Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
File: TtHX3yWkqdXnJ8QvVenjGD02qTo.mft (raw, json)
Hash identifier: Aj1458Xmd3hX6Mk5mFlj8ILb0EdnRZu5jRrxreaPZF4=
Subject key identifier: 65:7A:99:E2:69:85:81:7C:84:1C:ED:16:0C:5B:37:A9:98:15:E5:63
Authority key identifier: 4E:D1:D7:DF:25:A4:A9:D5:E7:27:C4:2F:55:E9:E3:18:3D:36:A9:3A
Certificate issuer: /CN=4ed1d7df25a4a9d5e727c42f55e9e3183d36a93a
Certificate serial: 0197B70E8469D02CEBE8D0C835E2D71AC5BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtHX3yWkqdXnJ8QvVenjGD02qTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
Manifest number: 0F40
Signing time: Sat 28 Jun 2025 15:01:11 +0000
Manifest this update: Sat 28 Jun 2025 15:01:11 +0000
Manifest next update: Sun 29 Jun 2025 15:01:11 +0000
Files and hashes: 1: GjqXm9JUjjlZZ0PJdXVG1lJFjCg.roa (hash: N8pnAe9jWWy/GU0t4cg3SHXORnEo2+UUYssAVJRTLSs=)
2: TtHX3yWkqdXnJ8QvVenjGD02qTo.crl (hash: AbCCL60V9VR+768zqiuFDtvcJBpVU6hL+fkoe5nq7QY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtHX3yWkqdXnJ8QvVenjGD02qTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:84:69:d0:2c:eb:e8:d0:c8:35:e2:d7:1a:c5:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed1d7df25a4a9d5e727c42f55e9e3183d36a93a
Validity
Not Before: Jun 28 15:01:11 2025 GMT
Not After : Jun 29 15:01:11 2025 GMT
Subject: CN=657a99e26985817c841ced160c5b37a99815e563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f7:f0:be:ad:b8:22:66:fa:07:03:f1:4a:d0:
ad:32:98:16:62:c4:90:69:e3:5c:32:2f:39:40:62:
db:c7:a6:9e:10:61:b5:71:08:ae:1b:7e:96:36:bd:
55:ee:48:78:31:09:64:30:34:6b:7e:c3:3f:f7:09:
c5:e7:94:c5:55:7d:bd:c6:59:bc:b2:2d:79:9a:39:
c8:31:38:12:40:17:1c:bd:33:d5:94:02:20:d7:b3:
d0:01:2e:54:7e:c8:dd:8a:84:e7:bf:d8:bb:2d:8e:
ef:dd:b4:3e:8d:72:f6:da:61:35:c0:be:a4:2a:04:
dd:dd:d3:d6:55:e8:a2:c8:a1:64:35:f1:31:4c:bd:
08:e1:80:8a:a2:49:0b:5d:40:6b:56:bd:90:1e:c8:
0e:74:8f:30:16:7e:4e:49:51:e5:82:dc:4b:d2:2e:
fe:32:3e:7c:35:72:ee:bc:db:56:f3:19:48:6d:91:
c8:e5:c4:c0:44:80:7d:cb:38:f0:47:44:ea:0a:dc:
6d:f7:92:72:2a:21:6d:ef:b1:9d:e1:9c:54:d1:2a:
2c:a1:8b:09:ad:df:9c:9c:60:75:ce:83:16:e4:8f:
d7:e4:a8:99:c7:1f:1e:a1:5e:ac:47:8b:15:4c:0f:
48:ee:19:c7:27:a6:45:f2:9b:30:88:e9:18:22:86:
63:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:7A:99:E2:69:85:81:7C:84:1C:ED:16:0C:5B:37:A9:98:15:E5:63
X509v3 Authority Key Identifier:
keyid:4E:D1:D7:DF:25:A4:A9:D5:E7:27:C4:2F:55:E9:E3:18:3D:36:A9:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtHX3yWkqdXnJ8QvVenjGD02qTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:6c:f2:f7:5d:ce:5f:41:20:03:23:c0:35:26:f4:48:e5:c0:
f5:c7:ef:e7:18:8f:1f:72:51:94:69:17:61:11:ed:0a:eb:e4:
27:b9:4e:75:10:c4:57:42:d6:eb:e1:a5:f7:a3:d7:b5:ff:09:
b4:67:07:16:94:5d:90:2c:91:40:86:52:36:11:e5:35:c8:8a:
5f:44:24:1e:61:d3:c0:75:79:fe:96:50:93:7a:0e:3e:38:8e:
49:f5:a7:0d:4f:90:5f:25:ff:b3:7e:10:fb:4b:60:18:d9:f3:
be:b8:72:a1:4b:2f:88:0a:c1:58:4a:9b:eb:2c:aa:39:cb:34:
10:34:f0:7c:e1:75:bf:7a:68:64:10:86:19:3c:ed:6a:a3:a1:
18:6f:27:66:eb:cc:52:96:d6:8f:2a:ad:67:af:58:a4:6a:76:
91:c8:30:63:c0:5d:77:bd:8f:cd:10:bb:fd:2a:aa:af:0e:f0:
94:05:78:27:ac:90:e0:88:31:52:9e:90:df:f2:f4:d2:a1:e2:
7c:e2:4a:9b:3d:fb:52:f0:2a:84:71:ea:43:2d:08:6e:31:40:
44:c8:84:c2:30:da:d2:c6:7b:b9:85:dd:a3:ac:62:c8:c0:da:
97:54:f3:3f:85:c0:f3:6d:78:51:9b:b2:f8:5f:ba:79:8d:e4:
d7:51:67:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:36 2025 by rpki-client