Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.mft
File: ttFBGNvSJymNqoDHrKsR7qbWPiE.mft (raw, json)
Hash identifier: L2yuQiXDwFAd41/1SJ18WzV2FgxQmMsrXwkOgNl1o1I=
Subject key identifier: C0:0C:96:E3:C6:6F:0A:66:89:5F:03:7F:7D:AF:11:E4:F7:52:F3:71
Authority key identifier: B6:D1:41:18:DB:D2:27:29:8D:AA:80:C7:AC:AB:11:EE:A6:D6:3E:21
Certificate issuer: /CN=b6d14118dbd227298daa80c7acab11eea6d63e21
Certificate serial: 01984AE5E500545A947D33642CDB2B8FF78F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.mft
Manifest number: 1617
Signing time: Sun 27 Jul 2025 08:00:36 +0000
Manifest this update: Sun 27 Jul 2025 08:00:36 +0000
Manifest next update: Mon 28 Jul 2025 08:00:36 +0000
Files and hashes: 1: 7MBZP4USFz5hPGotD8N5VTxiCh4.roa (hash: xrZIN20uzCUHnquaIR7JyCpdhy6O1fXdg0ZyfCtPx1A=)
2: _-vCy7ICzJgkXfJZ75qxspKlSv8.roa (hash: jMbO+xgYxKlWrIGWglTequYy9eTc9dUkDdUL8kvtI4s=)
3: ttFBGNvSJymNqoDHrKsR7qbWPiE.crl (hash: gejTqR7D5Ocrj5refTcZOEkLzplT2lMmTvHadcVGMJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:e5:00:54:5a:94:7d:33:64:2c:db:2b:8f:f7:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6d14118dbd227298daa80c7acab11eea6d63e21
Validity
Not Before: Jul 27 08:00:36 2025 GMT
Not After : Jul 28 08:00:36 2025 GMT
Subject: CN=c00c96e3c66f0a66895f037f7daf11e4f752f371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:85:91:58:92:8d:d5:20:52:6b:51:01:59:06:
4b:ed:04:f0:26:3f:01:55:bd:3a:58:d2:f6:dd:b9:
bc:77:aa:5e:3c:2e:61:52:38:ad:c7:2b:32:91:43:
12:59:66:87:02:ef:c1:9c:13:b8:1c:2b:9c:40:0f:
f8:e2:a4:0d:48:11:65:97:fb:8a:8e:13:7d:01:18:
d2:c4:6e:9c:ff:80:ee:7a:02:16:aa:b7:bb:3d:0e:
fa:1c:2c:fd:c7:c0:a9:82:e2:47:07:94:ae:f2:7a:
aa:e1:88:fa:06:32:c2:5e:95:35:b7:14:8b:dc:ac:
15:eb:73:5f:39:c4:1e:02:31:1f:89:ad:a5:48:74:
de:27:8e:47:f5:6b:fc:d3:dd:e5:d4:ed:42:6c:b0:
28:47:72:d1:16:cd:da:ac:21:25:1c:6d:35:c2:1f:
81:43:a3:a0:e9:3e:09:3f:d7:e2:0b:ce:69:1e:ad:
cb:65:0b:0f:96:1d:75:68:eb:8b:47:3f:ec:ef:fb:
40:30:50:9a:a6:2d:4c:ab:8d:af:6a:79:8c:7b:d7:
83:15:d4:11:67:98:3a:42:87:10:10:0f:44:16:f8:
48:69:e2:84:81:ae:db:e7:b0:f8:89:68:e8:4f:fc:
80:86:23:70:eb:07:51:77:0e:af:93:e4:6f:11:28:
6d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:0C:96:E3:C6:6F:0A:66:89:5F:03:7F:7D:AF:11:E4:F7:52:F3:71
X509v3 Authority Key Identifier:
keyid:B6:D1:41:18:DB:D2:27:29:8D:AA:80:C7:AC:AB:11:EE:A6:D6:3E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ea:09:e4:e7:61:0e:af:ae:30:2b:66:8c:33:8a:36:95:d1:
e3:f9:52:3d:c0:66:20:96:25:e5:43:05:d6:4b:6d:be:0e:31:
9a:f9:bc:8d:78:4a:53:be:bf:58:6b:40:ad:e9:85:97:f8:4f:
c2:c1:c9:59:9c:38:19:98:4d:67:8c:a9:58:12:8c:2d:58:a0:
d2:5a:d6:d6:57:64:e8:03:1a:d2:15:5c:8d:7f:8c:17:a4:f2:
7e:7c:c3:50:fe:4d:0f:5d:4a:39:c0:29:35:e1:4e:d7:c6:04:
ce:90:ea:1f:a4:bc:63:87:bb:23:a4:8a:3b:01:72:bc:c8:56:
ee:2b:68:28:f2:ee:ff:ab:67:23:3a:28:72:dc:1a:ec:28:4e:
ec:c5:5f:5d:a1:bc:51:83:5e:f2:60:09:0d:17:67:c8:ad:16:
8b:a8:ff:e9:c0:67:c8:f2:73:e1:18:54:66:d4:fb:75:32:a3:
5d:3e:d6:bf:fd:43:48:49:0f:91:74:25:3d:c2:4d:19:2f:36:
44:d2:0a:48:64:ed:ea:c7:80:67:3e:e3:f4:8d:4b:d5:e4:43:
a0:ec:6c:31:b6:04:09:2a:a3:09:18:95:97:93:e1:f8:21:ea:
b5:bc:7a:fd:04:37:bc:ef:a8:18:04:4d:d2:37:5e:02:3b:b1:
4e:68:a0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:04:28 2025 by rpki-client