Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
File: TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft (raw, json)
Hash identifier: yAkTaqd5sZJUFCZu69ZhHyktcrWXXHoi7jRGbBu5kgI=
Subject key identifier: EE:ED:F2:BE:55:23:60:DF:98:50:F7:13:C9:5C:A5:90:76:56:EB:6B
Authority key identifier: 4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
Certificate issuer: /CN=4d3f54f304e6b851608c293978b16ba51ac0350e
Certificate serial: 019752A20A94B1A6023209C497B0C3531ABC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
Manifest number: 1581
Signing time: Mon 09 Jun 2025 03:00:40 +0000
Manifest this update: Mon 09 Jun 2025 03:00:40 +0000
Manifest next update: Tue 10 Jun 2025 03:00:40 +0000
Files and hashes: 1: 2-8ODfbSISRCVrFLypE1beop4mI.roa (hash: CTu3Z/KQAufmJs+pAxP0V5GvviRUTQPwl9gEk4hUm6E=)
2: TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl (hash: LbVZF6sCpV76ejkbiXsaLEpw5s2eUjQ+hdFGt5065Yw=)
3: xOYkGw3SqmDNjUBUXBvZW0U-4J4.roa (hash: CMrEVMiwQAaT7qSr6cVaZ45q/VR6zzPcJBOroZoc7n8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:a2:0a:94:b1:a6:02:32:09:c4:97:b0:c3:53:1a:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3f54f304e6b851608c293978b16ba51ac0350e
Validity
Not Before: Jun 9 03:00:40 2025 GMT
Not After : Jun 10 03:00:40 2025 GMT
Subject: CN=eeedf2be552360df9850f713c95ca5907656eb6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2e:aa:f8:b8:fe:a2:1f:6c:64:06:8b:cf:20:
a1:79:ae:52:8e:69:8e:47:bd:ae:0e:e1:1a:8a:3d:
02:58:c4:f5:3d:42:51:d3:12:97:30:07:f7:21:9c:
b3:9d:6e:4c:f7:db:4c:a4:4d:41:de:e6:98:c0:a6:
a2:b8:0e:12:a8:71:b9:af:11:bf:51:46:9c:c3:8a:
38:cd:51:60:75:c1:89:fc:c5:02:be:af:04:73:3b:
f9:7e:9b:46:c1:e4:a8:df:67:f7:c3:3f:6c:63:a1:
55:69:21:30:23:18:97:80:10:b8:95:23:4c:46:54:
f9:18:c1:c8:59:ca:0b:14:bc:2a:e1:4c:d1:96:6b:
0e:9b:df:bd:09:4e:c3:b7:72:27:a5:ba:d2:5a:de:
b4:10:b1:6a:a4:e1:12:52:48:05:83:16:5f:d2:b9:
c3:72:51:de:f8:01:72:51:9e:53:0f:a1:b8:65:cb:
bb:06:d4:c3:85:a0:2a:96:bd:2a:44:f4:39:82:d0:
97:51:1b:0c:f9:a2:f8:11:9f:2d:fb:73:c6:bd:09:
3f:a7:ab:96:e0:30:90:2d:36:73:50:ba:5c:62:af:
dd:dc:d1:1c:11:16:e2:f7:1b:9f:ae:0f:76:6f:70:
6a:73:97:13:a6:95:9d:07:b4:5b:b8:f2:5a:19:23:
2d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:ED:F2:BE:55:23:60:DF:98:50:F7:13:C9:5C:A5:90:76:56:EB:6B
X509v3 Authority Key Identifier:
keyid:4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ff:ff:d5:1e:f0:45:8a:00:05:25:9f:c4:d9:7f:7f:e8:3c:
47:12:40:75:af:ab:7a:90:fe:2a:c2:25:62:e9:69:68:e5:40:
ba:e1:e9:71:99:a1:e7:00:7d:14:84:f9:c5:73:35:bf:37:da:
5a:cd:8f:f2:8e:00:4d:f3:a5:cf:85:95:2d:1a:82:8a:5b:54:
39:09:f3:b0:05:49:09:cd:4b:b7:34:08:b7:8d:b0:ee:de:32:
11:ea:45:ac:b6:6c:6f:47:3d:ca:5c:c9:05:26:08:e9:a4:e6:
83:1b:bc:50:88:b8:48:2b:ee:f4:da:dc:a0:6d:02:56:ba:47:
0a:b5:89:b5:08:61:67:23:4c:1c:4d:c1:c4:23:9b:e8:b7:b2:
2f:6a:8f:71:50:d6:09:25:a9:75:95:98:3b:f1:af:16:10:b8:
88:88:bc:49:94:ac:1d:f9:78:0e:c0:9b:25:3f:18:7a:96:29:
a8:11:2c:59:65:c1:b7:26:8f:87:62:9a:f6:bb:8a:d7:fb:83:
ba:d5:2e:55:a8:bb:89:d9:fd:34:a3:9a:aa:fc:89:93:c1:87:
16:76:01:f0:00:6d:43:e9:f2:0d:c7:c7:47:24:a0:9e:7a:37:
4c:5a:bc:43:88:f1:19:66:d2:de:27:64:74:27:30:76:d7:c6:
9a:f8:83:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 08:28:24 2025 by rpki-client