Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft
File: TtaClltaFeoMReqF7z20vnFnlpY.mft (raw, json)
Hash identifier: u/Rt+6K0i3+1Thq7gUibSHGP6WBczH7BDYDOx/82cwg=
Subject key identifier: 85:3D:8D:59:F6:77:B7:94:4F:F0:DD:D5:40:8D:30:B6:F7:4E:CA:4D
Authority key identifier: 4E:D6:82:96:5B:5A:15:EA:0C:45:EA:85:EF:3D:B4:BE:71:67:96:96
Certificate issuer: /CN=4ed682965b5a15ea0c45ea85ef3db4be71679696
Certificate serial: 0197B7EA90A55FA3529EE93F933A8EA71055
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtaClltaFeoMReqF7z20vnFnlpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft
Manifest number: 03DC
Signing time: Sat 28 Jun 2025 19:01:32 +0000
Manifest this update: Sat 28 Jun 2025 19:01:32 +0000
Manifest next update: Sun 29 Jun 2025 19:01:32 +0000
Files and hashes: 1: 3aqe87dN2fz6qQQtxNwtFo2__ps.roa (hash: Lt1Bd1g6jAvktpInXW5Oo10n3abY0buPeadfOybeVY0=)
2: TtaClltaFeoMReqF7z20vnFnlpY.crl (hash: IyE0RNJ40W8CZUrf4sH//Ez7j49NqPsKRrQCfo+6E9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtaClltaFeoMReqF7z20vnFnlpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:90:a5:5f:a3:52:9e:e9:3f:93:3a:8e:a7:10:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed682965b5a15ea0c45ea85ef3db4be71679696
Validity
Not Before: Jun 28 19:01:32 2025 GMT
Not After : Jun 29 19:01:32 2025 GMT
Subject: CN=853d8d59f677b7944ff0ddd5408d30b6f74eca4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:56:a9:4b:0e:3c:1a:1d:16:2d:bd:5c:30:f8:
16:ae:3a:b9:03:36:03:34:39:eb:2f:49:6f:39:0c:
5c:f0:4d:92:3b:93:dc:1d:47:ee:b2:f7:72:09:9a:
5f:6b:8c:c2:05:51:bc:c5:c9:99:5b:c6:1f:48:48:
15:63:ab:2c:ad:f1:6b:1c:cb:04:89:95:e6:4e:59:
ab:06:32:6c:60:55:dc:b6:98:9e:e7:32:48:63:95:
89:e6:a8:3a:0d:93:f5:51:e6:3b:77:69:22:3e:de:
85:c9:e7:46:f9:7f:76:ae:3b:aa:35:b2:a4:f0:67:
e9:a9:9f:87:62:06:96:2c:4e:97:9d:15:70:09:5e:
e8:01:00:20:25:a6:4c:f7:f7:5f:e0:70:e3:dd:7e:
cf:c8:d5:69:65:b8:da:8e:0e:0e:0b:b5:b4:bb:50:
1a:32:68:51:e0:2c:9b:c2:19:f9:86:ec:bf:a4:17:
23:ce:4b:d2:a0:bd:ca:90:f4:e7:c9:10:e9:71:93:
f1:78:05:5c:63:fb:56:2d:76:65:f9:d1:ef:41:8f:
32:1d:da:6a:b9:88:8b:e2:26:e5:c9:08:63:e9:46:
d4:47:8e:82:c5:21:d2:5e:68:d7:1a:2f:24:94:c8:
ce:27:fb:10:d8:1e:aa:30:3d:ed:a5:8a:84:2b:82:
b0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:3D:8D:59:F6:77:B7:94:4F:F0:DD:D5:40:8D:30:B6:F7:4E:CA:4D
X509v3 Authority Key Identifier:
keyid:4E:D6:82:96:5B:5A:15:EA:0C:45:EA:85:EF:3D:B4:BE:71:67:96:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtaClltaFeoMReqF7z20vnFnlpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:af:21:4b:9b:55:3b:67:ee:af:21:4d:29:8e:58:fc:9b:7e:
36:27:d8:f4:ba:55:70:af:79:9e:2b:ab:79:61:0b:68:3f:70:
a3:28:5b:73:28:7c:cd:eb:b0:af:a9:6f:89:ec:49:58:6b:98:
9b:bf:e4:08:71:9e:23:f5:2f:9f:37:7f:e5:5b:a6:40:01:e2:
97:b0:dd:d0:07:ed:dc:df:59:32:47:81:a7:85:cc:cb:51:ef:
a8:8e:97:61:6b:2f:e8:97:67:05:b7:81:a6:1c:48:66:64:3e:
8b:06:91:d1:c2:43:69:a2:cc:f7:1b:87:25:4c:59:eb:52:cf:
05:1e:2d:cd:1d:4b:65:43:be:30:38:87:59:b4:2e:ba:eb:51:
66:b9:16:be:36:99:23:49:67:d8:38:5b:28:c3:b9:70:e0:b3:
d1:08:32:82:ae:2a:7a:f1:e1:fa:4e:da:76:17:f6:03:d8:df:
56:3a:46:d9:37:12:e6:cd:a4:98:d6:2c:a0:79:40:3c:6a:3b:
4f:9c:35:03:86:a4:d0:9a:44:0b:79:37:62:5e:86:cd:11:d8:
5d:67:9f:04:9a:d9:b7:ed:2f:cf:cb:12:e0:93:38:df:57:d0:
47:aa:22:65:0f:c5:7d:af:ea:54:93:71:30:e4:81:cc:e9:f4:
ab:0e:4d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:55:39 2025 by rpki-client