Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft
File: TtaClltaFeoMReqF7z20vnFnlpY.mft (raw, json)
Hash identifier: cT+HqDVPvGovHgYDGwms97dv10XsK84nE0AwNE5qaME=
Subject key identifier: 9F:5C:AE:4D:07:C0:2A:C4:20:46:B1:EB:3E:C6:2D:BE:54:F9:F8:58
Authority key identifier: 4E:D6:82:96:5B:5A:15:EA:0C:45:EA:85:EF:3D:B4:BE:71:67:96:96
Certificate issuer: /CN=4ed682965b5a15ea0c45ea85ef3db4be71679696
Certificate serial: 01975D25D2640491C4E13CB64DB6491C2895
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtaClltaFeoMReqF7z20vnFnlpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft
Manifest number: 03AD
Signing time: Wed 11 Jun 2025 04:00:49 +0000
Manifest this update: Wed 11 Jun 2025 04:00:49 +0000
Manifest next update: Thu 12 Jun 2025 04:00:49 +0000
Files and hashes: 1: 3aqe87dN2fz6qQQtxNwtFo2__ps.roa (hash: Lt1Bd1g6jAvktpInXW5Oo10n3abY0buPeadfOybeVY0=)
2: TtaClltaFeoMReqF7z20vnFnlpY.crl (hash: vaVLAt3WsdPORO00sY9uaStPWkcMrvmsLJvU+UZdYoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtaClltaFeoMReqF7z20vnFnlpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:25:d2:64:04:91:c4:e1:3c:b6:4d:b6:49:1c:28:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed682965b5a15ea0c45ea85ef3db4be71679696
Validity
Not Before: Jun 11 04:00:49 2025 GMT
Not After : Jun 12 04:00:49 2025 GMT
Subject: CN=9f5cae4d07c02ac42046b1eb3ec62dbe54f9f858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f6:68:c1:42:75:6f:57:0c:75:a2:17:fe:e4:
37:ec:e0:61:ee:d7:7b:63:67:42:b6:4f:15:40:17:
53:af:69:10:df:8b:b7:57:9b:14:62:60:63:70:f3:
2c:8c:3e:db:17:85:4d:1d:28:1a:ef:0b:00:95:26:
88:ea:f2:57:75:a3:f1:a5:1a:89:68:86:7f:75:2b:
c5:b2:4d:15:f7:aa:92:ee:a7:c4:b8:65:75:f9:89:
7f:1d:55:1c:d0:d9:91:c5:ab:e6:f1:ca:f5:42:43:
a4:10:54:04:9c:d3:b4:6a:14:ed:7d:f4:23:c4:84:
00:da:a2:ec:de:83:ee:97:c3:7a:72:5d:75:34:15:
4d:58:c7:01:7e:c8:da:81:aa:7a:ae:36:a9:92:32:
2c:7a:5a:08:64:d5:c3:55:5f:da:bf:a8:d9:6b:49:
b3:2e:30:73:f2:23:06:b3:35:5d:79:b6:bb:3b:ff:
a1:7d:82:45:68:23:cb:79:a2:44:e8:20:ba:f7:d4:
24:8e:07:96:8f:03:11:08:c0:ae:4c:bc:a1:de:4a:
b3:a9:84:48:2f:65:73:be:b8:a1:ea:0b:51:d7:85:
99:4b:d4:09:f6:61:90:8e:5b:f4:4d:52:29:51:38:
ec:77:3d:93:c7:2e:2d:ae:a3:d6:ca:d5:2f:74:4e:
f8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:5C:AE:4D:07:C0:2A:C4:20:46:B1:EB:3E:C6:2D:BE:54:F9:F8:58
X509v3 Authority Key Identifier:
keyid:4E:D6:82:96:5B:5A:15:EA:0C:45:EA:85:EF:3D:B4:BE:71:67:96:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtaClltaFeoMReqF7z20vnFnlpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:4e:cb:b4:2a:f3:52:9c:a4:5f:fe:37:4c:0c:72:b7:36:f1:
f4:82:33:5c:38:82:53:53:ac:22:c1:67:42:48:8c:90:3c:6d:
65:03:31:ab:8e:ef:21:c3:ab:51:8a:25:fc:ed:cb:43:26:bb:
fd:33:38:e6:a0:ff:ac:47:19:0d:27:60:f5:d2:10:f5:39:d2:
d5:2a:43:48:59:cd:5a:1c:6e:8c:4c:99:c6:c6:73:82:29:aa:
46:67:be:5b:c4:d8:bb:5b:1c:ad:42:e1:74:fe:0a:66:cb:97:
cc:43:84:a4:c3:46:3e:47:fb:ed:b2:be:2d:2b:26:1a:19:9b:
a3:be:ac:a0:ee:65:e1:67:ee:7f:12:71:ac:4a:3c:88:74:dc:
04:24:a7:95:ca:7b:0d:b7:92:28:d9:e4:11:64:c2:61:c4:1d:
f5:09:af:10:3d:c6:88:cb:27:32:e2:1d:51:e4:6d:e6:61:0c:
92:ca:62:cc:00:03:36:49:4c:d6:3a:f8:a9:52:51:fb:aa:5e:
7a:8b:53:5b:cc:6c:8a:5f:f3:cc:ce:c5:4c:49:27:fa:2a:f4:
79:67:c7:6a:c7:81:f7:0c:a4:8e:4e:68:f2:3f:fd:83:a2:33:
99:7e:a1:aa:2c:fc:31:85:dc:74:04:2a:3e:d5:84:a0:9e:23:
d3:7c:e6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:03:46 2025 by rpki-client