Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.mft
File: ttaENqdjOfZxRBz71QrUAdPAD_8.mft (raw, json)
Hash identifier: +hopcZ6hdZ47/EUrcGpLuow62bWbQ+U1uwRhVF6fLpA=
Subject key identifier: EB:02:FB:A9:57:84:7E:4D:AC:E2:61:B0:65:D0:91:83:6D:97:54:66
Authority key identifier: B6:D6:84:36:A7:63:39:F6:71:44:1C:FB:D5:0A:D4:01:D3:C0:0F:FF
Certificate issuer: /CN=b6d68436a76339f671441cfbd50ad401d3c00fff
Certificate serial: 0197B96ACA60B497E54E5DE39E3703C2E739
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ttaENqdjOfZxRBz71QrUAdPAD_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.mft
Manifest number: 1321
Signing time: Sun 29 Jun 2025 02:01:12 +0000
Manifest this update: Sun 29 Jun 2025 02:01:12 +0000
Manifest next update: Mon 30 Jun 2025 02:01:12 +0000
Files and hashes: 1: HROKUTUR5gMY3n6zglHSVCbZS_I.roa (hash: w0BOZ7icboJC4/TfINzPR6MRHeR0gZCuXliuxuy25YQ=)
2: ttaENqdjOfZxRBz71QrUAdPAD_8.crl (hash: NH2eBkAe5SRp5dBHyxhpKVAEtpJbID/AA78/4hxodhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ttaENqdjOfZxRBz71QrUAdPAD_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:ca:60:b4:97:e5:4e:5d:e3:9e:37:03:c2:e7:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6d68436a76339f671441cfbd50ad401d3c00fff
Validity
Not Before: Jun 29 02:01:12 2025 GMT
Not After : Jun 30 02:01:12 2025 GMT
Subject: CN=eb02fba957847e4dace261b065d091836d975466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:67:aa:10:b0:e4:8b:c4:43:31:f4:7e:e0:06:
ae:de:23:40:60:f9:27:e9:cc:0f:02:ee:32:c9:51:
05:3b:d2:f0:b3:3f:83:bc:40:47:83:b9:51:ed:a7:
9f:5f:7f:8c:e9:7b:57:5c:dd:91:25:35:27:c9:03:
dd:f6:ad:28:da:4c:ce:79:59:a2:e3:69:1a:fd:e0:
c4:8b:48:20:66:bc:b0:d9:fb:d7:f4:0c:57:42:a8:
b1:c8:e9:e3:f9:24:30:bb:9e:80:25:65:55:a8:3c:
9e:2a:17:5d:55:46:ca:c3:23:c8:c9:97:a8:19:4b:
30:99:2b:43:df:20:43:b3:a9:28:90:f2:86:da:05:
30:49:bd:90:4b:ed:1a:ca:c7:45:4f:4b:68:9e:37:
9b:88:3c:88:c2:56:c5:82:62:fd:a3:c2:9e:44:a9:
25:52:b3:88:3b:27:14:01:d0:26:44:8e:97:b0:3a:
c1:fc:c0:3f:ce:8a:5d:aa:60:dd:3e:fa:97:bf:02:
25:6b:79:4b:a9:9a:f0:a4:c9:77:01:ac:49:81:ca:
d8:5b:7e:fb:f0:10:d3:8c:f9:d9:db:56:14:d3:58:
67:f4:a2:55:a2:38:54:eb:65:1d:18:00:70:0d:68:
ea:75:b4:4a:ce:90:96:1d:b9:ed:aa:fb:3b:64:02:
ee:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:02:FB:A9:57:84:7E:4D:AC:E2:61:B0:65:D0:91:83:6D:97:54:66
X509v3 Authority Key Identifier:
keyid:B6:D6:84:36:A7:63:39:F6:71:44:1C:FB:D5:0A:D4:01:D3:C0:0F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttaENqdjOfZxRBz71QrUAdPAD_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:e5:25:6a:6e:dc:fb:31:b7:e3:2c:ad:3a:0a:0d:0a:e3:04:
1d:68:64:89:bb:f2:8b:d3:b4:0d:18:76:3d:29:4e:d5:dd:01:
39:df:72:d2:6f:ec:08:2d:0a:32:5a:76:0c:b0:61:f4:51:00:
8d:07:c4:f7:37:7b:58:80:c3:6e:7c:10:a5:fd:dd:cf:71:dc:
74:91:2f:31:6a:8f:75:8e:bb:77:f6:f4:c6:77:50:dd:b4:d7:
1e:76:a2:22:60:9a:ed:fa:73:1a:f1:7f:54:44:50:a5:79:52:
44:64:3d:90:88:a2:96:7d:e7:f7:92:0a:15:58:a5:3b:52:1d:
6b:55:0a:53:2e:7d:ed:99:3b:dc:58:7d:73:19:2d:a5:a6:fa:
be:67:09:38:16:11:36:c2:55:30:93:e5:c0:01:9f:82:e9:e3:
79:1a:3b:b3:83:14:8d:0e:9a:b3:98:6c:02:82:ba:c4:e3:88:
b6:a5:45:09:8f:c1:66:19:fb:21:99:9c:f7:4a:77:f5:84:f9:
92:aa:bc:d3:7d:b9:d2:23:5f:93:92:7c:20:d4:41:d9:c1:d9:
62:03:7f:7d:2e:a0:68:04:8a:e3:31:16:30:34:4c:9d:fb:64:
84:53:bf:f7:c3:0b:4d:75:10:48:98:3c:3c:cc:14:45:7a:fc:
07:26:f8:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:54:08 2025 by rpki-client