:85:dc:95:
d1:c1:f8:46:e6:dd:07:ad:4a:74:67:44:a0:a4:f8:
bf:76:0e:aa:ab:b6:7f:90:01:e7:a4:27:94:6a:29:
b8:99:32:bb:81:73:87:2c:4f:0f:99:54:52:93:1c:
2d:55:11:f0:96:19:25:5b:9a:35:5f:8a:3e:5d:89:
58:6c:a6:dd:27:df:e9:b9:b6:eb:61:fa:bf:f4:6f:
12:c4:ef:5c:fb:1d:66:5e:71:e9:2a:e0:dc:09:c3:
29:01:1d:e5:30:b8:9c:05:c2:81:79:90:c0:7c:bb:
c9:98:09:7f:0c:9e:11:cf:17:07:57:f1:c1:ea:32:
33:04:df:2d:e2:61:1c:e6:6a:2a:34:b1:a4:02:40:
cc:23:fb:fb:ec:c9:5b:13:20:5f:f0:92:57:2e:76:
99:88:7f:6e:5e:e0:fc:43:46:52:c2:a8:9a:f3:dd:
0d:a3:4e:ee:3c:11:dc:e9:39:5c:1c:8c:13:81:b0:
7f:e0:94:3c:e7:a0:6c:e6:59:fe:4e:f8:74:e9:03:
b2:55:7e:c4:94:19:71:a5:81:da:ee:d9:7e:56:b0:
a8:3f:1a:23:89:ca:1d:ff:21:a6:d0:82:76:d0:09:
4c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8F:09:4F:8F:23:E4:71:37:B8:85:C1:37:57:8F:33:5C:EF:3D:BA
X509v3 Authority Key Identifier:
keyid:4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:1c:7e:46:5b:3d:fb:f2:71:64:b3:44:ee:08:01:89:a7:d3:
b5:67:74:97:40:29:36:2d:e6:52:28:0f:67:fb:72:67:41:69:
78:57:5c:b2:a7:b0:77:e7:00:21:c0:e7:ea:fd:02:51:f4:39:
cc:66:34:a8:f5:5e:ce:66:42:d2:a4:18:f6:59:2f:ed:e1:64:
00:e4:16:cf:1d:6f:e9:3c:f0:9c:7e:5c:d1:ae:de:fa:db:f4:
d1:14:93:8c:68:63:db:eb:74:71:da:4c:ef:c1:14:b6:ec:76:
8f:97:37:84:3e:9c:b9:68:fa:43:c8:8f:fb:02:73:b5:13:f2:
23:84:bd:cd:19:19:47:35:6e:de:9d:77:d0:0f:a4:7b:4e:02:
53:79:a9:d9:a9:0d:65:b4:09:7c:78:ec:3e:8f:24:5a:c7:d4:
84:49:3c:e0:4f:bc:10:15:bd:95:65:c0:9b:c3:cd:d9:88:f2:
4f:1d:11:a2:c5:d2:68:0c:38:e6:a3:1e:58:ab:0a:b9:d9:59:
1d:85:ca:63:89:ec:31:4a:03:86:9f:c3:d1:cc:fd:7f:70:15:
38:85:3b:5b:a5:92:b1:1e:f2:f2:7f:9c:9b:4e:4f:cb:d5:bd:
65:83:77:27:5a:37:5a:c3:d8:57:cd:77:b9:14:2b:d6:ea:27:
87:95:e1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:48:40 2025 by rpki-client