Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft
File: TtaClltaFeoMReqF7z20vnFnlpY.mft (raw, json)
Hash identifier: Gi3v+eClr7N6AucwWQ/FMWlqC/E7OmOyhcd2KfAkVrk=
Subject key identifier: 47:E5:C5:14:9A:B3:F6:E6:0A:C2:B3:A6:5E:41:22:DB:4E:07:D0:8E
Authority key identifier: 4E:D6:82:96:5B:5A:15:EA:0C:45:EA:85:EF:3D:B4:BE:71:67:96:96
Certificate issuer: /CN=4ed682965b5a15ea0c45ea85ef3db4be71679696
Certificate serial: 0198D5BBDE8FFED2514C52AFCD71C35C9EF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtaClltaFeoMReqF7z20vnFnlpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft
Manifest number: 0470
Signing time: Sat 23 Aug 2025 07:01:55 +0000
Manifest this update: Sat 23 Aug 2025 07:01:55 +0000
Manifest next update: Sun 24 Aug 2025 07:01:55 +0000
Files and hashes: 1: 3aqe87dN2fz6qQQtxNwtFo2__ps.roa (hash: Lt1Bd1g6jAvktpInXW5Oo10n3abY0buPeadfOybeVY0=)
2: TtaClltaFeoMReqF7z20vnFnlpY.crl (hash: +kSYebXQyMwZ6eU90cArdvyE7oUkjgegTCyIkIdn4dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtaClltaFeoMReqF7z20vnFnlpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:de:8f:fe:d2:51:4c:52:af:cd:71:c3:5c:9e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed682965b5a15ea0c45ea85ef3db4be71679696
Validity
Not Before: Aug 23 07:01:55 2025 GMT
Not After : Aug 24 07:01:55 2025 GMT
Subject: CN=47e5c5149ab3f6e60ac2b3a65e4122db4e07d08e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f9:0e:31:d5:0f:a9:72:32:68:47:9b:3d:1a:
e6:26:e2:fa:53:92:67:6f:a8:e5:d1:ca:58:2b:09:
c6:68:26:e7:04:40:b9:c8:21:ce:a9:b6:de:27:1b:
57:7c:7d:60:a8:ad:fc:33:cc:e2:40:36:f9:31:23:
db:59:0c:b5:b0:4a:7e:14:1a:e3:59:13:42:d1:bf:
86:7c:cb:84:7f:4f:73:32:29:09:13:b7:3c:82:12:
df:49:8e:79:ac:f5:1b:48:55:b6:8c:13:76:cf:ce:
f5:f7:4d:d7:5d:f8:d1:e5:5a:ed:d8:e5:6e:1d:3a:
5f:59:79:b1:d5:e0:58:91:19:f8:ca:87:92:ae:dc:
23:0c:ce:6e:5c:21:e1:93:1b:cd:bd:ae:4a:18:6d:
f2:5d:12:e5:63:b8:86:87:59:74:9d:43:89:56:e4:
d7:a3:d1:bb:34:9a:b8:85:d9:45:91:42:e4:0b:b1:
c8:fc:32:a3:82:76:d2:9e:0c:a8:ad:91:4f:93:bd:
43:3f:d0:56:79:d8:8b:3d:53:be:0c:a3:e4:b4:ca:
34:fe:87:88:04:41:86:e0:64:d0:f5:84:20:31:3f:
ee:53:1f:fc:c2:84:75:32:05:11:be:ef:96:29:dd:
ea:6f:25:03:88:73:ef:21:ef:77:2c:8a:2b:0e:02:
5f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E5:C5:14:9A:B3:F6:E6:0A:C2:B3:A6:5E:41:22:DB:4E:07:D0:8E
X509v3 Authority Key Identifier:
keyid:4E:D6:82:96:5B:5A:15:EA:0C:45:EA:85:EF:3D:B4:BE:71:67:96:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtaClltaFeoMReqF7z20vnFnlpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:74:6d:5b:cb:92:47:1f:7e:a7:1f:70:eb:60:42:40:40:9c:
37:33:20:8a:95:d6:97:57:08:a1:d1:42:52:bc:15:4c:24:c7:
db:d3:75:e5:3f:ec:9c:4d:b2:e0:17:5b:0b:25:aa:30:28:72:
40:91:b1:48:5d:16:30:14:49:41:83:b7:57:10:67:7e:d7:95:
27:39:9a:01:84:ba:dc:b5:90:df:4c:de:48:4b:78:52:24:28:
53:2a:bb:c2:30:db:41:b3:79:28:bf:a3:d8:a1:04:18:e6:96:
03:cf:2e:ca:3c:c0:28:ee:4b:03:08:bf:e5:d9:09:20:25:e0:
c2:89:4e:23:dd:ec:82:16:6e:f2:e0:1a:12:5f:4c:e0:3b:b9:
08:5e:76:cf:ae:64:c3:ad:98:d5:aa:80:73:8a:5f:60:97:a7:
35:6a:87:73:76:db:66:69:c8:9e:c7:ed:2d:af:b6:52:d9:4e:
20:a7:58:0a:41:19:d8:5c:04:28:e7:a7:b8:dd:03:ba:4f:5f:
98:27:e4:cc:9a:75:98:c8:08:cd:a4:77:ef:61:ee:2b:c7:3d:
2e:78:ba:6b:a5:1c:a9:d3:9d:dd:83:ba:b0:1c:57:f6:21:be:
b3:cd:58:34:b5:7e:90:2d:51:4f:4f:73:fa:82:35:38:ee:e0:
1a:b7:b1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:13:26 2025 by rpki-client