Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
File: TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft (raw, json)
Hash identifier: YjmU1QTMDopke5pGYhSXpNQ7FMrU6fJUAz7iKrQ1BK4=
Subject key identifier: 34:5A:C6:47:F5:C5:1D:CF:63:FB:8A:E0:21:CD:B3:BE:A9:7D:42:7E
Authority key identifier: 4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
Certificate issuer: /CN=4d3f54f304e6b851608c293978b16ba51ac0350e
Certificate serial: 0196BFDC9B6A166C4CE2AB27ED81F00D317D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 15:00:28 +0000
Manifest this update: Sun 11 May 2025 15:00:28 +0000
Manifest next update: Mon 12 May 2025 15:00:28 +0000
Files and hashes: 1: 2-8ODfbSISRCVrFLypE1beop4mI.roa (hash: CTu3Z/KQAufmJs+pAxP0V5GvviRUTQPwl9gEk4hUm6E=)
2: TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl (hash: xL21OhHPgxefsd0cORDXlwRsqCvNvkFvXzUBeH5t5L0=)
3: xOYkGw3SqmDNjUBUXBvZW0U-4J4.roa (hash: CMrEVMiwQAaT7qSr6cVaZ45q/VR6zzPcJBOroZoc7n8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 15:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:dc:9b:6a:16:6c:4c:e2:ab:27:ed:81:f0:0d:31:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3f54f304e6b851608c293978b16ba51ac0350e
Validity
Not Before: May 11 15:00:28 2025 GMT
Not After : May 12 15:00:28 2025 GMT
Subject: CN=345ac647f5c51dcf63fb8ae021cdb3bea97d427e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:99:bc:3b:99:4a:28:74:43:cd:89:2a:a1:70:
0d:3d:0a:f4:53:86:db:11:6a:fd:f5:90:24:78:35:
99:eb:ff:6b:7a:6f:c4:9c:e6:d3:be:cd:12:9f:11:
24:d0:b8:dc:88:0d:53:6f:46:65:93:71:68:09:dd:
6f:9f:ea:10:4b:39:77:97:b1:1e:e1:ef:66:64:ec:
93:52:3d:e3:39:6d:e5:d6:c3:96:f1:b3:d8:47:e4:
6f:22:47:c8:02:10:2e:3e:2a:31:83:82:5a:9e:de:
64:1d:6b:bf:0c:38:ef:60:33:f6:5a:0b:e0:c9:97:
a3:b3:ad:91:a2:bc:5b:43:5d:28:0e:47:da:d3:d2:
44:87:5a:91:e3:20:30:a0:28:20:b1:8e:61:15:50:
5d:83:d1:c6:51:69:54:5d:f5:33:51:f4:96:25:f3:
95:0b:60:c6:87:94:03:b1:5e:14:b0:d6:7a:c6:8b:
86:25:51:66:63:69:cb:0b:8f:27:7e:ff:98:1a:42:
eb:58:82:b3:3c:13:48:4f:a6:0b:f0:fc:c6:67:49:
64:56:d8:ab:f4:32:e4:94:b7:36:85:22:17:e4:c5:
c9:f2:c3:2a:ec:2f:91:a5:97:1b:43:9e:7c:54:57:
ed:f5:67:99:c9:7e:9c:a3:bb:a3:fd:dd:f6:b3:52:
87:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:5A:C6:47:F5:C5:1D:CF:63:FB:8A:E0:21:CD:B3:BE:A9:7D:42:7E
X509v3 Authority Key Identifier:
keyid:4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:c2:6f:c7:12:f2:d2:2f:7b:fe:b4:a8:5a:0a:15:1f:4f:82:
a2:16:c8:a9:d6:af:8f:72:fd:44:dc:93:5c:dc:c3:ea:f7:ed:
ba:fa:85:ee:32:c9:10:56:63:37:a8:a9:13:00:44:7d:ee:f7:
eb:f3:5c:c9:6b:a3:00:d4:3b:ea:95:78:30:31:9d:fd:66:00:
0a:2f:ca:30:08:a9:c3:13:ec:16:81:2f:82:55:72:95:28:e3:
6e:9a:b3:86:f5:95:84:5f:e7:d8:36:46:76:9f:d1:e6:24:1b:
d1:31:b6:47:35:2d:6f:35:79:ed:3c:fc:97:b6:23:9d:11:16:
f6:b0:31:ee:30:51:ac:33:69:82:9a:2e:d6:af:d3:41:66:9a:
cf:27:05:3e:d9:5d:ad:75:24:b8:9b:89:53:38:27:e2:7a:ed:
84:b2:6e:5d:7c:51:79:d2:0b:59:08:35:4f:86:4c:6c:ed:9c:
6d:3d:1d:03:e2:1d:6a:db:6b:21:ed:60:97:3f:3b:d2:f6:8f:
f0:07:fc:01:8b:18:e6:7a:b5:c9:e3:a4:9c:d5:20:de:92:a6:
f9:63:1b:79:d7:5c:c6:10:c0:ed:ec:d3:7f:43:23:bc:4f:ef:
6e:e1:a6:76:fc:6c:dd:86:9c:21:71:7f:3c:5d:d8:16:39:ae:
35:8d:82:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:59:34 2025 by rpki-client