Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/33bc07-9c3d-4606-b7f5-d3812e616485/1/TTz66pjQdmF8HqrOk0fi1Kc81E8.mft
File: TTz66pjQdmF8HqrOk0fi1Kc81E8.mft (raw, json)
Hash identifier: U9okkYT1s8lPLBoBiLgU3aGbCfv+XKCd+ApH6uwEKtQ=
Subject key identifier: 94:61:3C:3E:6D:81:7B:B1:E4:29:73:0D:71:10:72:B8:59:F8:AD:C6
Authority key identifier: 4D:3C:FA:EA:98:D0:76:61:7C:1E:AA:CE:93:47:E2:D4:A7:3C:D4:4F
Certificate issuer: /CN=4d3cfaea98d076617c1eaace9347e2d4a73cd44f
Certificate serial: 019921B09C6B292DDEB5C8B819919346CD5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTz66pjQdmF8HqrOk0fi1Kc81E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/33bc07-9c3d-4606-b7f5-d3812e616485/1/TTz66pjQdmF8HqrOk0fi1Kc81E8.mft
Manifest number: 01AA
Signing time: Sun 07 Sep 2025 01:00:46 +0000
Manifest this update: Sun 07 Sep 2025 01:00:46 +0000
Manifest next update: Mon 08 Sep 2025 01:00:46 +0000
Files and hashes: 1: TTz66pjQdmF8HqrOk0fi1Kc81E8.crl (hash: efC95Wbmp+fYV7k1EE3zvZ+cWtvCIT7EQXEQJeQR4V4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/33bc07-9c3d-4606-b7f5-d3812e616485/1/TTz66pjQdmF8HqrOk0fi1Kc81E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/33bc07-9c3d-4606-b7f5-d3812e616485/1/TTz66pjQdmF8HqrOk0fi1Kc81E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TTz66pjQdmF8HqrOk0fi1Kc81E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:9c:6b:29:2d:de:b5:c8:b8:19:91:93:46:cd:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3cfaea98d076617c1eaace9347e2d4a73cd44f
Validity
Not Before: Sep 7 01:00:46 2025 GMT
Not After : Sep 8 01:00:46 2025 GMT
Subject: CN=94613c3e6d817bb1e429730d711072b859f8adc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c8:8b:1a:ac:b5:bc:6a:2b:a1:a9:d6:13:c2:
e6:e3:24:bf:00:0e:a4:e4:c3:a7:f2:d8:a4:2e:ea:
b0:01:e1:a2:35:06:b4:7d:da:d9:34:c3:ee:4f:83:
70:68:a9:1e:0c:27:39:67:27:10:01:fc:e4:6f:ed:
04:85:d1:29:35:7b:96:5a:ea:c3:e5:80:4b:33:23:
83:34:9e:be:6e:d7:5e:85:a2:38:d3:c2:2b:ca:bf:
8f:98:60:33:bf:7f:3e:46:51:7b:f4:a9:19:a2:05:
49:96:6f:42:af:b1:27:3b:ea:5b:27:de:ea:1c:51:
b6:11:3b:bb:39:73:08:28:fa:25:cd:32:a8:ff:72:
6a:d4:9a:30:e3:d5:a6:45:a8:9c:2f:f5:54:9a:63:
88:ab:28:5f:c4:34:0c:71:f6:dd:19:5d:f7:75:55:
a1:08:f2:40:44:44:96:60:b7:2d:e6:71:08:dd:fe:
62:e7:ed:70:18:8b:6e:bc:5a:1c:59:84:4a:d8:16:
c5:fa:76:0e:8f:92:7d:87:d5:73:27:95:ec:93:07:
e1:ed:ef:79:23:45:04:9e:ee:36:28:51:fc:dc:41:
3e:f9:33:47:bd:da:af:7f:75:95:7d:57:2b:55:e1:
18:01:79:eb:1c:ac:83:86:b8:3f:cf:78:65:c7:11:
52:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:61:3C:3E:6D:81:7B:B1:E4:29:73:0D:71:10:72:B8:59:F8:AD:C6
X509v3 Authority Key Identifier:
keyid:4D:3C:FA:EA:98:D0:76:61:7C:1E:AA:CE:93:47:E2:D4:A7:3C:D4:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTz66pjQdmF8HqrOk0fi1Kc81E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/33bc07-9c3d-4606-b7f5-d3812e616485/1/TTz66pjQdmF8HqrOk0fi1Kc81E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/33bc07-9c3d-4606-b7f5-d3812e616485/1/TTz66pjQdmF8HqrOk0fi1Kc81E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:bb:2f:40:25:49:fd:b9:3b:7c:f8:82:f9:8d:85:00:5d:67:
77:8e:ee:ae:26:59:f7:9f:aa:4f:66:13:71:58:08:5a:ec:e1:
ec:3b:44:a5:89:9f:e3:99:b3:ab:92:c4:84:1f:c1:be:9c:d7:
41:54:93:ce:68:ec:4a:7c:2d:db:5f:6d:38:53:ac:ff:78:ef:
3f:30:2e:46:6b:52:47:bb:3c:91:68:23:ff:8d:99:94:a0:97:
40:6f:a8:21:ee:dd:8c:4b:5e:cc:81:5c:f6:98:88:ef:87:52:
57:0a:4c:4e:10:03:1e:0c:61:5e:bb:d3:f3:f1:bf:fa:c3:2f:
9b:d3:fe:4d:39:f8:a6:c6:22:90:40:56:cc:d5:76:aa:1a:6a:
21:48:46:04:f1:7a:2c:ba:40:95:32:38:8d:5c:8b:8a:a9:ce:
4c:26:e1:3d:ef:e9:4c:ce:19:28:6f:62:32:51:1f:1b:da:c9:
aa:5f:f2:c4:c6:cd:5a:96:de:bb:4d:dc:80:99:9c:e7:f8:27:
90:cf:cc:2b:d7:28:bf:11:bf:23:a3:69:de:e7:3e:2d:cb:b3:
54:06:fe:17:a9:7d:36:46:de:e0:b2:dc:67:c8:cc:63:7b:9c:
33:40:67:b8:82:ac:58:01:bc:8f:7a:8d:51:25:fb:81:3a:4e:
be:91:0a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:48 2025 by rpki-client