Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
File: TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft (raw, json)
Hash identifier: VM2XHBUxeyeNGZMGtajwIyA+PSM4mV2rLS6zJ3xMEiw=
Subject key identifier: 75:2E:20:9E:5E:C8:C6:F1:4E:8C:20:E1:74:38:BF:60:2B:12:09:64
Authority key identifier: 4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
Certificate issuer: /CN=4d3f54f304e6b851608c293978b16ba51ac0350e
Certificate serial: 0198D6CCDA4D399FCCA332FD2FDF2921FE73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 12:00:06 +0000
Manifest this update: Sat 23 Aug 2025 12:00:06 +0000
Manifest next update: Sun 24 Aug 2025 12:00:06 +0000
Files and hashes: 1: 2-8ODfbSISRCVrFLypE1beop4mI.roa (hash: CTu3Z/KQAufmJs+pAxP0V5GvviRUTQPwl9gEk4hUm6E=)
2: TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl (hash: 3yP3HvZOaL5xGuug2GWoqkb3HovL7eoyFZb08yGdv24=)
3: xOYkGw3SqmDNjUBUXBvZW0U-4J4.roa (hash: CMrEVMiwQAaT7qSr6cVaZ45q/VR6zzPcJBOroZoc7n8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cc:da:4d:39:9f:cc:a3:32:fd:2f:df:29:21:fe:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3f54f304e6b851608c293978b16ba51ac0350e
Validity
Not Before: Aug 23 12:00:06 2025 GMT
Not After : Aug 24 12:00:06 2025 GMT
Subject: CN=752e209e5ec8c6f14e8c20e17438bf602b120964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:21:41:7e:7d:ab:33:d4:80:f0:9c:c6:26:55:
c2:64:49:55:31:8d:d3:fa:f5:bc:03:6b:70:ba:3e:
a2:2d:07:0f:50:f9:27:50:dc:2c:e3:5d:a1:14:bb:
e0:fe:a5:3d:3d:92:d5:fc:0c:25:9b:af:63:7a:30:
4a:a7:f7:a7:7f:6a:52:53:d3:eb:3d:3c:fd:7b:80:
ab:da:07:1d:d5:57:79:ea:64:a3:a5:5e:a4:fb:e7:
40:10:06:e7:98:ef:ed:85:85:a6:dd:b9:2e:fe:42:
6e:6a:db:74:cd:0c:f4:de:de:39:31:c3:60:1f:6d:
32:f4:32:4d:05:c9:d4:4d:ba:59:c6:5d:35:36:f2:
6c:ce:6b:72:35:18:7e:31:7f:14:8c:70:0b:b8:fc:
d9:dc:0e:96:e8:51:31:9f:bb:91:3a:4d:cb:a4:ed:
00:87:a6:33:9e:9a:91:cb:d9:ac:ab:d4:ca:05:6e:
75:39:c1:fc:c8:bb:e7:b4:db:12:de:db:c3:a8:2c:
84:3d:2f:7e:f2:83:4f:1c:a9:13:35:fa:ef:c1:4d:
3e:5b:7a:42:9a:27:2f:58:c8:1d:74:b1:12:45:7c:
ef:a8:a4:e1:68:6e:6e:a7:c4:06:d4:bd:f5:2e:0b:
98:7e:b1:15:ba:b3:c3:66:59:fc:29:c7:aa:6b:a8:
2f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2E:20:9E:5E:C8:C6:F1:4E:8C:20:E1:74:38:BF:60:2B:12:09:64
X509v3 Authority Key Identifier:
keyid:4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:b2:c6:c5:5a:c8:fc:62:d6:6b:d2:17:5c:93:64:b9:3e:47:
fb:a7:c4:25:a0:0c:23:b3:93:f2:d7:ec:cc:ad:0a:d2:a1:b3:
9b:93:d1:48:b7:55:7a:84:aa:4b:ef:22:79:3b:75:e8:a6:de:
5c:6a:69:6c:16:95:ed:ec:b9:60:bc:76:5f:21:e6:75:fb:25:
99:79:e3:6a:22:cb:a5:cb:42:47:4a:29:30:43:e3:82:51:84:
70:e9:75:ad:09:6d:b9:30:b4:55:f5:f3:a0:df:9a:86:91:f5:
8c:02:a5:b3:1d:7b:a0:2a:13:80:07:7d:a4:9d:29:5c:24:27:
c8:07:e0:d8:b3:c8:0f:a6:4b:49:5e:06:4c:2c:84:2f:65:c4:
ef:e9:4c:22:8f:94:9f:2e:b3:e7:4a:80:85:c7:93:60:0e:8f:
a6:f9:27:36:47:c7:86:99:eb:05:39:fe:13:d6:87:95:90:30:
c5:a4:f7:41:b5:70:36:7e:75:31:e5:dd:a4:54:9d:7a:45:b1:
ee:96:d5:fd:1e:43:24:ce:ec:f3:d7:10:5f:f9:2e:d5:37:2e:
78:d5:5d:1a:35:47:79:5e:cf:a9:91:a2:fc:28:2a:6e:e3:e9:
07:58:81:a4:ff:73:ed:4a:1d:c1:94:0b:6f:c9:17:99:3d:54:
3d:7f:01:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:06:40 2025 by rpki-client