Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft
File: TtTTbmM3JKGxeUm8QiR2lk518GU.mft (raw, json)
Hash identifier: 2gFGDTUu4mLDNQUUGidlky1yOp2m/HVmEcJAOi2mAFk=
Subject key identifier: E2:A7:9B:51:97:4B:A3:86:99:C6:C8:72:DC:07:7A:5E:65:7C:21:3B
Authority key identifier: 4E:D4:D3:6E:63:37:24:A1:B1:79:49:BC:42:24:76:96:4E:75:F0:65
Certificate issuer: /CN=4ed4d36e633724a1b17949bc422476964e75f065
Certificate serial: 0197670434295DDC1257C6476035106F628E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtTTbmM3JKGxeUm8QiR2lk518GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 02:00:18 +0000
Manifest this update: Fri 13 Jun 2025 02:00:18 +0000
Manifest next update: Sat 14 Jun 2025 02:00:18 +0000
Files and hashes: 1: CnryW-h9KBqAbLH3yoElsj6kkME.roa (hash: LGWkYgge1+9ItWTLHb68eWMOdZQGepA7ESiUA3d7dLI=)
2: TtTTbmM3JKGxeUm8QiR2lk518GU.crl (hash: O6uDzWDLM5hD85O8wnOA6Voc8rN2xxXBefvJFmqT7Wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtTTbmM3JKGxeUm8QiR2lk518GU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 02:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:04:34:29:5d:dc:12:57:c6:47:60:35:10:6f:62:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed4d36e633724a1b17949bc422476964e75f065
Validity
Not Before: Jun 13 02:00:18 2025 GMT
Not After : Jun 14 02:00:18 2025 GMT
Subject: CN=e2a79b51974ba38699c6c872dc077a5e657c213b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f3:db:be:2e:43:07:78:38:00:fa:70:f9:9e:
95:54:7d:c7:47:ca:b1:61:0c:21:73:c5:5a:8d:1a:
1d:24:c3:69:cb:f4:1f:b6:cb:f9:13:32:21:b4:9f:
6a:ea:73:e0:9f:a6:18:db:cc:b0:ca:3c:ca:51:78:
d6:ac:a5:07:8f:a7:03:67:a7:37:83:09:07:db:f9:
d2:a9:ec:41:69:e2:4a:31:60:72:00:98:94:4b:52:
41:ea:13:67:0d:b2:1b:51:42:dc:dc:33:ac:d7:d1:
ac:75:2e:94:aa:7f:86:b9:89:d6:0b:fe:75:2c:d5:
1b:c5:aa:77:02:06:b4:38:56:92:b7:ce:81:3f:a0:
0b:17:49:a1:fe:c6:cc:cd:9e:c1:58:93:40:e4:f6:
6d:c6:e5:b4:40:69:48:e6:fc:c2:16:16:ea:1e:a7:
cc:f9:9d:13:a3:75:7a:f8:47:1f:95:30:04:1f:a9:
6a:4d:5c:37:84:97:3b:90:19:68:e3:e7:cd:ff:8c:
0a:af:a8:d5:7a:49:bb:52:a3:fa:60:96:0e:b8:92:
fe:ad:e2:d6:bf:f0:27:3d:de:79:bc:82:21:ab:7e:
56:7a:7a:53:38:2e:64:75:37:ea:b0:0f:00:12:ec:
d2:a7:e7:fa:0a:73:f7:15:f5:e9:ff:04:d0:cf:2d:
cd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A7:9B:51:97:4B:A3:86:99:C6:C8:72:DC:07:7A:5E:65:7C:21:3B
X509v3 Authority Key Identifier:
keyid:4E:D4:D3:6E:63:37:24:A1:B1:79:49:BC:42:24:76:96:4E:75:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtTTbmM3JKGxeUm8QiR2lk518GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:be:a8:54:26:7b:74:ec:d1:58:da:9f:c1:18:f6:5d:7b:f4:
59:56:6d:ca:21:54:f4:2c:a0:9b:6b:b1:dd:67:9c:25:42:74:
41:11:f6:62:50:72:7a:7c:00:d7:ed:57:1f:29:6d:a6:ef:b9:
41:ce:b6:dc:b5:76:ea:7e:07:a0:da:69:78:c1:52:6b:db:91:
18:6f:b2:e3:48:2d:4f:a1:95:99:e5:fa:d3:1e:95:34:ab:7d:
ed:43:1f:9b:00:33:f1:14:2e:04:2d:63:20:95:4b:b2:90:28:
98:be:d0:29:f9:20:6f:39:73:c0:7a:16:31:b1:ac:89:7d:83:
3a:d1:46:02:8d:db:44:b5:39:de:5b:17:f8:9b:c5:df:c9:df:
e1:de:12:48:43:a4:7e:40:d9:df:d8:79:1d:b3:db:d9:e7:ad:
a6:24:6f:b3:71:56:8f:1a:88:b9:be:62:50:aa:01:b0:36:ec:
9c:1a:2b:b6:5a:24:a7:7f:9a:2a:fd:25:3c:8a:ff:87:06:c0:
0b:3b:2c:8d:d1:33:e0:06:a0:f2:c5:57:c9:a0:0a:47:db:f1:
7e:28:3c:c6:b1:af:7e:d7:11:8e:a8:4f:40:c8:e5:ec:d0:d9:
0d:c7:18:88:2c:6f:ca:bb:55:dc:b6:25:91:d2:94:79:ba:45:
42:81:4f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 12:30:27 2025 by rpki-client