Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.mft
File: ttaENqdjOfZxRBz71QrUAdPAD_8.mft (raw, json)
Hash identifier: XUxgynoqFY1PfYF+4SO+18Xa/355YS+0+6q2vsTvmd8=
Subject key identifier: 73:95:1D:D3:7A:49:67:B5:59:BF:E0:42:55:36:82:2C:FB:41:43:5D
Authority key identifier: B6:D6:84:36:A7:63:39:F6:71:44:1C:FB:D5:0A:D4:01:D3:C0:0F:FF
Certificate issuer: /CN=b6d68436a76339f671441cfbd50ad401d3c00fff
Certificate serial: 0196C2392C370BB355FFF53665CCF1D3B77B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ttaENqdjOfZxRBz71QrUAdPAD_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.mft
Manifest number: 12A1
Signing time: Mon 12 May 2025 02:00:48 +0000
Manifest this update: Mon 12 May 2025 02:00:48 +0000
Manifest next update: Tue 13 May 2025 02:00:48 +0000
Files and hashes: 1: HROKUTUR5gMY3n6zglHSVCbZS_I.roa (hash: w0BOZ7icboJC4/TfINzPR6MRHeR0gZCuXliuxuy25YQ=)
2: ttaENqdjOfZxRBz71QrUAdPAD_8.crl (hash: JjUW1wznwurHwR8Q+Y1UAFZTerboaWMEwxbG0c6bgjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ttaENqdjOfZxRBz71QrUAdPAD_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:39:2c:37:0b:b3:55:ff:f5:36:65:cc:f1:d3:b7:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6d68436a76339f671441cfbd50ad401d3c00fff
Validity
Not Before: May 12 02:00:48 2025 GMT
Not After : May 13 02:00:48 2025 GMT
Subject: CN=73951dd37a4967b559bfe0425536822cfb41435d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e4:5f:da:7c:d1:0b:d8:bc:43:cc:38:a8:4f:
e4:4a:8a:4a:9a:f2:2f:38:53:4d:78:d9:96:40:79:
97:2e:0d:ac:7b:de:90:30:69:26:cd:47:99:da:3a:
54:83:af:16:26:28:a1:e5:5c:20:64:1a:44:89:87:
5c:9f:29:7d:74:90:a4:9e:54:95:2b:b9:4e:c0:4a:
4b:5f:fe:e7:82:21:4c:07:05:62:3f:62:c6:8e:94:
6b:cb:ca:99:ab:d3:79:9c:68:b9:53:b1:4f:3a:a8:
94:61:ab:1a:95:42:49:d5:cd:1e:bc:4e:13:02:b8:
54:a6:5c:cc:c8:ee:68:80:66:d5:a4:12:b6:5a:db:
c9:49:31:14:9c:f4:a7:25:89:59:06:5b:4e:fe:3a:
5e:14:d9:a6:ec:87:74:1e:a5:a4:d2:99:de:51:9d:
9e:7d:de:24:f5:e9:90:1a:a1:88:43:43:6a:23:76:
b3:bc:43:d7:d2:e9:3c:72:ed:42:f7:93:7c:36:32:
d0:f5:a8:5e:1c:6c:e6:b2:9a:44:e1:16:69:7c:7f:
86:93:35:c9:2e:0f:af:bd:ef:e8:06:c1:1c:77:9b:
71:f5:05:2e:4d:d5:b6:5e:46:66:24:bf:7b:dd:2b:
7e:99:15:28:cc:0e:4e:27:44:74:d1:d3:83:bb:13:
bd:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:95:1D:D3:7A:49:67:B5:59:BF:E0:42:55:36:82:2C:FB:41:43:5D
X509v3 Authority Key Identifier:
keyid:B6:D6:84:36:A7:63:39:F6:71:44:1C:FB:D5:0A:D4:01:D3:C0:0F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttaENqdjOfZxRBz71QrUAdPAD_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:65:59:a9:84:c8:0f:ff:ab:fd:36:82:b2:43:a8:7f:12:b9:
d9:b5:92:d4:74:7f:e6:8f:33:ed:fd:3e:b4:be:e7:87:76:1e:
3f:64:c6:46:29:d3:84:cc:e1:a7:e1:d1:ab:3d:3f:0c:e7:66:
7e:9c:db:18:93:25:1e:68:58:42:e1:35:27:40:20:05:48:cf:
7f:16:db:7f:25:12:c3:d0:98:88:14:2a:90:3e:0a:22:ff:23:
93:09:db:2c:ce:f3:f9:2b:52:2d:18:db:7f:ff:fe:de:62:3c:
39:00:59:25:72:79:b8:63:2e:2f:04:06:8b:53:7d:2c:75:55:
5b:2c:77:f5:de:f1:96:9f:6a:97:bb:2c:06:a6:f5:09:bd:6e:
e6:3d:03:43:80:b9:b7:f8:74:c7:be:9c:79:64:2d:42:41:6a:
5c:ec:0c:5a:23:18:85:9b:57:bd:8e:73:31:25:6e:39:5f:d7:
01:10:9f:ea:df:28:e1:2d:55:dd:a3:79:31:aa:91:30:f1:15:
88:17:0c:d3:42:0a:2a:5c:6f:a3:e1:34:4f:a2:a1:f7:ab:f6:
5e:08:62:9f:6b:9d:e6:6d:3d:83:49:0a:67:3a:1d:cf:1c:b8:
72:a9:c7:04:9a:22:76:66:bd:56:cf:f1:79:46:19:d9:cb:59:
2a:6e:18:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:11:09 2025 by rpki-client