Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
File: TTAqLdUXpho7lSdG8u6fvkNtY0k.mft (raw, json)
Hash identifier: y8HdfDjKoti9GZqEokoyqW3DUJeuFQCjFGQbArYSHm0=
Subject key identifier: 50:F4:00:05:86:CF:55:B0:83:6D:8B:3B:3C:1E:8A:F7:47:0D:FB:DE
Authority key identifier: 4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
Certificate issuer: /CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Certificate serial: 019840D0131E2F982D4BA32B058ECF2F50F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
Manifest number: 1601
Signing time: Fri 25 Jul 2025 09:00:34 +0000
Manifest this update: Fri 25 Jul 2025 09:00:34 +0000
Manifest next update: Sat 26 Jul 2025 09:00:34 +0000
Files and hashes: 1: OS7c8-e6_IPhh6UsfkxpmetgvVM.roa (hash: u4NSl9jjxeT5MDlBDBHxspeJOasrj/ytcidQr1I6tQs=)
2: TTAqLdUXpho7lSdG8u6fvkNtY0k.crl (hash: Gt72V5PbXpePWhnd0T8d9bgQrbd8wuMp5B61l7jrEZc=)
3: ujFYCfp3NT3vzURuQfX3QSbCmrc.roa (hash: Mq+9HfcpF+4pzQa3kfg+LdSo4w+vmYd+Egj8pIwlOE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:40:d0:13:1e:2f:98:2d:4b:a3:2b:05:8e:cf:2f:50:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Validity
Not Before: Jul 25 09:00:34 2025 GMT
Not After : Jul 26 09:00:34 2025 GMT
Subject: CN=50f4000586cf55b0836d8b3b3c1e8af7470dfbde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:66:27:9a:2d:74:0c:03:3a:41:01:4a:3e:da:
18:5c:22:b8:c3:99:dc:32:e1:03:9f:80:e3:d6:6b:
52:c2:86:db:28:a9:a6:b2:09:a8:2b:d0:b0:2e:c3:
42:7b:96:62:d9:08:8c:fb:a4:cc:e6:64:74:da:69:
47:b9:3b:17:c5:45:47:3c:0b:a8:11:ba:19:4d:e5:
fb:f0:55:15:1a:f9:75:c7:d3:94:37:c6:0c:5a:ef:
c1:ac:24:9b:bd:42:0d:14:d2:e0:fe:49:a3:1d:b7:
cc:57:fa:37:d5:d8:dc:8d:db:a2:99:79:d8:a4:83:
cd:fa:fd:11:71:d7:60:a9:68:ad:07:6e:2f:a0:91:
c5:75:65:79:95:f8:97:8d:1d:f6:d8:ba:95:6e:33:
6d:6a:f5:42:10:0e:0c:4f:22:58:47:42:5d:4b:46:
b0:23:9b:31:f0:fc:97:68:aa:45:44:c2:a8:73:7c:
f4:7d:20:cc:86:e2:65:f1:02:f9:65:c1:5c:86:b5:
7a:bb:eb:f2:09:67:aa:ec:7d:19:a3:da:86:f3:75:
13:4b:48:bf:9a:f3:11:14:3a:60:05:6c:96:6c:f7:
e4:a4:f1:4a:ce:6b:97:96:f3:50:50:9d:3e:48:1b:
dc:7c:50:53:64:b1:28:44:ac:04:19:28:9b:95:40:
c2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F4:00:05:86:CF:55:B0:83:6D:8B:3B:3C:1E:8A:F7:47:0D:FB:DE
X509v3 Authority Key Identifier:
keyid:4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:0d:b6:bf:ca:18:a5:1b:7d:c5:2c:64:36:dd:b8:00:d9:e5:
f2:7d:cc:64:69:80:da:d5:c9:78:b8:20:bc:90:8a:e1:61:2e:
f6:ca:d4:14:53:2c:85:1d:10:d1:3d:c3:be:b2:de:d6:4d:b5:
54:db:0c:80:a0:35:4e:90:35:fd:62:f6:e2:c5:25:26:51:66:
a5:29:04:68:d4:64:4f:da:18:f6:3e:74:b5:73:dd:f3:bc:22:
b5:8f:b6:c0:7f:48:2c:2c:d7:a9:7d:ac:83:a7:b6:b9:39:6f:
72:c4:42:74:ba:d1:5a:4a:97:3c:31:f4:f3:63:fe:0d:fc:a0:
49:49:1b:dd:42:36:e4:f8:85:66:bb:ab:b6:c4:6c:a0:22:b8:
ae:ab:11:15:54:13:5e:22:7b:1b:07:e2:ed:f1:66:06:7e:82:
52:c4:26:72:6d:08:13:b4:40:86:06:61:4c:a6:c9:54:26:2e:
66:b2:31:c0:d1:01:a2:7b:f3:c0:41:70:f1:85:2a:58:ab:70:
47:a3:32:a4:ac:7a:11:c0:6c:23:f6:8d:7e:f5:0b:44:d0:c9:
6c:ca:47:be:0f:9a:19:3b:35:31:c0:f5:79:b4:e6:f5:a0:5e:
82:2f:7b:86:de:98:97:9d:b8:1b:7c:50:35:0a:6d:99:90:58:
49:6c:b1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 13:44:55 2025 by rpki-client