Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
File: TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft (raw, json)
Hash identifier: fCN9HRKOQxDgpcNyPL+JM/xWZDsHEFpkRO0FYXugaGk=
Subject key identifier: 91:78:F1:77:4C:4D:A1:8B:09:CD:40:77:D8:5A:00:92:E3:FA:CE:41
Authority key identifier: 4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
Certificate issuer: /CN=4d3f54f304e6b851608c293978b16ba51ac0350e
Certificate serial: 01975C4A12B8100D58DC3D8264FD0496D54B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
Manifest number: 1586
Signing time: Wed 11 Jun 2025 00:00:47 +0000
Manifest this update: Wed 11 Jun 2025 00:00:47 +0000
Manifest next update: Thu 12 Jun 2025 00:00:47 +0000
Files and hashes: 1: 2-8ODfbSISRCVrFLypE1beop4mI.roa (hash: CTu3Z/KQAufmJs+pAxP0V5GvviRUTQPwl9gEk4hUm6E=)
2: TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl (hash: 7NEh6lvVlkrnXlA4pOj7RpUOhzol8b7U0sVoWYIfKag=)
3: xOYkGw3SqmDNjUBUXBvZW0U-4J4.roa (hash: CMrEVMiwQAaT7qSr6cVaZ45q/VR6zzPcJBOroZoc7n8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:4a:12:b8:10:0d:58:dc:3d:82:64:fd:04:96:d5:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3f54f304e6b851608c293978b16ba51ac0350e
Validity
Not Before: Jun 11 00:00:47 2025 GMT
Not After : Jun 12 00:00:47 2025 GMT
Subject: CN=9178f1774c4da18b09cd4077d85a0092e3face41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d9:41:16:06:f5:e7:3f:f3:1b:e1:cd:12:fe:
ab:d1:51:a2:95:88:cf:01:1e:bf:d5:50:bd:4f:6c:
06:6a:87:b9:92:2c:46:c7:84:69:f6:46:b3:2d:cf:
fd:3f:df:d0:c5:fa:ba:c5:e6:0b:97:dd:e7:1f:0b:
98:1f:ca:f7:8b:74:92:f6:71:fd:73:b2:0d:be:75:
5d:a2:85:d6:aa:ee:9c:d4:ca:5e:1a:41:e6:2f:ea:
82:43:fb:14:f3:36:ca:09:33:b7:98:d9:80:b1:dd:
41:70:60:d8:33:81:49:1d:a9:26:f2:21:d9:e3:f9:
92:00:24:3c:52:34:73:96:b0:0e:2e:18:cd:0c:d5:
89:89:e1:69:29:fd:74:86:b3:ca:14:9a:74:0d:07:
39:95:cf:5a:f0:5e:26:98:99:68:7d:25:5f:b6:05:
eb:e3:ee:f8:8c:f4:88:d6:9a:8f:3c:87:7b:f6:95:
d1:d8:b6:63:96:1c:94:b0:d4:a4:72:7d:a9:f7:5b:
3f:f6:b4:a9:ca:89:c5:03:8c:4b:a7:59:67:a0:9b:
89:7d:4c:77:ff:16:80:54:b4:b1:4c:e0:29:90:4a:
10:22:dd:f0:a4:5b:61:34:02:a9:ce:b6:cf:7e:37:
26:cd:46:cf:f4:e3:ec:ce:cd:b0:73:f9:76:eb:b3:
a4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:78:F1:77:4C:4D:A1:8B:09:CD:40:77:D8:5A:00:92:E3:FA:CE:41
X509v3 Authority Key Identifier:
keyid:4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:44:9a:ff:69:30:0d:b4:27:57:77:46:de:a9:56:22:77:fc:
e9:7d:a2:b2:f0:55:85:f2:0b:25:1e:dd:95:a5:cb:a0:c8:19:
0f:03:e0:20:77:fa:30:85:fc:04:de:c5:2b:1e:d9:da:69:55:
dd:42:fb:06:75:85:8b:d2:1a:70:67:49:1c:32:82:fc:dc:3d:
00:fc:b5:7e:1a:d0:ef:d2:ee:84:c3:94:41:40:27:c0:88:03:
d4:fc:05:5a:3c:a6:6f:45:0c:69:f6:f2:12:c1:8c:e3:47:3f:
5b:a0:37:ca:4c:74:19:c5:6f:ee:58:73:a5:86:ef:24:a0:ad:
04:65:d7:5a:43:4e:f1:5b:39:40:13:d3:d4:87:c5:c5:87:35:
dc:a5:dc:5d:4e:d3:8f:5e:06:59:17:52:ac:99:33:79:64:22:
ce:06:28:67:1e:d4:6d:3d:ee:27:98:93:5c:ff:17:ec:37:66:
a0:d6:ab:c6:89:d9:28:11:5f:d2:59:a2:39:87:ae:b1:33:0e:
5b:47:57:1a:13:62:18:ac:c6:b0:43:6b:46:ac:f3:80:a9:f4:
ae:dd:c8:de:d7:90:b1:7b:1c:32:b4:a0:b9:58:b4:47:bb:a9:
2e:ac:aa:2f:83:f2:3e:1a:75:b4:b5:4d:55:e7:e6:b1:53:2d:
1d:b0:fb:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:10:40 2025 by rpki-client