Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
File: TtMkzMCQuDGCmReur3ODTwg0Ss4.mft (raw, json)
Hash identifier: G1eHLwOrCRgR6Poc5m9YbwFj0Vmymew7XkDDRxdfzng=
Subject key identifier: 38:49:18:5A:3C:5E:CC:08:F5:12:03:11:9C:3A:81:5C:34:D4:36:97
Authority key identifier: 4E:D3:24:CC:C0:90:B8:31:82:99:17:AE:AF:73:83:4F:08:34:4A:CE
Certificate issuer: /CN=4ed324ccc090b831829917aeaf73834f08344ace
Certificate serial: 01984250EC62D1D841F93D301A374B3AE788
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
Manifest number: 010D
Signing time: Fri 25 Jul 2025 16:00:56 +0000
Manifest this update: Fri 25 Jul 2025 16:00:56 +0000
Manifest next update: Sat 26 Jul 2025 16:00:56 +0000
Files and hashes: 1: LpPDa_hMKwPOheYcHrNv5BDTWog.roa (hash: 2CoZfLFeobkKqc9qZWTYrYW94wPP5u5Zmz2xUC1WQvs=)
2: TtMkzMCQuDGCmReur3ODTwg0Ss4.crl (hash: A0DLOMtmcFnzr63VfCiNQbihWXDA9zXp1ivdeI5v8DM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 16:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:42:50:ec:62:d1:d8:41:f9:3d:30:1a:37:4b:3a:e7:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed324ccc090b831829917aeaf73834f08344ace
Validity
Not Before: Jul 25 16:00:56 2025 GMT
Not After : Jul 26 16:00:56 2025 GMT
Subject: CN=3849185a3c5ecc08f51203119c3a815c34d43697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c0:41:15:62:c3:a6:02:78:01:ec:04:6d:f3:
9e:8d:52:f3:27:4e:44:e2:58:54:64:6b:55:e8:90:
3d:69:e7:32:45:d6:5c:3a:17:a4:09:99:8c:7f:c4:
fd:f3:1c:2f:98:4c:59:4c:58:5b:f3:24:48:40:ca:
55:3f:fc:70:06:62:8e:8f:3f:63:c2:be:44:f9:72:
ff:45:3f:43:06:80:e7:5d:0b:89:49:3c:c4:55:b3:
ed:d0:1d:d8:cb:89:7e:21:06:16:dc:81:cb:e1:37:
1f:92:73:8f:c2:52:00:b2:98:04:ff:01:92:c9:09:
1e:72:2c:de:e2:3d:b7:72:86:0a:1b:4f:f5:b4:3b:
70:86:cf:9a:18:b5:23:04:37:cb:73:9b:76:eb:60:
a5:06:21:b9:16:26:60:97:d4:6e:9d:fa:e2:f3:15:
89:ab:b4:bb:2c:51:16:95:26:cf:d7:6d:51:19:61:
60:0e:74:13:bc:73:9b:bd:23:92:a0:ce:e9:3f:d4:
60:28:c8:ad:ba:11:4e:07:16:19:8c:4c:0e:32:f9:
4a:2f:12:78:af:01:c2:c1:7c:9a:f0:74:6c:30:43:
8a:49:b4:d8:ab:3a:1b:12:b5:80:e2:3e:2a:8c:4c:
b8:5e:21:19:90:71:5f:aa:cf:2a:33:49:a4:91:08:
a6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:49:18:5A:3C:5E:CC:08:F5:12:03:11:9C:3A:81:5C:34:D4:36:97
X509v3 Authority Key Identifier:
keyid:4E:D3:24:CC:C0:90:B8:31:82:99:17:AE:AF:73:83:4F:08:34:4A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:5a:31:a2:37:d1:da:92:71:e5:33:8c:54:ef:e7:86:e0:2a:
b4:79:5c:67:80:02:f5:87:87:5a:de:14:2e:b1:a5:93:fb:34:
94:8a:a2:84:b1:de:5e:f5:95:20:9d:57:46:77:9f:52:fd:81:
30:ae:ae:5b:41:8a:6f:f8:62:8b:e7:a3:97:34:34:71:74:69:
5f:91:65:c3:54:22:9a:08:e2:c4:e7:e7:05:8f:b1:2f:b7:84:
26:08:8c:61:75:3b:19:35:e7:4d:18:d5:2c:22:95:cc:d2:a6:
ea:1d:d3:48:f7:fe:d4:18:8e:c8:00:81:60:7d:54:3c:20:0d:
14:00:29:d8:46:d5:41:f4:f6:7d:4c:86:f2:b3:f3:26:20:5f:
8c:e7:36:8f:28:88:54:a0:f8:0b:a6:e8:d6:5b:34:5e:98:6c:
2f:94:6a:da:bb:54:cf:de:4a:e6:e0:8a:48:64:67:db:c1:6b:
e7:a6:8a:18:9b:ea:66:21:a5:89:1f:70:fa:a6:d3:61:39:12:
71:55:58:f9:fc:6f:a1:b4:20:f3:c8:0e:97:23:07:51:a9:78:
a5:a2:30:c9:a2:ad:d2:7c:7c:f2:df:c9:ec:3a:8e:9e:70:40:
19:d6:07:48:44:54:1a:72:a7:b8:ce:ea:a2:e5:b9:ec:32:d3:
1d:f1:4c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:31:45 2025 by rpki-client