Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
File: ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft (raw, json)
Hash identifier: TLS+W1XLp0qZxUDommYPHj/eDLo72p5gfWMlRMKw9d0=
Subject key identifier: AC:08:86:3F:64:D5:38:71:E5:64:C6:B2:D9:DD:AF:D8:78:21:56:48
Authority key identifier: B6:D7:F3:68:FA:1C:F5:B1:AA:AA:76:B0:F1:F2:3C:06:75:0A:84:26
Certificate issuer: /CN=b6d7f368fa1cf5b1aaaa76b0f1f23c06750a8426
Certificate serial: 01975B370847A7741C9C8D5B57F6835B06D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
Manifest number: 045B
Signing time: Tue 10 Jun 2025 19:00:22 +0000
Manifest this update: Tue 10 Jun 2025 19:00:22 +0000
Manifest next update: Wed 11 Jun 2025 19:00:22 +0000
Files and hashes: 1: mgO2bfWYu0Z3yfKtycB0eHY39X8.roa (hash: 60DQx4kpFtDfON86MP27ODodoK2c+Xs/qbF18XYACcg=)
2: rg97vUvro1QUCZLNC-zT_PYGVh8.roa (hash: iZBiJSmpj/Q8UocwtFDbOX3xmzAVEyiNjKTvOdI8ZqE=)
3: ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl (hash: 2nPNyVL553BVcdB+HscMtnEIPKtmZ7o9M0NOMdjKq8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 19:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:37:08:47:a7:74:1c:9c:8d:5b:57:f6:83:5b:06:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6d7f368fa1cf5b1aaaa76b0f1f23c06750a8426
Validity
Not Before: Jun 10 19:00:22 2025 GMT
Not After : Jun 11 19:00:22 2025 GMT
Subject: CN=ac08863f64d53871e564c6b2d9ddafd878215648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bc:30:e6:4d:9e:c5:65:e3:ed:d8:a2:58:55:
ea:ea:e5:80:85:69:0e:56:ae:85:19:96:a4:03:59:
be:bc:3c:e1:a7:b9:b9:ca:7c:61:14:75:49:c9:2f:
ec:6e:12:5b:2f:09:04:89:92:4d:b7:14:fc:11:7e:
1c:25:87:4b:73:60:94:13:43:1d:d5:8b:a3:d6:f9:
c8:0d:8b:6e:c8:68:3a:eb:c8:05:20:1c:4c:32:de:
c9:18:47:c4:e8:6e:f8:91:f0:e6:ce:f9:65:d7:12:
a6:2f:60:74:23:de:38:5f:3f:3d:9d:ff:72:8c:e6:
2b:29:88:a4:ca:e0:63:ec:1b:cc:78:26:2a:ba:38:
84:c8:d6:04:45:a2:18:63:a7:f3:85:8f:6d:80:56:
5b:c9:4a:7c:07:c2:32:8e:0e:0a:40:99:6d:80:4b:
70:fc:e2:d3:46:27:e2:8e:77:fd:23:71:2a:91:4f:
b3:0b:39:a6:1a:b9:0f:62:91:5c:4b:22:35:3f:e2:
0f:c6:a5:ef:7f:12:4f:3f:d1:a4:28:27:65:3f:45:
ad:61:a4:2f:6c:a7:8b:e4:15:9a:9e:dc:30:5c:38:
06:0a:05:e2:ff:8b:4c:af:a8:9e:c0:92:4e:d8:ee:
84:4f:72:4b:89:d1:40:2f:6d:04:f8:d6:14:29:b9:
66:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:08:86:3F:64:D5:38:71:E5:64:C6:B2:D9:DD:AF:D8:78:21:56:48
X509v3 Authority Key Identifier:
keyid:B6:D7:F3:68:FA:1C:F5:B1:AA:AA:76:B0:F1:F2:3C:06:75:0A:84:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:c9:a4:4d:a6:14:73:83:e7:9c:44:d3:b6:2a:82:4e:50:48:
8f:6a:e1:38:2c:8b:48:ca:59:76:b9:10:d4:19:82:a4:c9:48:
09:4b:8d:c8:0e:81:0f:a1:fc:cf:75:3b:65:d6:0f:6d:76:10:
32:06:da:84:5c:b5:f9:fb:de:95:6a:c5:88:83:75:27:82:47:
4a:72:97:34:23:9a:b4:bb:c8:64:9f:60:f6:93:0c:29:cf:dd:
60:e4:db:bc:47:96:58:ca:b1:ad:bb:c3:27:03:ed:3f:ec:5d:
21:5a:85:f8:4a:89:49:bd:49:9a:76:b3:db:e6:4f:83:e0:6f:
d4:4e:df:31:61:f0:da:79:e5:84:2b:89:94:93:55:a7:00:71:
66:2e:7b:46:85:37:4b:c6:8c:3a:d0:02:47:22:77:58:01:b3:
27:15:e4:31:27:ea:81:e8:e1:43:7e:e5:72:1e:ea:59:05:58:
a4:0f:e0:99:bc:b6:58:25:04:4f:f8:d6:43:f6:d1:06:32:ab:
25:3d:63:69:9c:aa:f6:44:de:d7:b0:42:eb:41:f4:a7:4e:2f:
f2:08:7e:8e:96:5b:15:65:88:6c:a8:54:d3:53:bb:da:bd:4b:
7d:dc:39:78:74:0f:0d:0f:6f:eb:bd:3e:b3:66:e5:39:42:4e:
99:a6:47:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 02:05:08 2025 by rpki-client