Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
File: TtHX3yWkqdXnJ8QvVenjGD02qTo.mft (raw, json)
Hash identifier: U5QIN0JNpo1w3r678l++FoxD3eeJYzOhDjS+PNQwBFI=
Subject key identifier: 59:43:A2:D0:FD:22:2D:59:A3:FC:03:93:1B:EB:7B:4D:66:30:90:0E
Authority key identifier: 4E:D1:D7:DF:25:A4:A9:D5:E7:27:C4:2F:55:E9:E3:18:3D:36:A9:3A
Certificate issuer: /CN=4ed1d7df25a4a9d5e727c42f55e9e3183d36a93a
Certificate serial: 0199221EF9F20F38D18B8035F91311761B3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtHX3yWkqdXnJ8QvVenjGD02qTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
Manifest number: 0FFC
Signing time: Sun 07 Sep 2025 03:01:19 +0000
Manifest this update: Sun 07 Sep 2025 03:01:19 +0000
Manifest next update: Mon 08 Sep 2025 03:01:19 +0000
Files and hashes: 1: GjqXm9JUjjlZZ0PJdXVG1lJFjCg.roa (hash: N8pnAe9jWWy/GU0t4cg3SHXORnEo2+UUYssAVJRTLSs=)
2: TtHX3yWkqdXnJ8QvVenjGD02qTo.crl (hash: LXT6FljAR8yEYX0ZM1OblCZLy17ZwK0GAquZ75UiYfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtHX3yWkqdXnJ8QvVenjGD02qTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:f9:f2:0f:38:d1:8b:80:35:f9:13:11:76:1b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed1d7df25a4a9d5e727c42f55e9e3183d36a93a
Validity
Not Before: Sep 7 03:01:19 2025 GMT
Not After : Sep 8 03:01:19 2025 GMT
Subject: CN=5943a2d0fd222d59a3fc03931beb7b4d6630900e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e7:e5:3a:2d:1d:55:bc:16:0d:12:28:c4:f4:
4a:52:f5:25:a9:7e:be:01:bc:2c:c1:b8:e5:25:2d:
5c:f5:98:bc:36:6f:f0:9b:13:16:de:bc:df:54:da:
21:dd:a8:c4:a6:e2:af:b3:4d:4c:7b:c0:c8:52:12:
05:d3:7b:d9:d3:42:1d:93:4c:17:8d:2f:ff:bd:c0:
bc:e7:32:b6:34:8a:b6:16:6c:81:8e:a3:83:be:0f:
ff:c8:c4:ab:d8:9e:84:3d:07:11:96:12:ad:de:03:
e3:8e:03:6a:84:32:45:8a:80:3a:5b:99:18:c0:ed:
05:8a:3c:5b:2a:6e:2b:a0:6d:bc:34:17:49:31:a1:
2c:53:15:4e:31:24:bf:f6:2e:38:4c:46:ef:87:e3:
b4:8e:43:23:86:06:29:a6:b0:73:47:4d:5e:50:1b:
92:26:fa:92:82:76:8f:f7:81:bc:b8:ec:c2:02:5a:
29:0a:69:5b:82:8f:8a:92:6a:dc:79:55:a9:25:18:
fa:d3:09:d8:d3:6e:37:b5:18:4f:67:76:52:ee:da:
ee:d9:ed:97:49:1c:c2:e3:33:be:b4:f4:12:e6:dd:
f7:49:9d:5d:87:3e:57:90:30:af:1e:a8:8d:de:49:
1b:d3:15:68:c5:9c:cc:3e:f5:31:16:8f:35:c2:20:
5d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:43:A2:D0:FD:22:2D:59:A3:FC:03:93:1B:EB:7B:4D:66:30:90:0E
X509v3 Authority Key Identifier:
keyid:4E:D1:D7:DF:25:A4:A9:D5:E7:27:C4:2F:55:E9:E3:18:3D:36:A9:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtHX3yWkqdXnJ8QvVenjGD02qTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:32:d4:3e:50:d6:20:11:f2:45:9e:d8:64:4f:99:96:1d:d7:
cb:9a:f5:3c:2a:58:fe:b5:57:51:b3:c8:43:7e:80:f0:e1:69:
35:3b:ab:40:4a:1a:66:b1:5c:4a:61:fb:7b:7a:d6:31:3a:09:
47:c4:d3:fd:9e:12:92:d2:bb:0f:8f:b7:25:94:65:f1:d0:84:
c3:a9:5c:12:ce:c6:4e:1b:28:7f:57:67:a6:00:ba:0a:a3:35:
db:e6:1d:5d:a1:80:31:73:62:38:e1:1f:b7:c7:3c:d1:d2:24:
a4:2c:06:9a:15:d5:af:9a:80:75:32:be:a6:b4:79:0a:54:1c:
58:33:24:fb:2f:38:65:4a:d6:34:77:de:16:21:8d:7d:6c:a2:
1f:07:ed:a2:92:26:d1:f8:82:ce:ee:83:76:c2:e8:c7:bc:f3:
09:ce:97:ba:51:89:90:3f:20:2d:a7:76:da:be:5c:54:9b:7e:
85:48:c2:f7:b0:92:8e:60:50:a9:3b:6f:0d:ec:ff:4d:62:45:
b3:f0:4b:15:7e:68:d3:07:28:16:41:a5:ba:0d:38:6f:25:43:
2e:b2:53:27:3e:42:de:06:66:59:2b:be:70:18:dd:7f:02:22:
9b:5b:62:c9:eb:ea:b5:31:34:7c:37:a4:37:1c:17:52:bf:b4:
6f:02:5f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:03 2025 by rpki-client