Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
File: TtMkzMCQuDGCmReur3ODTwg0Ss4.mft (raw, json)
Hash identifier: LxKCj0EzgBYusr+/VDWj4dUjjAOy1I/C7ds9t67zoMo=
Subject key identifier: 8A:02:D4:ED:05:A1:0E:EA:48:90:10:46:37:BB:AD:25:E0:3E:EC:2B
Authority key identifier: 4E:D3:24:CC:C0:90:B8:31:82:99:17:AE:AF:73:83:4F:08:34:4A:CE
Certificate issuer: /CN=4ed324ccc090b831829917aeaf73834f08344ace
Certificate serial: 0198D515E8675172C491B464466F5D0EFA51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
Manifest number: 0159
Signing time: Sat 23 Aug 2025 04:00:39 +0000
Manifest this update: Sat 23 Aug 2025 04:00:39 +0000
Manifest next update: Sun 24 Aug 2025 04:00:39 +0000
Files and hashes: 1: LpPDa_hMKwPOheYcHrNv5BDTWog.roa (hash: 2CoZfLFeobkKqc9qZWTYrYW94wPP5u5Zmz2xUC1WQvs=)
2: TtMkzMCQuDGCmReur3ODTwg0Ss4.crl (hash: /SsBPwXOyY2HcR3JR6y4IcE8VuXBqnaBUcDRv6eKjj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:e8:67:51:72:c4:91:b4:64:46:6f:5d:0e:fa:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed324ccc090b831829917aeaf73834f08344ace
Validity
Not Before: Aug 23 04:00:39 2025 GMT
Not After : Aug 24 04:00:39 2025 GMT
Subject: CN=8a02d4ed05a10eea4890104637bbad25e03eec2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:47:9f:1f:39:8a:dd:ff:cb:7e:b0:03:27:02:
f9:05:7b:29:16:fc:29:75:98:b1:71:4b:ca:8c:69:
16:38:f1:33:3e:a8:14:69:f4:b4:7a:bf:66:cf:e1:
61:6b:ac:47:90:f4:b2:ff:a8:a5:b2:35:0c:77:fa:
6d:52:ca:00:22:38:4e:4d:26:cc:02:de:94:62:64:
f8:87:5e:2c:c7:9c:e9:45:cf:4b:ec:33:e4:55:17:
4c:56:1b:c6:2c:8a:6e:f9:b7:3d:eb:00:d7:a8:b2:
02:9a:e7:72:93:df:03:25:6a:5e:ba:6c:ce:c6:37:
18:89:7d:84:66:32:ea:c3:44:b0:e7:2e:5b:a3:be:
dc:e0:b7:93:ef:fa:b3:1a:a0:8a:63:7b:49:59:60:
7f:5e:6a:c6:37:a1:ea:54:de:a8:6d:3b:9e:47:6e:
6b:cf:6e:ad:52:e0:35:c4:60:10:3b:3b:fb:2f:03:
ef:43:18:d8:ad:74:71:21:04:27:f0:1b:70:ed:48:
57:e5:25:2b:92:b5:60:47:2b:8c:2e:4a:2d:f6:bc:
06:32:c7:1a:81:07:75:03:57:85:0f:c6:1a:0c:23:
5a:a5:e6:6b:2e:c6:53:07:67:14:ce:54:d6:da:10:
38:24:77:cb:cf:75:40:d3:7f:59:70:8c:f4:a9:66:
e1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:02:D4:ED:05:A1:0E:EA:48:90:10:46:37:BB:AD:25:E0:3E:EC:2B
X509v3 Authority Key Identifier:
keyid:4E:D3:24:CC:C0:90:B8:31:82:99:17:AE:AF:73:83:4F:08:34:4A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:d6:51:03:cc:9c:ee:c8:44:63:43:69:1f:49:dc:1a:bf:a7:
3d:41:45:aa:3d:ab:d5:28:9e:18:0e:2b:ff:b2:fd:c2:d5:d9:
41:d1:30:18:8d:f8:8f:24:22:d8:30:24:96:a8:5d:b2:01:5f:
76:9c:6e:71:c2:f9:87:10:56:ba:b1:f8:41:f2:b4:61:4b:3e:
4b:b5:d6:b4:cf:8c:18:cc:ca:0d:b2:71:b0:87:37:19:e3:11:
09:68:30:18:d0:8a:9a:09:09:90:21:41:11:55:2f:17:10:88:
04:f7:a5:fa:7f:08:8d:13:fc:b0:c8:7a:3e:c6:f2:7e:b1:a4:
0f:e7:69:d8:8b:91:f1:3f:51:b5:2c:8f:42:2a:50:f1:19:57:
53:39:33:91:87:5f:99:ec:d5:87:fa:68:48:04:40:3a:a8:b6:
38:82:7e:20:d8:76:8e:a5:9d:f5:8c:5e:0a:fd:55:bf:1c:43:
70:25:47:ff:04:a7:94:94:8d:d1:d6:8d:ca:98:91:e2:48:54:
24:5a:e2:c0:b9:5d:a4:4b:87:79:8f:27:ca:5e:cc:c1:5b:f6:
79:87:34:d2:5a:d2:52:29:70:9d:76:cb:ee:0d:b8:fe:1d:18:
54:61:db:b5:59:8f:8f:57:3a:9f:d7:8f:44:09:81:43:1b:e7:
4d:85:6b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:34 2025 by rpki-client