Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
File: TtA31O4-XScGWtgDVlgqL9wrSI0.mft (raw, json)
Hash identifier: NCDd6yGFHP0iZuf9uPwIClmgonCw8N3AxNGx4hxeP/w=
Subject key identifier: AC:90:24:78:EC:D7:CD:E4:63:F9:FB:62:3C:B2:B2:EB:0D:F6:09:D3
Authority key identifier: 4E:D0:37:D4:EE:3E:5D:27:06:5A:D8:03:56:58:2A:2F:DC:2B:48:8D
Certificate issuer: /CN=4ed037d4ee3e5d27065ad80356582a2fdc2b488d
Certificate serial: 0197609467C6217123D76565D441D9145752
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
Manifest number: 0F06
Signing time: Wed 11 Jun 2025 20:00:27 +0000
Manifest this update: Wed 11 Jun 2025 20:00:27 +0000
Manifest next update: Thu 12 Jun 2025 20:00:27 +0000
Files and hashes: 1: TtA31O4-XScGWtgDVlgqL9wrSI0.crl (hash: SEOXIO0qYLlNna4ZCallOnugyNTIdhHSuZeXXWT+3sI=)
2: eOJpQF5FNoppqB79NhjuknNPvas.roa (hash: 0TneR6h3XAtyeO7uLkVkGQTYXZHCJ04//nJtpw2jBn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:94:67:c6:21:71:23:d7:65:65:d4:41:d9:14:57:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed037d4ee3e5d27065ad80356582a2fdc2b488d
Validity
Not Before: Jun 11 20:00:27 2025 GMT
Not After : Jun 12 20:00:27 2025 GMT
Subject: CN=ac902478ecd7cde463f9fb623cb2b2eb0df609d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:8c:ab:51:b2:5d:fc:b5:1e:59:0d:63:99:d3:
8d:fc:ec:ed:db:3f:22:0f:3f:b3:b0:32:50:a9:a0:
bb:48:ec:7f:d5:9c:cf:70:e9:d0:db:d7:5c:a7:fe:
9e:f7:21:72:a3:98:3f:32:f5:01:8b:00:d6:30:47:
b9:77:d1:59:db:d3:18:f6:86:0b:b9:9c:2c:6f:7d:
43:d9:20:0d:0d:8c:49:87:4d:71:fe:cc:19:4f:38:
88:43:f0:44:0e:12:34:f9:e5:f8:9c:c7:83:71:23:
19:d6:ec:5e:27:3b:97:0d:05:ed:20:6c:a4:d7:88:
49:36:7d:7e:c7:9e:6f:75:bb:7a:59:37:c4:27:47:
59:5d:1f:30:f2:12:f6:94:34:12:9a:30:6b:06:48:
3a:78:3f:2f:c2:8b:b4:ec:a7:12:52:76:5d:3a:62:
a8:96:6b:5e:7b:68:19:64:65:b7:d0:47:ac:09:b3:
74:bd:5a:d5:d8:d2:c2:93:f3:6e:b8:e6:ab:10:60:
f3:dc:aa:e8:b6:d9:97:92:d5:5f:ce:3f:b2:9a:66:
28:6c:e9:ea:ba:f3:96:79:79:43:60:33:f9:f9:ab:
d0:4b:c9:59:ed:a5:31:32:b1:33:09:bf:6d:6c:6c:
6d:32:9f:52:98:8e:6d:cf:32:08:89:86:1c:ce:f6:
90:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:90:24:78:EC:D7:CD:E4:63:F9:FB:62:3C:B2:B2:EB:0D:F6:09:D3
X509v3 Authority Key Identifier:
keyid:4E:D0:37:D4:EE:3E:5D:27:06:5A:D8:03:56:58:2A:2F:DC:2B:48:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:df:95:73:65:1e:dd:a3:86:db:07:8a:4d:40:04:d2:96:1e:
18:91:4c:c7:50:f0:07:7b:e6:4a:56:6d:98:cd:e2:0b:7f:b3:
28:09:18:0c:a7:e1:f7:ab:6f:5d:e3:c2:15:2b:11:51:25:aa:
e7:cf:63:aa:b8:e5:f3:d6:87:4b:3b:e6:89:dc:2e:d5:29:12:
1f:72:3c:a5:25:7b:67:77:ff:87:ad:4c:2a:80:6f:8b:eb:10:
5d:84:1e:a1:02:e9:94:b5:d8:a2:21:e4:92:18:ec:29:40:e5:
00:32:4b:0e:e5:86:9f:24:62:18:45:97:4c:c7:36:01:5a:b2:
b8:50:b6:ee:8c:6f:4a:22:8f:48:e1:a3:3c:05:5f:0f:8d:3d:
06:a9:2a:64:06:bb:48:21:1c:12:52:72:94:61:62:7f:fc:50:
0c:a4:7d:80:07:68:a6:ac:90:eb:88:ad:0e:c7:03:ae:63:6b:
09:a1:0a:11:e5:8c:4d:26:41:ec:ee:f3:8b:f9:60:e8:a6:21:
30:f4:42:0e:92:7a:61:97:d2:9a:27:54:36:cd:92:63:35:72:
b7:1d:70:49:36:08:b1:bc:91:e3:d2:a8:fb:f4:1c:02:7b:d5:
d3:c4:37:30:70:7f:54:0b:39:e4:b5:e0:9a:92:44:7b:48:16:
51:aa:92:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 04:10:01 2025 by rpki-client