Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
File: TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft (raw, json)
Hash identifier: +u3y2V+w+mQIaEkX42nYgDiW/zJMklH+6fU/D+UVqA4=
Subject key identifier: 98:15:10:2B:13:E6:6D:71:E2:2E:D3:6D:21:08:65:E6:01:52:73:C2
Authority key identifier: 4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
Certificate issuer: /CN=4d3f54f304e6b851608c293978b16ba51ac0350e
Certificate serial: 0197B70EC44C1B77716FFEC6171B9D798B2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 15:01:27 +0000
Manifest this update: Sat 28 Jun 2025 15:01:27 +0000
Manifest next update: Sun 29 Jun 2025 15:01:27 +0000
Files and hashes: 1: 2-8ODfbSISRCVrFLypE1beop4mI.roa (hash: CTu3Z/KQAufmJs+pAxP0V5GvviRUTQPwl9gEk4hUm6E=)
2: TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl (hash: nJwBxWiQUWtNlSVrprzTIEHwW50A9+mWSNDcDBZYKTw=)
3: xOYkGw3SqmDNjUBUXBvZW0U-4J4.roa (hash: CMrEVMiwQAaT7qSr6cVaZ45q/VR6zzPcJBOroZoc7n8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:c4:4c:1b:77:71:6f:fe:c6:17:1b:9d:79:8b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3f54f304e6b851608c293978b16ba51ac0350e
Validity
Not Before: Jun 28 15:01:27 2025 GMT
Not After : Jun 29 15:01:27 2025 GMT
Subject: CN=9815102b13e66d71e22ed36d210865e6015273c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bf:82:48:ba:e3:c9:0d:34:f8:c5:79:de:0f:
56:0a:c1:21:0e:37:e2:87:a6:83:78:1b:52:88:90:
1d:4f:9b:1d:b1:1b:c7:66:d4:74:a6:d0:4e:7f:5b:
ac:5d:0b:2e:bd:22:ce:7c:4f:c0:08:7b:24:dd:4c:
72:cb:7f:ed:3e:69:7e:e4:5c:f8:f1:30:3b:f4:17:
5e:85:2f:9b:71:e7:38:b3:cf:49:90:3d:b0:74:a6:
fb:3c:7c:4e:8d:a8:5c:18:c2:a8:7e:f5:bc:da:a4:
c1:3e:92:e2:c2:6f:58:bd:db:4c:11:57:96:09:4a:
2a:5a:90:d2:c1:a0:a8:96:c3:3c:dc:a0:a9:96:0c:
5e:97:38:39:69:3e:05:49:e4:44:bc:4d:b7:44:c5:
03:0f:a1:e8:75:95:1a:3a:b9:bf:90:99:71:91:61:
dd:6e:40:79:91:d5:05:73:07:2f:6d:7d:97:6f:03:
d9:bc:dd:51:06:7b:fb:5a:44:6c:42:af:00:da:38:
d2:31:81:18:c3:24:c3:38:77:5a:58:8c:b3:1c:3d:
03:47:2a:63:4a:9b:19:29:c7:9f:45:ba:6f:db:12:
36:d5:c8:a4:9a:fb:30:81:82:91:2a:e4:b5:62:18:
52:1d:17:d7:bd:b1:0c:4b:68:01:a4:97:bc:7b:2a:
76:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:15:10:2B:13:E6:6D:71:E2:2E:D3:6D:21:08:65:E6:01:52:73:C2
X509v3 Authority Key Identifier:
keyid:4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:98:df:f4:e4:98:f4:be:ef:c7:e1:21:1d:04:a6:41:50:e6:
6c:a5:cb:b3:40:9f:91:fd:65:80:df:b1:66:a2:c0:ab:09:f6:
7a:de:de:f9:10:45:17:19:5a:9f:27:59:24:ec:04:15:dd:3d:
14:61:64:25:70:5a:76:26:89:d9:14:bf:71:90:cf:fb:46:46:
8b:3c:00:6f:68:4b:90:95:65:a6:57:5d:dd:e5:8d:82:d5:44:
8c:34:0c:c3:53:79:cd:8a:4c:6f:23:cf:18:e5:dd:70:91:02:
ff:38:df:9e:f2:f8:d3:db:19:73:14:93:22:08:15:f4:f6:8d:
65:6a:24:7f:fe:5c:3a:d2:35:cc:b5:eb:74:1d:df:0b:30:92:
5a:30:e3:0b:dd:33:9b:58:ab:b1:bd:e7:b4:33:c1:bb:8d:00:
85:65:86:32:9b:90:e5:70:be:26:56:02:9e:ed:b3:53:fd:f9:
2c:1c:4a:8f:29:55:14:90:f5:92:25:2c:01:6b:a8:5a:e3:82:
1c:41:04:51:52:61:80:c5:17:95:18:d4:2b:10:52:f6:05:5f:
fc:91:b9:60:58:9c:5c:43:3b:8d:90:58:86:e5:ad:ea:e7:49:
24:f2:5b:01:66:78:f1:e8:19:8d:de:5f:19:95:e2:1c:b5:57:
7f:10:64:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:27:48 2025 by rpki-client