Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
File: TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft (raw, json)
Hash identifier: 5CYAZ6gUGG0KN+ZNezIls+FitpzuK/HPg55KL+9vWys=
Subject key identifier: C0:2E:6A:3B:0F:03:9E:73:0C:E8:E7:AE:E3:23:3A:A9:67:DD:D8:06
Authority key identifier: 4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
Certificate issuer: /CN=4d3f54f304e6b851608c293978b16ba51ac0350e
Certificate serial: 0197586D5ECEE80678B173B31A1975ADADB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
Manifest number: 1584
Signing time: Tue 10 Jun 2025 06:00:51 +0000
Manifest this update: Tue 10 Jun 2025 06:00:51 +0000
Manifest next update: Wed 11 Jun 2025 06:00:51 +0000
Files and hashes: 1: 2-8ODfbSISRCVrFLypE1beop4mI.roa (hash: CTu3Z/KQAufmJs+pAxP0V5GvviRUTQPwl9gEk4hUm6E=)
2: TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl (hash: 7FtbjjXb2tMWInQgW6P+rwNK+71FZZ42dtHFpRNhYOQ=)
3: xOYkGw3SqmDNjUBUXBvZW0U-4J4.roa (hash: CMrEVMiwQAaT7qSr6cVaZ45q/VR6zzPcJBOroZoc7n8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:6d:5e:ce:e8:06:78:b1:73:b3:1a:19:75:ad:ad:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3f54f304e6b851608c293978b16ba51ac0350e
Validity
Not Before: Jun 10 06:00:51 2025 GMT
Not After : Jun 11 06:00:51 2025 GMT
Subject: CN=c02e6a3b0f039e730ce8e7aee3233aa967ddd806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:12:58:73:2e:fd:40:ee:f1:ff:8d:4f:33:3d:
0f:9d:9c:92:d8:51:d1:40:28:83:7c:18:33:b4:1f:
56:1c:b0:3b:b4:79:7a:0b:99:1c:e5:46:df:1a:ec:
c3:d3:eb:b9:fe:31:24:29:66:64:13:74:5e:b6:93:
90:ed:67:50:dd:db:30:19:87:8f:b0:e4:2a:aa:02:
ef:b8:30:41:78:4d:68:14:b6:2c:9e:6f:c3:d2:c1:
fb:4d:bb:40:22:f1:6f:83:87:0b:7a:1a:87:53:33:
3a:9d:2a:3a:3a:00:55:04:1d:b9:08:d1:02:d1:04:
f1:8b:e9:3d:ea:a9:7c:7b:45:51:ed:08:8e:6d:49:
07:91:24:1b:38:62:46:c1:dc:1e:75:b8:f7:33:e8:
68:a4:2a:d6:71:53:02:83:bc:aa:a5:47:b8:fa:ce:
a0:20:f6:9f:71:2b:44:52:73:38:11:4a:d5:66:c6:
f3:e7:16:40:23:6e:5e:2b:ca:5a:59:14:bc:04:04:
43:af:15:fb:e9:72:20:92:85:7d:6b:f9:f7:16:56:
49:26:1d:f2:65:cb:bb:18:d4:40:fa:41:3f:bb:24:
41:6e:a5:c8:af:bb:4f:0b:93:e2:64:84:bf:ae:e0:
1d:ef:e4:2e:28:0e:6d:7d:16:b8:df:b7:59:3e:28:
e1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:2E:6A:3B:0F:03:9E:73:0C:E8:E7:AE:E3:23:3A:A9:67:DD:D8:06
X509v3 Authority Key Identifier:
keyid:4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:9b:30:5f:f8:f7:ba:05:2a:f4:62:36:c1:79:25:8b:12:43:
a3:cc:ff:e4:5d:91:91:dd:69:5b:e2:d2:a6:77:b7:e2:f3:43:
09:42:be:7a:06:4b:b0:85:5d:61:db:6d:f8:ea:01:6a:bd:18:
3a:f3:1f:be:34:16:06:a5:ab:cc:37:54:eb:ed:b3:5b:ad:31:
31:ad:c1:ee:a0:bc:19:8e:88:e4:8c:d7:05:24:64:a1:38:d0:
24:da:7c:19:bb:f6:00:5c:3c:b2:c7:2a:59:8b:5b:7d:50:20:
b9:71:ef:bd:83:df:11:c5:7e:b5:ee:6e:49:86:0d:43:89:51:
9f:8a:41:e9:02:38:e5:1a:5e:49:d9:a3:0b:87:72:dc:d7:aa:
fe:63:a4:f7:6f:f8:1f:2b:b0:80:a1:c2:74:e9:0d:2f:89:c7:
3a:0e:ed:87:29:26:d5:5a:c2:dc:87:e3:02:0c:14:78:97:ef:
97:26:81:d1:d4:73:bb:34:11:a3:42:f3:83:45:f8:59:7e:a1:
60:4d:a2:e3:4d:e6:d2:72:55:bc:1c:b9:55:f6:d6:ba:e5:68:
f0:73:15:fa:78:da:0a:1e:fe:b3:ee:f8:7e:82:63:56:bd:e5:
bc:4f:f4:cf:c5:32:79:4e:43:e4:6f:82:59:41:07:ae:65:e5:
b9:ae:ca:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 10:17:33 2025 by rpki-client