Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/d885bb-a3dc-4390-bf24-103b17d3eb45/1/TTaHdCvs89CAgu0S6fNHC4LafP8.mft
File: TTaHdCvs89CAgu0S6fNHC4LafP8.mft (raw, json)
Hash identifier: UiITgaCa+skwED0+V6FqjJWVv5SRb7bBxHUZNyiYSds=
Subject key identifier: E7:37:7C:04:F5:60:AE:BD:10:10:3E:33:89:F4:90:F2:05:0A:BB:A2
Authority key identifier: 4D:36:87:74:2B:EC:F3:D0:80:82:ED:12:E9:F3:47:0B:82:DA:7C:FF
Certificate issuer: /CN=4d3687742becf3d08082ed12e9f3470b82da7cff
Certificate serial: 01984C2F728DB1B86B4C727B1EDF8952F373
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTaHdCvs89CAgu0S6fNHC4LafP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/d885bb-a3dc-4390-bf24-103b17d3eb45/1/TTaHdCvs89CAgu0S6fNHC4LafP8.mft
Manifest number: 0CE4
Signing time: Sun 27 Jul 2025 14:00:34 +0000
Manifest this update: Sun 27 Jul 2025 14:00:34 +0000
Manifest next update: Mon 28 Jul 2025 14:00:34 +0000
Files and hashes: 1: TTaHdCvs89CAgu0S6fNHC4LafP8.crl (hash: JVMhp4LlpxBoj0FH7TsW7HRDHGKyn6dach7qxqz0zBI=)
2: ehQIMYmYwJQIMwezxzrnCxQWXrQ.roa (hash: K5j8O7wSUuuth3uj2946HM7L4q3WosF43ObE+K/eL8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/d885bb-a3dc-4390-bf24-103b17d3eb45/1/TTaHdCvs89CAgu0S6fNHC4LafP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/d885bb-a3dc-4390-bf24-103b17d3eb45/1/TTaHdCvs89CAgu0S6fNHC4LafP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TTaHdCvs89CAgu0S6fNHC4LafP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:2f:72:8d:b1:b8:6b:4c:72:7b:1e:df:89:52:f3:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3687742becf3d08082ed12e9f3470b82da7cff
Validity
Not Before: Jul 27 14:00:34 2025 GMT
Not After : Jul 28 14:00:34 2025 GMT
Subject: CN=e7377c04f560aebd10103e3389f490f2050abba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:da:18:22:3e:22:75:5b:2c:2e:1f:52:69:d0:
f7:69:90:be:e3:e3:3a:be:0d:25:ff:5e:f8:f4:a4:
f3:bf:12:b4:05:76:3f:19:b5:1a:ff:59:9d:fd:af:
d2:ab:de:ec:63:a4:e8:15:42:eb:cd:c3:9d:b0:72:
c8:c8:25:11:cd:4a:c5:89:dd:93:e7:a7:6d:0b:b7:
5a:37:35:f7:b1:3c:a2:e0:f6:e0:2d:5d:06:8a:cd:
49:60:bd:d6:4e:86:ce:70:ca:c7:12:78:a5:09:ee:
cf:67:c5:ff:1f:24:be:28:ce:3a:a1:ad:c3:ad:c6:
6f:45:84:fd:8a:bb:32:3c:46:b4:b1:98:14:aa:95:
2f:61:9e:43:8c:a0:37:38:74:f0:c0:1d:b6:ef:47:
1a:90:93:bf:cb:c5:8e:77:52:e3:2f:08:fc:9c:02:
7a:98:95:ca:82:d6:65:b9:86:62:4a:ab:04:c2:71:
cb:d6:7f:94:f0:ec:d6:9e:65:7a:b1:32:bb:ad:67:
ed:92:68:b9:47:1d:28:fd:eb:62:61:ca:6f:0d:9f:
a6:1c:8b:d0:c7:8f:21:78:ae:49:48:a4:b7:5b:12:
a2:5e:45:79:76:0b:cb:db:39:b4:4f:56:de:2c:4a:
ee:cd:1f:67:cc:73:19:2b:22:e0:b8:86:92:04:40:
25:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:37:7C:04:F5:60:AE:BD:10:10:3E:33:89:F4:90:F2:05:0A:BB:A2
X509v3 Authority Key Identifier:
keyid:4D:36:87:74:2B:EC:F3:D0:80:82:ED:12:E9:F3:47:0B:82:DA:7C:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTaHdCvs89CAgu0S6fNHC4LafP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d885bb-a3dc-4390-bf24-103b17d3eb45/1/TTaHdCvs89CAgu0S6fNHC4LafP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d885bb-a3dc-4390-bf24-103b17d3eb45/1/TTaHdCvs89CAgu0S6fNHC4LafP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:de:5d:8c:8c:88:b1:4e:26:6e:57:60:36:5c:fc:17:e8:4a:
f6:5e:86:e6:ab:da:64:7a:7b:47:e5:2a:18:1e:24:40:70:fd:
cb:a9:26:07:bd:5b:ba:7b:8f:70:e2:bf:b9:9f:54:f6:4b:e1:
91:3d:27:b6:f1:ac:7c:b3:fd:af:14:a5:c6:83:4a:6c:12:dd:
c6:84:59:0d:da:c3:ce:47:52:e4:bb:65:4b:48:4d:dd:e8:20:
e3:44:24:3f:b5:2f:8b:e3:b3:b4:15:0d:a8:f9:31:57:83:72:
b8:f5:c2:f5:91:8d:bd:c7:fd:fd:6a:e6:68:65:0c:fb:30:69:
d5:a9:77:17:40:2c:36:ca:6e:80:a4:03:ee:98:e6:5d:3d:13:
7f:3a:5d:fd:a4:ab:3a:bc:95:0b:1a:86:66:8b:08:f8:13:f7:
a9:63:74:fd:9f:3c:ee:e4:be:a7:b8:88:ae:5f:0f:09:37:9a:
79:d1:cb:bf:4f:ec:7f:f3:38:cc:51:ab:b8:d1:9d:9e:fe:6a:
e8:26:2b:08:f2:b3:41:4f:24:ff:d6:42:90:56:b1:d1:09:12:
81:91:a4:85:66:17:93:ee:a4:55:15:ca:e0:e5:8a:c5:fe:d7:
46:b8:af:9f:e3:1b:09:cd:9a:09:b0:82:18:e2:47:e7:c7:39:
32:f0:67:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 17:34:27 2025 by rpki-client