Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.mft
File: ttFBGNvSJymNqoDHrKsR7qbWPiE.mft (raw, json)
Hash identifier: o6o23PPmRkSc3LE48s6RwiiHLqY9TbnhHr93pndZ6+s=
Subject key identifier: 00:11:31:86:12:5B:95:BE:56:80:1E:2E:93:0E:68:78:C9:34:95:25
Authority key identifier: B6:D1:41:18:DB:D2:27:29:8D:AA:80:C7:AC:AB:11:EE:A6:D6:3E:21
Certificate issuer: /CN=b6d14118dbd227298daa80c7acab11eea6d63e21
Certificate serial: 0197B82139197BE8ACE05B02A68F4C15AB33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.mft
Manifest number: 15CB
Signing time: Sat 28 Jun 2025 20:01:14 +0000
Manifest this update: Sat 28 Jun 2025 20:01:14 +0000
Manifest next update: Sun 29 Jun 2025 20:01:14 +0000
Files and hashes: 1: 7MBZP4USFz5hPGotD8N5VTxiCh4.roa (hash: xrZIN20uzCUHnquaIR7JyCpdhy6O1fXdg0ZyfCtPx1A=)
2: _-vCy7ICzJgkXfJZ75qxspKlSv8.roa (hash: jMbO+xgYxKlWrIGWglTequYy9eTc9dUkDdUL8kvtI4s=)
3: ttFBGNvSJymNqoDHrKsR7qbWPiE.crl (hash: zBpTIISd/DxRhtu9dWLtQVKXctDbpUjBWHlLrM4P2g0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:39:19:7b:e8:ac:e0:5b:02:a6:8f:4c:15:ab:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6d14118dbd227298daa80c7acab11eea6d63e21
Validity
Not Before: Jun 28 20:01:14 2025 GMT
Not After : Jun 29 20:01:14 2025 GMT
Subject: CN=00113186125b95be56801e2e930e6878c9349525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:dd:80:c9:53:d7:a2:73:70:8c:08:69:3f:a2:
d3:c0:11:80:7e:ad:44:a2:4a:5d:50:dc:9d:3f:5c:
69:e5:39:d3:b2:64:15:54:3a:01:f7:ff:ae:19:44:
bd:fd:69:2f:48:02:f5:73:d7:41:4e:2f:00:09:f4:
9f:95:51:e1:ba:bb:20:7e:a1:e8:22:e9:85:46:c7:
b4:58:94:d6:bc:0d:8c:54:d7:98:4d:5a:4a:26:d2:
0f:6e:98:e3:a0:a6:19:81:62:f4:c7:e9:3d:30:1e:
ab:8c:f4:0a:63:dc:7b:bf:45:e6:8f:08:4a:c0:15:
22:ea:45:42:82:c6:db:00:66:5a:1d:2b:ce:53:aa:
89:30:a2:29:84:35:74:49:a8:a8:df:d2:6c:97:a7:
40:83:04:9d:44:71:95:40:c7:26:ce:48:33:77:d9:
ea:2e:b4:9e:d5:dc:0e:38:5c:0e:a4:2d:12:3f:a3:
4e:e9:94:54:6b:c9:95:32:fd:26:7f:f8:5a:3b:34:
12:26:74:ec:4e:ee:53:a5:1a:d3:6c:a4:c8:7a:41:
18:9a:9a:2a:f4:d7:4f:0e:70:7f:85:26:4c:cf:03:
48:1e:28:d5:d1:0d:d0:43:b8:fa:1c:20:23:52:a8:
25:1e:ee:8d:a6:69:be:47:6f:57:d7:ad:d4:92:b5:
6a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:11:31:86:12:5B:95:BE:56:80:1E:2E:93:0E:68:78:C9:34:95:25
X509v3 Authority Key Identifier:
keyid:B6:D1:41:18:DB:D2:27:29:8D:AA:80:C7:AC:AB:11:EE:A6:D6:3E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ba:60:68:f8:78:8c:bd:84:38:ee:b2:7e:b8:78:b1:1d:f3:
49:bb:d9:c5:ab:ee:5a:17:00:c2:28:2c:db:5a:16:9b:3d:f4:
c4:ae:2b:65:db:4c:17:27:b2:fe:11:37:c7:26:53:b1:a1:bf:
f1:17:85:34:0c:6b:bc:e4:f7:96:e6:f3:fe:1d:a0:ae:55:bf:
e1:0c:eb:f8:3e:d5:a7:9d:0e:65:97:40:8d:ed:8f:e6:69:96:
2d:9d:1d:ba:ce:f7:9a:07:5e:73:03:e9:75:8a:53:f6:15:24:
78:e1:c1:b1:14:2e:b4:93:15:32:41:95:37:90:65:94:d6:f3:
71:97:31:83:7f:af:f3:e0:22:9c:ab:2e:41:08:1a:a7:21:5f:
49:59:e8:6b:0b:1e:9f:ee:e5:fa:94:96:69:26:ec:b9:8d:b5:
25:b3:a1:5a:d7:f1:24:17:69:69:05:77:48:10:41:13:d8:4b:
fd:1e:25:da:16:ce:48:e1:99:7c:22:cd:ab:82:33:8b:8f:b5:
80:81:c8:ec:0a:89:67:87:98:c0:a9:dc:73:90:38:e9:0e:c0:
a5:aa:0c:1c:4a:b3:c6:1b:e1:de:13:54:28:57:5e:67:7d:5f:
fd:ed:c7:a3:4e:f4:32:2a:32:cc:2b:52:5a:87:e5:f6:89:1f:
93:d9:50:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:20:14 2025 by rpki-client