Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
File: ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft (raw, json)
Hash identifier: DubgtNw0AEtcb3u3Z9NL3mMebvjyfAvBDhlh92octLU=
Subject key identifier: F2:8F:1D:33:C2:CC:34:77:E8:9E:00:50:05:2A:A1:A7:02:A2:56:94
Authority key identifier: B6:D7:F3:68:FA:1C:F5:B1:AA:AA:76:B0:F1:F2:3C:06:75:0A:84:26
Certificate issuer: /CN=b6d7f368fa1cf5b1aaaa76b0f1f23c06750a8426
Certificate serial: 01976AAA84A218B88EBF5E375313985B9735
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
Manifest number: 0463
Signing time: Fri 13 Jun 2025 19:00:49 +0000
Manifest this update: Fri 13 Jun 2025 19:00:49 +0000
Manifest next update: Sat 14 Jun 2025 19:00:49 +0000
Files and hashes: 1: mgO2bfWYu0Z3yfKtycB0eHY39X8.roa (hash: 60DQx4kpFtDfON86MP27ODodoK2c+Xs/qbF18XYACcg=)
2: rg97vUvro1QUCZLNC-zT_PYGVh8.roa (hash: iZBiJSmpj/Q8UocwtFDbOX3xmzAVEyiNjKTvOdI8ZqE=)
3: ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl (hash: tAMv0BINkPGyhA66NhGA3NbKV5LtOeOsab4tZ7+9Y48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:aa:84:a2:18:b8:8e:bf:5e:37:53:13:98:5b:97:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6d7f368fa1cf5b1aaaa76b0f1f23c06750a8426
Validity
Not Before: Jun 13 19:00:49 2025 GMT
Not After : Jun 14 19:00:49 2025 GMT
Subject: CN=f28f1d33c2cc3477e89e0050052aa1a702a25694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a5:52:5b:8b:b8:64:2d:26:28:80:88:b2:38:
b2:12:3c:4e:32:85:ad:80:b7:f7:90:8a:cc:f4:5d:
5d:fb:fd:2c:47:50:1d:10:a5:2d:f6:3c:8d:1f:de:
56:bf:ec:9e:b0:7a:7d:a6:e3:11:c5:26:fe:83:33:
fa:3c:1d:1a:e9:cf:a1:f1:89:03:98:b8:b8:1e:e6:
92:4b:0d:4c:bc:05:26:69:a8:86:5a:38:53:6d:18:
84:4d:25:e3:4c:d0:ca:0d:9f:45:03:e7:53:1d:ba:
18:18:24:97:83:7f:17:83:36:b1:94:a1:4a:db:d2:
de:3b:c0:3c:28:bc:69:43:b4:04:f5:79:84:3a:8d:
21:d9:4f:c2:d1:e3:14:b7:3e:7e:93:c5:87:3a:74:
4c:9b:db:08:36:88:a2:e9:95:7e:61:b7:02:c8:7a:
53:b2:90:b5:d3:c6:d4:41:4c:85:d0:18:5a:d1:28:
ef:81:f7:45:91:6c:80:33:63:b6:83:91:92:04:9e:
ce:53:c8:e2:6e:64:8c:73:c7:82:13:1e:3b:d2:fa:
78:59:a7:ca:f5:ff:a4:b9:23:6d:d8:b8:1c:69:a8:
96:04:d7:05:32:71:2f:f4:71:23:b6:ac:0c:e7:62:
7e:99:7a:ab:07:8c:85:29:d4:48:e2:c6:29:57:ad:
77:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:8F:1D:33:C2:CC:34:77:E8:9E:00:50:05:2A:A1:A7:02:A2:56:94
X509v3 Authority Key Identifier:
keyid:B6:D7:F3:68:FA:1C:F5:B1:AA:AA:76:B0:F1:F2:3C:06:75:0A:84:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:1b:38:f6:1b:01:7b:53:5f:db:ab:5b:7e:6f:5d:0a:f3:d0:
30:c5:36:0f:8a:c1:1b:39:1c:79:9b:b7:e4:3c:61:be:d0:89:
f4:d1:e9:c8:b7:2a:d7:62:81:d5:5b:4b:04:3c:2e:fc:43:b4:
40:e5:51:d2:12:34:b1:52:b4:4c:1d:c7:56:5c:b9:4a:30:56:
60:af:95:76:1b:32:09:42:a7:5d:00:7a:1f:e3:6d:58:97:71:
2a:15:f2:35:11:2e:bd:13:45:de:1c:86:a8:40:e8:52:3e:72:
bf:b4:e8:60:d3:95:29:c0:19:02:f0:6f:ff:35:cb:a3:20:b3:
f4:d8:55:6a:3e:7f:5e:03:49:24:16:85:16:42:f5:b0:fb:4e:
29:a0:23:14:ca:7c:6a:61:44:1c:8e:be:c3:8a:64:16:ae:f0:
81:ed:25:f6:1f:3c:b0:15:62:83:fc:1c:ee:8a:ea:6d:48:3c:
32:5d:70:d7:3f:19:0e:92:18:cb:62:0e:17:1c:9c:7f:48:1d:
a2:dc:e8:ad:9f:22:ac:83:96:19:71:67:2e:5f:29:b9:65:93:
86:7d:70:1b:ea:7c:56:68:e1:0b:9b:e6:c0:e5:ba:6f:98:33:
8b:0e:54:52:a3:62:20:dc:78:ae:61:81:0d:38:fc:8c:a8:78:
3a:29:32:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 00:38:45 2025 by rpki-client