Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
File: TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft (raw, json)
Hash identifier: wRa4swIaPYVMWXPFz3niKGEEmpVm7X9+XlZwf/FQF1Y=
Subject key identifier: CD:BC:3D:34:FC:E7:1A:55:54:64:D1:EC:CA:69:61:43:A8:C3:68:3A
Authority key identifier: 4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
Certificate issuer: /CN=4d3f54f304e6b851608c293978b16ba51ac0350e
Certificate serial: 01992FA2CF73970A604784D19F95D244F413
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
Manifest number: 1678
Signing time: Tue 09 Sep 2025 18:00:22 +0000
Manifest this update: Tue 09 Sep 2025 18:00:22 +0000
Manifest next update: Wed 10 Sep 2025 18:00:22 +0000
Files and hashes: 1: 2-8ODfbSISRCVrFLypE1beop4mI.roa (hash: CTu3Z/KQAufmJs+pAxP0V5GvviRUTQPwl9gEk4hUm6E=)
2: TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl (hash: fHpuVeYDpA3X2awi0dwsdHo5vnvwDhuTVr0vy89jS44=)
3: xOYkGw3SqmDNjUBUXBvZW0U-4J4.roa (hash: CMrEVMiwQAaT7qSr6cVaZ45q/VR6zzPcJBOroZoc7n8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 18:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:a2:cf:73:97:0a:60:47:84:d1:9f:95:d2:44:f4:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3f54f304e6b851608c293978b16ba51ac0350e
Validity
Not Before: Sep 9 18:00:22 2025 GMT
Not After : Sep 10 18:00:22 2025 GMT
Subject: CN=cdbc3d34fce71a555464d1ecca696143a8c3683a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:af:2c:08:de:ea:e3:db:6c:c3:d4:ce:9c:08:
79:61:c8:74:f1:be:73:e7:cf:8c:4e:9b:92:91:e8:
7d:91:61:a5:5b:76:e7:e4:df:7c:8c:98:0f:3a:f0:
7b:fd:c5:8c:19:fe:5a:80:21:bc:96:96:ab:f0:79:
80:14:5f:c8:cb:29:de:67:e5:0e:1c:a1:ba:a1:c2:
33:5f:8a:ea:32:e1:a2:55:5a:91:ca:26:fa:f8:97:
ea:03:70:81:4a:aa:8b:c5:7f:e4:0c:02:c6:a9:0d:
0c:e8:2f:e5:47:94:f6:62:13:1c:03:2d:0b:17:0a:
4f:47:20:ed:b9:f9:ed:2d:9d:4e:c5:1e:fd:e6:00:
a0:7d:f6:04:51:88:04:bd:ff:90:90:b4:16:34:53:
ad:8a:1b:3b:45:38:99:3f:ed:e7:69:b5:56:b3:fc:
02:64:00:cc:e9:2c:e6:78:6e:3e:73:6e:e3:18:28:
7f:cb:0c:85:f6:ca:66:80:ee:7a:e7:c0:75:c6:54:
00:6d:cd:97:3a:97:11:a6:12:3f:a0:63:17:6f:e9:
d5:41:e0:9e:05:b1:9a:e5:5f:1e:1c:0a:14:07:1b:
2e:db:cd:2f:50:2f:c6:13:ed:d4:09:df:32:17:8c:
58:d6:cf:c8:41:12:51:e3:1d:23:96:3d:a8:37:b0:
da:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:BC:3D:34:FC:E7:1A:55:54:64:D1:EC:CA:69:61:43:A8:C3:68:3A
X509v3 Authority Key Identifier:
keyid:4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ad:28:52:62:d7:dc:56:4a:3e:dc:12:22:43:6f:1f:8e:a3:
70:26:eb:48:74:e7:c4:cf:29:92:77:87:b3:6f:0b:e3:74:49:
46:0d:63:20:6e:01:25:32:54:4e:aa:b4:a6:29:08:5c:d3:05:
19:f0:56:74:f9:36:bb:c0:2c:4a:85:28:b7:78:1e:bb:8e:2c:
60:fd:5d:77:31:7e:3a:08:dd:bf:e9:9e:3d:62:f2:15:93:ed:
06:3d:3e:54:b1:2e:14:13:e0:16:9b:4e:f0:ee:7e:6c:64:bb:
27:ad:ab:04:7d:78:11:ed:bf:cf:68:a5:67:73:bf:37:6d:7f:
81:a6:7a:83:a2:39:47:61:3b:fe:41:65:04:9c:16:42:96:19:
80:6f:ed:9d:76:13:16:f5:02:a1:8d:af:0c:39:52:62:96:97:
e4:e9:40:26:ea:7b:72:52:d8:9b:88:57:08:80:39:05:07:e1:
97:3a:dc:8a:91:7c:de:66:29:c8:dd:8f:74:f8:c7:f3:2c:2f:
d7:0a:a0:d4:b1:c4:1f:b1:b1:22:fb:2c:5e:d6:bd:86:27:e7:
da:e8:3f:ec:3f:26:31:80:66:b7:bd:25:22:dc:f8:45:c9:2a:
5b:40:f1:c5:c4:a0:f3:01:1d:4b:ef:24:14:54:fc:89:10:88:
88:25:6a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:53:03 2025 by rpki-client