Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft
File: Tt5MZdc1r3knftFOtsTPVATHiNU.mft (raw, json)
Hash identifier: ueBEDHAy/3ud17g6MiwBppT60+iC6TOHeWh4MUmSjPc=
Subject key identifier: 24:B5:FE:59:C1:87:9B:FE:47:4E:FF:4E:AA:FF:41:F7:3D:C9:97:FD
Authority key identifier: 4E:DE:4C:65:D7:35:AF:79:27:7E:D1:4E:B6:C4:CF:54:04:C7:88:D5
Certificate issuer: /CN=4ede4c65d735af79277ed14eb6c4cf5404c788d5
Certificate serial: 019846D2144D1E46ED80230C66633B398088
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tt5MZdc1r3knftFOtsTPVATHiNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft
Manifest number: 0840
Signing time: Sat 26 Jul 2025 13:00:29 +0000
Manifest this update: Sat 26 Jul 2025 13:00:29 +0000
Manifest next update: Sun 27 Jul 2025 13:00:29 +0000
Files and hashes: 1: CNpxwuWXiobnr753WTcJ-SvZEQU.roa (hash: +W4soYxTO8aYTDMgF940blaVc3sdpMhU9iF5WZMoCzU=)
2: Tt5MZdc1r3knftFOtsTPVATHiNU.crl (hash: jDMOuB0BwvDQdpBepoHnoKQhj/VxwzlpC7cRmvgP+og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tt5MZdc1r3knftFOtsTPVATHiNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d2:14:4d:1e:46:ed:80:23:0c:66:63:3b:39:80:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ede4c65d735af79277ed14eb6c4cf5404c788d5
Validity
Not Before: Jul 26 13:00:29 2025 GMT
Not After : Jul 27 13:00:29 2025 GMT
Subject: CN=24b5fe59c1879bfe474eff4eaaff41f73dc997fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:0d:21:1d:0a:e6:2e:5c:63:6f:60:81:c7:08:
ac:91:4b:12:bd:12:aa:56:3e:c5:a0:99:94:87:bf:
70:9e:7a:5e:eb:e9:3d:83:13:3c:da:06:7e:6f:ef:
c6:65:48:90:14:41:e4:41:ff:22:61:3f:a3:63:e4:
3c:07:46:7a:9c:b2:b0:b8:69:3a:8e:e2:d6:74:49:
58:1e:14:28:96:c7:3d:80:8c:33:8b:3d:16:5d:38:
fe:4d:bd:0b:fa:89:0f:02:0d:d4:e9:ae:48:09:f8:
46:e5:3d:be:6e:ec:98:a2:71:9b:f1:10:6e:df:fb:
90:cf:47:35:89:8a:a4:99:66:db:c4:21:66:74:ac:
19:63:b4:06:68:c5:ae:f8:5c:7f:73:2f:eb:a4:75:
41:30:51:56:29:fb:11:3d:7c:3c:40:35:13:35:8b:
3b:48:af:0e:5c:2c:6a:0f:c1:97:20:c9:b6:89:0b:
73:d6:e9:47:01:7b:b9:6e:07:21:2a:ae:a9:1e:57:
c7:3a:16:8c:07:be:a9:b8:0f:95:ff:c1:7f:28:43:
77:62:91:28:56:66:eb:ee:17:5b:52:f9:a7:db:fe:
70:40:34:2e:3c:cc:2d:b6:4d:30:7a:d1:25:2b:14:
5c:e4:c7:f7:98:84:b8:1b:82:56:5f:2b:ae:ba:93:
3b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B5:FE:59:C1:87:9B:FE:47:4E:FF:4E:AA:FF:41:F7:3D:C9:97:FD
X509v3 Authority Key Identifier:
keyid:4E:DE:4C:65:D7:35:AF:79:27:7E:D1:4E:B6:C4:CF:54:04:C7:88:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tt5MZdc1r3knftFOtsTPVATHiNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:0d:1d:39:7b:80:d2:42:c8:0b:43:18:c6:91:c0:0d:50:01:
b4:c4:b7:9b:88:e1:81:e3:ae:95:ca:54:75:1f:62:79:60:e9:
ef:ba:7a:8c:bf:b8:f9:aa:5f:2b:b0:8f:0f:2b:99:0f:a1:f6:
87:79:e2:59:d4:ed:03:13:6d:44:9c:57:4d:79:ea:a4:ab:cc:
1c:f6:27:9a:d5:79:05:0b:66:be:ef:dc:91:71:a8:13:b0:5f:
a2:ec:8c:a8:b5:38:e8:e5:0b:11:49:d8:42:bb:92:e7:c4:42:
4b:8b:7e:56:a5:06:4a:2d:cf:32:6c:5e:27:bf:5a:a7:0f:16:
1d:f4:de:22:91:db:2e:bd:48:a3:63:f9:b2:84:45:d3:f1:e6:
37:ee:bc:3a:b1:9f:bc:00:3f:93:eb:35:49:51:95:a7:04:f0:
41:e1:0b:e5:9f:3e:46:43:67:44:5e:21:1f:01:03:8a:ff:44:
c7:6a:02:93:2d:af:02:5e:da:7b:2d:69:2c:9f:2d:52:a3:ef:
2e:b0:8d:4c:8e:c7:84:b9:17:07:80:e5:c1:1d:6f:8f:bc:68:
56:5a:ed:ce:4d:28:c6:13:67:c6:ee:2a:0c:f2:36:f8:9d:21:
0a:57:6e:5d:99:b8:f0:df:93:d4:39:13:7e:6f:4d:a2:13:a4:
cf:bc:51:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:28:01 2025 by rpki-client