Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
File: TTAqLdUXpho7lSdG8u6fvkNtY0k.mft (raw, json)
Hash identifier: Ig4ZZq43AGi++iycIf5bG0unRyrBJqu9h2RnVlD6xNQ=
Subject key identifier: CB:7D:81:0B:4E:12:2D:D2:9C:8F:F5:73:F9:35:8D:13:00:38:77:A4
Authority key identifier: 4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
Certificate issuer: /CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Certificate serial: 0197499EF8854A77075752855DAA4431BDE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
Manifest number: 1581
Signing time: Sat 07 Jun 2025 09:00:44 +0000
Manifest this update: Sat 07 Jun 2025 09:00:44 +0000
Manifest next update: Sun 08 Jun 2025 09:00:44 +0000
Files and hashes: 1: OS7c8-e6_IPhh6UsfkxpmetgvVM.roa (hash: u4NSl9jjxeT5MDlBDBHxspeJOasrj/ytcidQr1I6tQs=)
2: TTAqLdUXpho7lSdG8u6fvkNtY0k.crl (hash: RLVqnIkaCrwR/O/2P0xYqOI9PBtAWdRbnHn3B/ghpgI=)
3: ujFYCfp3NT3vzURuQfX3QSbCmrc.roa (hash: Mq+9HfcpF+4pzQa3kfg+LdSo4w+vmYd+Egj8pIwlOE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9e:f8:85:4a:77:07:57:52:85:5d:aa:44:31:bd:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Validity
Not Before: Jun 7 09:00:44 2025 GMT
Not After : Jun 8 09:00:44 2025 GMT
Subject: CN=cb7d810b4e122dd29c8ff573f9358d13003877a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:62:44:a7:92:0f:31:02:10:2a:3e:4e:7c:7b:
e6:21:5b:3c:f9:7b:68:30:52:d1:a4:b4:d3:0b:e4:
e6:f7:b8:81:22:98:24:fd:6f:5a:cf:30:12:8f:4b:
00:4f:f2:e3:eb:96:90:6d:74:e7:fa:a1:3b:ce:b9:
1c:17:df:fb:ac:a5:77:e1:4d:64:4b:35:19:2b:6a:
47:f0:d9:d1:32:7d:d5:31:83:9c:2f:9d:84:e3:b4:
dd:b7:45:1e:44:8e:ab:8d:07:ab:06:3f:1a:4f:b3:
8a:6d:d3:2a:4f:4c:9f:92:60:f7:0e:c5:28:04:73:
28:04:ba:97:96:bd:76:33:06:72:6d:67:1b:1b:f2:
e9:e4:09:f4:f2:72:53:42:18:bc:9b:77:a5:ec:64:
e1:b4:ee:de:f3:5c:6f:30:a8:76:6d:c3:b0:48:d2:
25:5a:64:9a:e1:9e:81:aa:97:2e:f6:49:b5:b7:e8:
28:e5:66:e9:09:7f:b1:77:be:5c:c7:ae:13:84:66:
ac:e3:99:30:8e:5a:ab:4b:36:64:8f:d3:df:ff:3f:
11:8f:f9:ad:5c:4f:14:ed:0a:62:ce:46:0c:c2:82:
70:5a:ab:66:ed:71:0b:35:15:26:48:1c:9f:29:c2:
cc:b8:79:78:76:82:7d:3f:5f:34:6f:bc:7b:71:b2:
8e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:7D:81:0B:4E:12:2D:D2:9C:8F:F5:73:F9:35:8D:13:00:38:77:A4
X509v3 Authority Key Identifier:
keyid:4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:73:3f:d5:06:59:1f:d0:50:d6:22:b6:bd:29:c2:cd:e3:2d:
5e:28:4f:85:8c:7d:67:7d:fe:d0:17:8d:fd:7b:49:2c:96:31:
fc:3d:fb:8c:63:c6:b2:8d:05:a8:7d:39:7f:9d:24:47:24:a8:
79:d4:3a:71:67:d0:86:12:a1:c1:19:c1:a3:73:cd:73:bd:08:
22:af:af:b5:1f:0c:5f:3d:12:cc:75:56:5f:0a:eb:57:28:b3:
b8:03:a5:46:93:b3:70:ab:51:ab:1f:c0:8f:c2:f7:bf:5c:53:
90:ef:65:60:cb:b8:29:90:d7:7c:b5:94:2c:ac:b9:3a:08:be:
47:41:a5:2d:38:2b:8d:fa:1e:c1:31:22:13:ca:23:db:25:79:
28:72:02:3d:5c:12:78:a8:98:94:d7:80:0e:39:94:5f:f7:25:
e7:d6:49:df:4f:4e:84:fc:10:9c:cb:95:91:bd:3e:3c:1a:c6:
88:0e:91:8d:57:17:86:b9:91:cc:67:4b:6d:92:23:2b:cb:d9:
ae:28:11:67:1f:02:8e:fd:77:9f:7d:d0:3b:ca:53:dd:08:30:
f8:83:84:56:82:15:6f:4c:92:84:15:97:92:d5:a3:e2:9c:ec:
99:14:2a:ef:14:31:8e:46:c4:fe:8e:f9:de:a7:c2:83:35:d4:
98:af:86:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:02:49 2025 by rpki-client