Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
File: TtHX3yWkqdXnJ8QvVenjGD02qTo.mft (raw, json)
Hash identifier: 7gzhI8y+qmmyWDQSPQOy4y2mJsA5AvJ4qlf9whAEbMI=
Subject key identifier: 91:7C:2A:F2:1F:C6:F5:FA:17:C3:96:0E:CE:42:86:19:C8:54:1A:58
Authority key identifier: 4E:D1:D7:DF:25:A4:A9:D5:E7:27:C4:2F:55:E9:E3:18:3D:36:A9:3A
Certificate issuer: /CN=4ed1d7df25a4a9d5e727c42f55e9e3183d36a93a
Certificate serial: 0198D4E0AC4274CF63E3E04245CAA3073B75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtHX3yWkqdXnJ8QvVenjGD02qTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
Manifest number: 0FD4
Signing time: Sat 23 Aug 2025 03:02:30 +0000
Manifest this update: Sat 23 Aug 2025 03:02:30 +0000
Manifest next update: Sun 24 Aug 2025 03:02:30 +0000
Files and hashes: 1: GjqXm9JUjjlZZ0PJdXVG1lJFjCg.roa (hash: N8pnAe9jWWy/GU0t4cg3SHXORnEo2+UUYssAVJRTLSs=)
2: TtHX3yWkqdXnJ8QvVenjGD02qTo.crl (hash: hjz8QhZ1p8gwlgOlxHcrliaEpQZLyDKJ5ZazXtupHIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtHX3yWkqdXnJ8QvVenjGD02qTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:ac:42:74:cf:63:e3:e0:42:45:ca:a3:07:3b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed1d7df25a4a9d5e727c42f55e9e3183d36a93a
Validity
Not Before: Aug 23 03:02:30 2025 GMT
Not After : Aug 24 03:02:30 2025 GMT
Subject: CN=917c2af21fc6f5fa17c3960ece428619c8541a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:46:20:26:8d:53:ec:cf:90:ec:f6:5a:ce:3d:
56:55:46:a3:d2:be:50:97:39:04:7a:08:ad:ed:80:
e9:37:8a:6a:76:c9:d1:c5:30:e9:3d:af:a6:0b:c3:
b7:74:a0:fc:0d:ad:88:f5:52:8f:19:80:60:6d:07:
a3:d5:35:30:bb:5e:af:f4:79:90:42:45:05:76:de:
1b:37:c5:43:fb:5b:79:c3:6f:fc:ec:3d:2e:9b:46:
d0:98:04:5b:60:0a:52:e7:9b:34:f6:f3:e9:88:2f:
ed:fd:ea:c4:26:1b:79:57:ca:af:15:78:3c:9f:55:
fe:76:72:9b:9c:29:40:3c:39:45:1a:2a:9e:3a:94:
ba:b5:9f:9c:1e:5b:8a:9f:4b:11:b4:46:6c:42:93:
e0:ff:14:40:d7:d3:b9:b5:80:45:a0:eb:d1:1f:08:
9a:7d:bf:d7:4a:e7:8a:84:c2:a0:07:59:0a:d1:e2:
b5:a6:cd:b4:bc:a3:49:4a:f4:77:2b:fd:f1:c6:8c:
4a:69:60:ed:1c:6a:da:65:a8:f6:e4:d3:ba:e6:b5:
ff:3f:47:4b:25:71:09:9c:bb:1d:b1:eb:99:29:03:
91:7b:0b:cd:20:48:98:5e:00:d2:fa:ee:79:26:89:
59:c8:d9:27:a4:99:50:69:bf:97:7d:8f:97:37:ee:
2e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:7C:2A:F2:1F:C6:F5:FA:17:C3:96:0E:CE:42:86:19:C8:54:1A:58
X509v3 Authority Key Identifier:
keyid:4E:D1:D7:DF:25:A4:A9:D5:E7:27:C4:2F:55:E9:E3:18:3D:36:A9:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtHX3yWkqdXnJ8QvVenjGD02qTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:a3:e2:d0:53:1f:86:f7:f2:85:83:79:a1:bf:74:75:68:59:
fa:6f:75:60:c4:d2:4b:eb:e4:14:cc:f1:9d:01:24:f2:a0:e3:
d5:c8:4f:4f:53:5c:5e:97:73:67:4e:da:45:69:38:ed:13:4d:
1e:ae:53:91:d0:0c:56:40:a4:80:a7:3d:27:f2:07:7d:66:74:
9a:ed:79:b5:3a:d3:ec:35:80:a3:5e:f0:49:99:bd:7a:ad:ca:
6d:db:e6:70:f5:dc:58:b7:45:71:84:04:10:e6:95:c9:bd:32:
07:7e:80:ac:e3:bf:ec:ef:de:1f:8b:b1:49:79:00:c0:51:09:
5b:6a:01:c3:02:cb:9c:d8:85:eb:4e:18:04:5f:c5:a6:84:8a:
52:51:61:a2:b6:28:30:39:ae:1d:8c:ef:8c:fb:53:c1:33:98:
3d:6e:aa:79:4b:4b:cd:35:05:ea:4d:9e:e8:49:14:06:ce:15:
6e:91:48:c5:69:97:dd:82:07:61:13:46:b7:3d:1b:33:fa:1f:
16:9c:b3:61:03:82:ac:9f:8e:03:86:29:85:97:d7:97:80:47:
f4:47:dc:d2:24:c9:b2:23:72:bd:3e:17:f1:f5:41:50:b6:b4:
12:bd:48:60:8b:85:73:3e:d3:82:de:9a:a8:3c:fa:0a:86:0d:
91:c2:76:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:04 2025 by rpki-client