Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/33bc07-9c3d-4606-b7f5-d3812e616485/1/TTz66pjQdmF8HqrOk0fi1Kc81E8.mft
File: TTz66pjQdmF8HqrOk0fi1Kc81E8.mft (raw, json)
Hash identifier: QMjGy7bi1vGpkgA4NV5mJIeagEK3YtyjDDTamTfKUK4=
Subject key identifier: B6:07:51:61:EB:03:F0:BD:F5:59:DF:85:C2:B7:73:72:B8:52:2D:20
Authority key identifier: 4D:3C:FA:EA:98:D0:76:61:7C:1E:AA:CE:93:47:E2:D4:A7:3C:D4:4F
Certificate issuer: /CN=4d3cfaea98d076617c1eaace9347e2d4a73cd44f
Certificate serial: 0198D4728FB3EF7CAC27227D0277463B8C1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTz66pjQdmF8HqrOk0fi1Kc81E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/33bc07-9c3d-4606-b7f5-d3812e616485/1/TTz66pjQdmF8HqrOk0fi1Kc81E8.mft
Manifest number: 0182
Signing time: Sat 23 Aug 2025 01:02:14 +0000
Manifest this update: Sat 23 Aug 2025 01:02:14 +0000
Manifest next update: Sun 24 Aug 2025 01:02:14 +0000
Files and hashes: 1: TTz66pjQdmF8HqrOk0fi1Kc81E8.crl (hash: Cw10zsn7iKh7nktWHs2E99aLi5lPFqaXgiIrFFc5PMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/33bc07-9c3d-4606-b7f5-d3812e616485/1/TTz66pjQdmF8HqrOk0fi1Kc81E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/33bc07-9c3d-4606-b7f5-d3812e616485/1/TTz66pjQdmF8HqrOk0fi1Kc81E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TTz66pjQdmF8HqrOk0fi1Kc81E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:8f:b3:ef:7c:ac:27:22:7d:02:77:46:3b:8c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3cfaea98d076617c1eaace9347e2d4a73cd44f
Validity
Not Before: Aug 23 01:02:14 2025 GMT
Not After : Aug 24 01:02:14 2025 GMT
Subject: CN=b6075161eb03f0bdf559df85c2b77372b8522d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5f:f8:f6:1b:bb:35:78:17:ac:9a:f8:d3:9c:
88:79:ca:f9:dd:7c:80:35:59:c7:80:5d:4b:5e:a9:
60:f1:db:ed:6b:fd:7d:99:fb:2f:93:96:24:46:27:
18:56:7f:41:27:e9:75:f6:91:c2:d0:be:97:7b:c2:
93:43:19:1c:7e:92:1f:7e:df:6f:ef:a7:93:cb:69:
2d:85:2d:19:40:0c:20:35:26:91:fd:d5:6d:08:7d:
6e:eb:e7:20:72:2b:fd:1a:59:4b:58:89:1a:7d:66:
79:1c:fe:8b:fe:a8:ee:8a:da:de:a8:fd:c4:f3:86:
7c:49:78:49:75:36:94:8e:36:06:fd:6d:e9:8a:4a:
f4:a7:89:8b:61:6a:5d:15:db:ee:53:0b:9b:97:ff:
54:bc:37:66:34:24:80:a6:de:98:17:68:97:fd:c1:
b1:26:00:e7:a9:63:3b:72:0b:a3:48:e8:b4:19:a3:
ca:95:27:3a:72:6f:63:30:57:b2:0a:29:1b:08:03:
98:44:15:cb:31:74:28:cf:8b:dd:d3:44:f2:9b:b5:
58:38:e9:0f:d5:fa:50:26:cf:cd:b2:2e:76:85:ae:
76:21:92:43:4d:74:e1:d3:0b:da:9b:e2:98:e9:86:
2d:9d:03:46:f6:10:5c:1f:87:1f:ba:12:d5:66:b9:
ca:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:07:51:61:EB:03:F0:BD:F5:59:DF:85:C2:B7:73:72:B8:52:2D:20
X509v3 Authority Key Identifier:
keyid:4D:3C:FA:EA:98:D0:76:61:7C:1E:AA:CE:93:47:E2:D4:A7:3C:D4:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTz66pjQdmF8HqrOk0fi1Kc81E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/33bc07-9c3d-4606-b7f5-d3812e616485/1/TTz66pjQdmF8HqrOk0fi1Kc81E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/33bc07-9c3d-4606-b7f5-d3812e616485/1/TTz66pjQdmF8HqrOk0fi1Kc81E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:40:76:e1:f7:53:f8:fe:bf:3e:c8:6b:bd:3b:f4:18:28:88:
70:5b:64:be:64:40:69:41:0c:af:32:e8:bf:43:43:5e:60:10:
57:9e:02:ff:a0:54:ec:ad:e0:c2:b5:81:c5:b4:02:66:05:2d:
31:71:8f:aa:db:8a:51:b5:97:17:a2:67:73:68:54:97:9a:c4:
a4:e5:97:fe:e8:71:6e:66:4a:48:d4:70:f3:80:46:60:e2:ec:
28:7f:c6:df:91:04:87:7e:9a:8e:2a:15:50:04:9f:39:f3:db:
57:26:44:b4:99:f3:d1:42:f5:d9:f3:aa:f4:ca:d1:eb:51:ad:
37:98:8c:87:75:85:a0:5f:de:80:b3:ee:79:b8:93:1c:71:88:
61:79:2d:9d:cb:90:0b:3e:b0:e2:e8:85:7d:f3:1a:05:b5:86:
50:b3:48:79:8f:4b:65:7e:c3:df:bd:28:19:63:28:df:33:af:
47:47:be:7d:da:f1:42:18:47:66:8d:97:75:56:85:b1:7f:2c:
ed:53:13:13:ed:8c:42:d8:0c:ef:e1:6e:75:be:30:a8:8d:38:
c6:da:ef:a3:b8:5d:99:57:e3:29:98:ea:6b:0b:d2:7e:f1:44:
ab:14:c2:3f:0f:a9:87:d0:06:14:20:33:52:12:b9:b5:5a:40:
5e:dc:e6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:38:46 2025 by rpki-client