Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
File: ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft (raw, json)
Hash identifier: irudLfTL+f/+ES8z7v0Av/9K3gK+BWqgHy0NwBDv5nM=
Subject key identifier: 83:5B:AB:B2:61:FC:69:90:CC:A5:BB:DA:D0:31:F2:CD:F8:59:38:7F
Authority key identifier: B6:D7:F3:68:FA:1C:F5:B1:AA:AA:76:B0:F1:F2:3C:06:75:0A:84:26
Certificate issuer: /CN=b6d7f368fa1cf5b1aaaa76b0f1f23c06750a8426
Certificate serial: 019854569FB81EE6F8464C5F54603DDC777E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
Manifest number: 04DC
Signing time: Tue 29 Jul 2025 04:00:19 +0000
Manifest this update: Tue 29 Jul 2025 04:00:19 +0000
Manifest next update: Wed 30 Jul 2025 04:00:19 +0000
Files and hashes: 1: mgO2bfWYu0Z3yfKtycB0eHY39X8.roa (hash: 60DQx4kpFtDfON86MP27ODodoK2c+Xs/qbF18XYACcg=)
2: rg97vUvro1QUCZLNC-zT_PYGVh8.roa (hash: iZBiJSmpj/Q8UocwtFDbOX3xmzAVEyiNjKTvOdI8ZqE=)
3: ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl (hash: /eL1HbRTKuNHXgg1IuJuDKOEdnxSHSekLQIvwVcKVbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:56:9f:b8:1e:e6:f8:46:4c:5f:54:60:3d:dc:77:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6d7f368fa1cf5b1aaaa76b0f1f23c06750a8426
Validity
Not Before: Jul 29 04:00:19 2025 GMT
Not After : Jul 30 04:00:19 2025 GMT
Subject: CN=835babb261fc6990cca5bbdad031f2cdf859387f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0e:60:b8:9e:e5:e2:84:10:57:81:72:77:71:
66:2a:7e:e8:7d:d8:fc:95:17:20:e7:cc:e5:af:ac:
5a:ed:3f:33:d6:62:90:9f:87:5d:e8:b7:d6:07:01:
47:74:65:ba:21:5a:3a:1e:c0:15:e1:39:9f:6e:cb:
67:1d:e9:6f:14:61:20:c3:4c:9b:01:c5:4a:b6:97:
92:63:38:73:28:f0:48:a7:da:ba:43:76:b7:93:63:
d0:82:6f:13:f0:26:7e:7a:06:0e:20:b7:25:0f:25:
95:9c:d4:0c:36:24:cc:59:82:18:28:8f:6e:03:db:
82:11:8f:81:73:70:62:5c:53:0f:8c:90:54:2e:7d:
08:80:e6:64:83:3a:64:22:5f:df:53:9c:ef:8b:09:
81:49:52:fa:4d:dd:a9:51:d1:ec:a3:5a:b3:28:16:
6b:44:81:77:ac:7f:6c:7e:4c:30:6d:09:d1:55:4d:
6a:79:29:4d:11:6c:3f:70:32:d9:c6:d3:b9:31:1b:
46:a5:df:31:94:29:58:48:d5:f4:24:95:05:4b:10:
9c:e0:ab:12:f2:69:1a:77:94:c9:59:20:54:57:33:
50:71:e4:8a:7b:94:71:77:4f:1c:15:8d:3d:b4:c1:
7b:22:be:e2:fb:ae:f6:2e:55:2f:d0:fc:b3:18:a0:
08:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:5B:AB:B2:61:FC:69:90:CC:A5:BB:DA:D0:31:F2:CD:F8:59:38:7F
X509v3 Authority Key Identifier:
keyid:B6:D7:F3:68:FA:1C:F5:B1:AA:AA:76:B0:F1:F2:3C:06:75:0A:84:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:0e:cd:43:7a:fc:d9:8b:85:b8:6a:06:df:ed:0b:23:9f:18:
da:f2:a5:7c:49:9f:86:e7:39:46:e8:a9:f7:21:61:a8:4f:9f:
2c:56:fe:09:3f:aa:4e:e7:8e:04:95:be:38:a2:39:41:be:d8:
18:57:3c:3c:31:ee:83:af:99:7e:95:93:0e:5b:72:a2:3d:31:
e1:58:ea:5c:1c:81:35:62:3a:2d:48:5a:be:97:8c:4e:11:70:
e1:1a:d9:f7:5f:14:3e:09:34:0c:cb:f2:2c:84:06:79:5b:0a:
5e:a2:1c:ba:92:ae:65:c9:91:63:bb:4f:72:fe:9c:be:53:50:
12:4b:32:b6:a2:35:e6:8a:78:ca:63:a7:b5:bb:af:0b:b8:d2:
22:c5:ac:55:48:a3:47:90:88:b1:b0:25:00:75:03:be:a1:ae:
d1:5d:19:dc:c4:d0:68:8b:39:42:71:d9:48:f5:08:29:9f:63:
4e:29:83:c8:ee:b6:07:29:3a:dd:71:3f:84:d0:44:48:90:0e:
58:03:ab:88:62:2f:3c:8f:8d:50:2e:a2:6c:e3:4e:fe:96:c7:
96:52:90:84:4a:9b:e3:2a:9f:2a:cb:d9:69:49:c3:c9:83:04:
3a:de:dd:1b:e2:01:fe:37:d5:94:71:d9:7b:06:b2:8c:95:f2:
e0:3e:ff:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:52:10 2025 by rpki-client