Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.mft
File: ttFBGNvSJymNqoDHrKsR7qbWPiE.mft (raw, json)
Hash identifier: rsOYHr3x6C7aWWlPIwlJEvh6U/8HduO252nob84hFrM=
Subject key identifier: 52:EC:AD:B9:B1:26:9D:CD:F3:16:D6:0A:A2:50:8E:7E:66:91:63:B8
Authority key identifier: B6:D1:41:18:DB:D2:27:29:8D:AA:80:C7:AC:AB:11:EE:A6:D6:3E:21
Certificate issuer: /CN=b6d14118dbd227298daa80c7acab11eea6d63e21
Certificate serial: 01974BFB74B2FAA251F0581284F90251EBAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.mft
Manifest number: 1593
Signing time: Sat 07 Jun 2025 20:00:59 +0000
Manifest this update: Sat 07 Jun 2025 20:00:59 +0000
Manifest next update: Sun 08 Jun 2025 20:00:59 +0000
Files and hashes: 1: 7MBZP4USFz5hPGotD8N5VTxiCh4.roa (hash: xrZIN20uzCUHnquaIR7JyCpdhy6O1fXdg0ZyfCtPx1A=)
2: _-vCy7ICzJgkXfJZ75qxspKlSv8.roa (hash: jMbO+xgYxKlWrIGWglTequYy9eTc9dUkDdUL8kvtI4s=)
3: ttFBGNvSJymNqoDHrKsR7qbWPiE.crl (hash: MO5Khv+NcRfBi+VXQa6GCqQlSHffLKDMYy+IemNms9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:74:b2:fa:a2:51:f0:58:12:84:f9:02:51:eb:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6d14118dbd227298daa80c7acab11eea6d63e21
Validity
Not Before: Jun 7 20:00:59 2025 GMT
Not After : Jun 8 20:00:59 2025 GMT
Subject: CN=52ecadb9b1269dcdf316d60aa2508e7e669163b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b6:33:a4:92:d6:b6:24:f6:72:5d:be:1e:32:
de:59:ab:af:00:b2:ff:0f:09:0f:ca:ab:04:36:70:
d8:72:93:36:3e:1c:47:79:33:1f:90:96:de:de:25:
f3:28:bd:d7:e9:47:55:26:fb:9e:04:6a:4e:50:74:
c3:e3:63:7b:5d:a8:9c:4d:56:80:8e:7e:72:4b:5f:
ea:56:b8:e4:c8:54:bb:94:47:45:6c:85:da:f8:05:
77:99:bb:fd:80:6b:2e:ea:9f:8e:c4:da:5a:dc:d9:
ab:77:e0:ff:6d:bd:ad:f4:c9:f3:fd:bb:a9:54:40:
a2:f7:ab:17:7e:f5:78:10:d1:9d:5c:2f:e9:c3:63:
0b:b9:e4:0a:31:fc:09:38:97:cd:5d:01:b2:95:89:
9c:07:84:24:c8:55:e4:66:d5:d0:7f:10:be:9c:21:
d5:cd:08:6a:1c:13:71:45:4c:ac:72:8a:cf:5d:91:
b9:7a:61:ff:01:52:e1:1d:d2:eb:eb:12:b5:7d:7e:
71:e5:ce:83:46:c8:0f:93:9c:c2:12:5e:22:71:1d:
dd:c8:72:73:68:80:84:62:d1:13:a3:db:ca:00:02:
ae:27:e1:cd:bb:97:fb:25:a5:38:b6:0a:57:89:6d:
d1:68:91:4d:fb:3f:af:d1:24:ce:bc:90:07:80:da:
1a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:EC:AD:B9:B1:26:9D:CD:F3:16:D6:0A:A2:50:8E:7E:66:91:63:B8
X509v3 Authority Key Identifier:
keyid:B6:D1:41:18:DB:D2:27:29:8D:AA:80:C7:AC:AB:11:EE:A6:D6:3E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:af:39:b1:53:d4:db:7e:74:e1:18:0b:83:6b:c4:4f:17:3d:
cc:69:23:b6:27:e0:04:5c:7f:66:9d:4e:58:eb:7f:5b:83:e2:
fd:5e:ce:98:83:26:8f:de:44:13:3c:4d:5a:9f:f8:b0:fe:a6:
45:f3:d0:0d:54:e8:a1:d1:25:12:93:8d:1f:29:4f:4a:a8:85:
53:30:8c:cb:18:ae:53:85:4d:c7:24:20:61:1e:7c:d0:ac:91:
97:3a:93:9c:51:12:53:a5:f4:04:f1:51:b9:10:d2:0b:85:61:
39:cf:7c:1b:ce:38:63:88:b0:50:be:33:02:45:30:2a:fb:8d:
7d:16:99:3b:30:07:9e:7b:04:96:88:68:63:e8:74:9e:37:9a:
0d:3a:24:48:e4:ea:4a:9f:cb:d8:f8:4b:0b:54:81:1b:cf:f1:
ae:f8:03:39:db:ee:0f:8d:59:f2:ce:c8:1b:a6:4d:2f:34:65:
24:60:5b:a6:1f:cf:1d:34:2d:58:2d:5e:db:cb:b3:e0:da:fe:
80:a1:d0:7d:df:44:72:5a:9e:81:11:2e:5c:96:5e:07:b8:9d:
b2:39:ad:f8:68:b6:c3:89:25:db:53:df:8d:5d:2c:6d:4b:d7:
51:c7:22:b2:c9:3f:21:4a:7b:2c:f5:fc:b4:d8:3e:90:f6:a2:
6c:9f:63:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:19:27 2025 by rpki-client