Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.mft
File: TTxfCqFBARzi2_GMzOqsjSOoAlM.mft (raw, json)
Hash identifier: IIeWE6pHrIB/w8i7fMFZhHlXmtUsXCe5h/29PTc+Mjw=
Subject key identifier: 0B:49:FE:C4:01:1C:61:A8:9C:13:4E:3D:B8:AB:6D:8B:CC:75:D3:18
Authority key identifier: 4D:3C:5F:0A:A1:41:01:1C:E2:DB:F1:8C:CC:EA:AC:8D:23:A8:02:53
Certificate issuer: /CN=4d3c5f0aa141011ce2dbf18ccceaac8d23a80253
Certificate serial: 01992820D2DEE3CCD41BE8490921C600C345
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTxfCqFBARzi2_GMzOqsjSOoAlM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.mft
Manifest number: 03A0
Signing time: Mon 08 Sep 2025 07:01:03 +0000
Manifest this update: Mon 08 Sep 2025 07:01:03 +0000
Manifest next update: Tue 09 Sep 2025 07:01:03 +0000
Files and hashes: 1: TTxfCqFBARzi2_GMzOqsjSOoAlM.crl (hash: mo2B2QLN5lU9jMKA6IStCODeidvJxKZHNm0A229NQms=)
2: VzuF2DppIrspDzJ85GPpog256VM.roa (hash: NVhHykKnaNaKUFenioMV2s+C+yHI/RstE5ooTmdayhs=)
3: gl57ADSHY0k4ndDK_OjTyc2Vj-w.roa (hash: K2iUKBC94qqs+lcuU9alkOi5wrj2IpvPW1nPAtFGI+M=)
4: wVbnrxwKxuyFCykAZfTxIk8usp4.roa (hash: nUg8btnlBOx76JKnTAelqbIAdPi5nKQqhhSAdUCbOU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TTxfCqFBARzi2_GMzOqsjSOoAlM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:28:20:d2:de:e3:cc:d4:1b:e8:49:09:21:c6:00:c3:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3c5f0aa141011ce2dbf18ccceaac8d23a80253
Validity
Not Before: Sep 8 07:01:03 2025 GMT
Not After : Sep 9 07:01:03 2025 GMT
Subject: CN=0b49fec4011c61a89c134e3db8ab6d8bcc75d318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9b:dd:53:6a:ed:3b:d9:2f:ff:d7:7c:f9:61:
b1:01:a0:5c:d1:59:e1:94:eb:55:91:a6:66:d1:2c:
a5:08:ff:e3:42:91:f7:55:1c:5a:6f:7a:90:17:44:
76:cc:90:cb:b3:80:5e:a2:d4:8d:c3:70:f7:04:f8:
dc:5f:25:36:01:d8:60:ec:be:d0:d6:2f:fb:fe:26:
6c:b6:93:ce:16:ba:68:d7:2d:54:af:6e:87:c4:01:
a2:cc:ad:4b:37:e9:59:f9:11:2d:4f:dd:3f:8a:f6:
1f:62:f1:54:68:d4:50:32:0f:36:0e:3b:f6:cf:e7:
e2:28:df:68:3f:f9:55:c8:54:77:97:d4:01:8a:4d:
44:5e:55:44:34:05:94:8f:0d:5e:a3:3a:58:ea:b0:
9f:8d:54:80:36:62:2e:ab:a0:79:d8:ff:fe:b1:c1:
89:96:64:c6:fa:9a:26:4c:6e:c3:f0:8d:6b:44:11:
7a:36:24:4c:0e:0e:24:46:2a:23:10:1b:9c:fb:d7:
2f:ff:6f:01:58:aa:f6:33:15:89:2a:98:d2:e9:bf:
ae:c8:81:f0:7e:37:fd:50:3e:b9:68:55:46:50:e3:
33:d1:a2:8c:64:8b:39:0a:31:37:72:f6:48:ed:d1:
d2:15:ba:d9:54:6b:64:92:e8:84:75:72:52:aa:0d:
d4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:49:FE:C4:01:1C:61:A8:9C:13:4E:3D:B8:AB:6D:8B:CC:75:D3:18
X509v3 Authority Key Identifier:
keyid:4D:3C:5F:0A:A1:41:01:1C:E2:DB:F1:8C:CC:EA:AC:8D:23:A8:02:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTxfCqFBARzi2_GMzOqsjSOoAlM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:27:94:ac:0c:69:c3:ce:92:39:50:c9:5b:a8:99:7b:9d:54:
d3:d7:12:43:82:db:3c:12:58:3f:21:8a:66:69:6e:a1:c9:3b:
c3:ce:fa:07:26:55:a5:3d:be:06:63:41:6d:4a:88:f0:73:7d:
b5:e4:71:b6:46:c3:e9:2a:d1:d3:c0:a4:d4:d8:9a:7b:df:a4:
58:b0:d6:dd:8b:28:3b:2c:7e:06:ff:6b:84:5f:b3:55:ab:65:
04:57:8a:49:76:82:26:95:9b:4b:47:5b:1b:5e:2e:c6:2b:cd:
61:e0:ab:14:12:ff:d3:64:25:b9:3b:6e:19:50:7b:f2:d1:4a:
d3:8c:2e:e3:b7:31:52:b9:71:3e:7c:f1:94:4b:ad:11:cb:b4:
d1:49:cd:57:24:c6:6d:ff:15:4b:29:fd:30:16:2e:2e:5f:6c:
08:8f:54:f6:4e:54:a7:49:5d:92:e8:01:a8:1a:2e:f2:80:0e:
81:ac:dd:43:ef:d4:18:5d:30:b1:c2:f7:db:ba:bb:09:fc:ba:
eb:c6:2a:4c:bb:f2:82:42:8b:08:c8:c9:b7:db:3c:97:34:c4:
6e:88:c4:c1:4a:c4:b3:42:d4:01:73:67:40:b9:f8:8f:bc:77:
f3:89:4a:3e:2c:13:60:52:7e:c7:dd:e5:4a:43:ce:02:0b:00:
f0:01:cd:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 10:22:03 2025 by rpki-client