Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
File: TTAqLdUXpho7lSdG8u6fvkNtY0k.mft (raw, json)
Hash identifier: scz3a3Wdn0vBzIPQVWiMmOXZruCAVCLqLaNTW4oGt74=
Subject key identifier: BF:60:9E:7E:4D:3C:FF:32:E3:2A:22:13:7F:DD:BD:D2:7B:5B:1F:E7
Authority key identifier: 4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
Certificate issuer: /CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Certificate serial: 01987ABFEAB1CE4D478D444B1DF6A9730058
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
Manifest number: 161F
Signing time: Tue 05 Aug 2025 15:00:54 +0000
Manifest this update: Tue 05 Aug 2025 15:00:54 +0000
Manifest next update: Wed 06 Aug 2025 15:00:54 +0000
Files and hashes: 1: OS7c8-e6_IPhh6UsfkxpmetgvVM.roa (hash: u4NSl9jjxeT5MDlBDBHxspeJOasrj/ytcidQr1I6tQs=)
2: TTAqLdUXpho7lSdG8u6fvkNtY0k.crl (hash: 2WU1eCrGeebkh+wWuZEcPrVvKSiBZhWntYeUXdTrTJg=)
3: ujFYCfp3NT3vzURuQfX3QSbCmrc.roa (hash: Mq+9HfcpF+4pzQa3kfg+LdSo4w+vmYd+Egj8pIwlOE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:bf:ea:b1:ce:4d:47:8d:44:4b:1d:f6:a9:73:00:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Validity
Not Before: Aug 5 15:00:54 2025 GMT
Not After : Aug 6 15:00:54 2025 GMT
Subject: CN=bf609e7e4d3cff32e32a22137fddbdd27b5b1fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3b:b5:43:ca:76:15:1a:7e:ec:ac:6a:ac:a0:
16:45:bb:18:30:b4:2e:8b:f4:3f:44:49:13:9e:4e:
b4:89:45:20:1b:12:f0:3b:23:85:e0:c6:e7:aa:75:
b2:49:67:21:99:51:3f:b4:4f:e6:59:0c:fc:9e:9a:
a0:26:b5:4c:ee:e6:05:61:8a:9c:c7:18:e9:b8:a1:
57:19:ac:85:1a:da:00:f9:0e:eb:08:d3:4b:b0:c5:
c0:0e:d2:65:48:99:ae:15:11:24:0c:94:20:ec:c5:
7b:98:02:3f:06:e0:a1:1f:35:97:2d:3f:d5:51:62:
e6:b7:70:85:c1:8a:a0:96:4d:b4:f7:4e:70:e6:42:
69:2e:1e:11:b4:82:37:e7:99:03:51:1c:01:9a:5e:
c9:0a:27:2f:13:cc:42:33:ef:e8:2b:7d:a8:c3:0d:
9e:7e:8b:31:ff:55:a9:d2:34:7d:bd:d1:43:32:99:
54:d4:e0:bc:02:21:11:f1:fc:e0:2a:d1:b4:94:bf:
be:58:a4:a7:39:95:60:be:f6:84:00:82:a3:e1:6c:
ba:b0:28:ff:c3:c4:92:e1:21:6b:25:47:4b:65:82:
bf:a6:8d:2f:8e:ff:7d:3c:d2:88:29:98:0c:0c:60:
f2:2f:bb:65:11:65:40:e3:10:fc:87:c2:39:a2:99:
f1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:60:9E:7E:4D:3C:FF:32:E3:2A:22:13:7F:DD:BD:D2:7B:5B:1F:E7
X509v3 Authority Key Identifier:
keyid:4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:b8:e4:48:10:44:96:08:9f:5a:3d:31:8c:d9:1f:ab:59:e9:
e1:e2:dc:d6:aa:1c:02:ac:ab:69:08:ac:3a:09:ef:72:f3:e9:
16:db:ac:d7:ad:b5:18:8d:f4:b0:cf:61:c3:92:02:42:e2:38:
56:78:7f:a5:00:27:8b:ed:39:ea:f1:39:dd:db:e6:8a:51:5c:
0c:ac:00:ec:ab:41:1d:9c:97:e9:6b:27:4d:91:9c:d1:10:81:
40:02:ac:68:68:04:ab:2d:7c:4d:39:5e:75:c1:1b:33:9b:25:
51:71:c5:37:b3:12:72:45:74:7b:29:39:48:92:d3:eb:c2:48:
38:6f:69:cd:29:bb:fc:e3:14:1e:46:a6:45:cc:10:c0:46:48:
73:9e:fb:d6:ec:20:7c:46:26:48:ee:51:e5:9e:ba:dd:8b:de:
37:72:08:35:16:25:2a:74:77:f6:f9:3d:81:0e:7c:0f:07:c8:
52:e5:dc:c2:62:f2:bf:d2:95:d0:c8:67:de:a5:4f:4c:75:47:
3e:52:44:4d:02:9a:2a:ad:c1:30:a1:25:6c:c8:89:d1:79:f2:
a5:03:67:2b:6c:9a:95:50:46:e6:e2:b6:0c:5b:4a:09:9a:c9:
cf:14:51:b3:91:9a:f7:62:3c:35:f1:77:8c:e5:5d:b5:78:0b:
61:3b:65:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:16:10 2025 by rpki-client