Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
File: TTAqLdUXpho7lSdG8u6fvkNtY0k.mft (raw, json)
Hash identifier: tlHkoo6412d6VexjgsBqBaOzkJzLlpoGteR20pz7TJQ=
Subject key identifier: A3:C8:62:7B:6B:35:D7:C7:D7:7D:DF:80:7F:40:98:85:70:FB:E0:B9
Authority key identifier: 4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
Certificate issuer: /CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Certificate serial: 0197B7B2F4C9770610C2805308D562BC0765
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 18:00:47 +0000
Manifest this update: Sat 28 Jun 2025 18:00:47 +0000
Manifest next update: Sun 29 Jun 2025 18:00:47 +0000
Files and hashes: 1: OS7c8-e6_IPhh6UsfkxpmetgvVM.roa (hash: u4NSl9jjxeT5MDlBDBHxspeJOasrj/ytcidQr1I6tQs=)
2: TTAqLdUXpho7lSdG8u6fvkNtY0k.crl (hash: BMueGtg7flrsPkST4tLMl+tSF4EyEVBMc/47VIsLzw0=)
3: ujFYCfp3NT3vzURuQfX3QSbCmrc.roa (hash: Mq+9HfcpF+4pzQa3kfg+LdSo4w+vmYd+Egj8pIwlOE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:f4:c9:77:06:10:c2:80:53:08:d5:62:bc:07:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Validity
Not Before: Jun 28 18:00:47 2025 GMT
Not After : Jun 29 18:00:47 2025 GMT
Subject: CN=a3c8627b6b35d7c7d77ddf807f40988570fbe0b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:50:48:d9:41:37:28:c0:a0:7a:fe:13:eb:22:
52:3a:74:fe:9f:26:24:ef:67:2b:68:7c:3f:c2:e4:
1e:2a:19:d1:4a:3e:72:c8:be:2f:52:ba:cd:2f:78:
47:da:60:8a:74:6d:eb:53:3b:73:df:02:ae:35:7f:
f3:b4:3f:97:5a:7c:34:ec:8c:92:b9:8f:0d:8a:3e:
a2:3b:32:27:9f:7f:62:d6:f1:b3:7d:78:fa:ea:c0:
ba:d5:50:d5:7b:50:1d:17:a9:16:91:7f:4d:56:ce:
d8:b6:b3:7c:21:0c:71:08:b7:03:6a:ef:6c:d9:ee:
32:59:34:3e:e1:a5:99:cf:63:12:75:08:ce:2a:a2:
85:f8:0f:01:ea:31:de:63:7a:f4:2e:1e:5a:16:c0:
a4:54:6c:ff:01:1f:99:0f:26:47:d1:84:2d:14:f7:
53:03:60:b7:f4:04:93:b9:9e:df:36:c9:d9:21:71:
f3:54:31:72:da:04:e4:b4:0a:cc:55:fb:0b:a2:6d:
28:6c:2a:aa:2e:0c:c0:3b:4d:ba:90:1a:a9:f5:fa:
1a:e4:c1:93:bf:26:42:b0:1a:59:cd:2b:51:70:a8:
3e:4f:fa:51:25:83:83:17:c3:bc:5a:68:37:94:d3:
23:69:73:20:8c:8e:a6:58:e8:42:66:5e:b3:59:91:
79:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C8:62:7B:6B:35:D7:C7:D7:7D:DF:80:7F:40:98:85:70:FB:E0:B9
X509v3 Authority Key Identifier:
keyid:4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:ac:09:f6:6f:38:7e:ec:7d:fd:26:89:b9:8c:57:39:c1:da:
47:23:0c:1b:4c:38:9f:af:c2:95:10:7d:3e:4f:e8:7b:47:61:
8b:3b:40:ff:28:e0:42:ec:e9:bc:8f:d3:7a:77:48:79:ce:cf:
1c:20:b7:b2:69:bd:f8:01:d5:24:1e:6d:cc:c8:6d:f2:e5:52:
fe:3a:ad:a6:ac:02:e1:93:33:43:51:c3:f6:da:c3:0c:3e:89:
13:3f:fc:74:20:4c:47:9b:c8:9d:0e:4a:53:74:31:3e:60:20:
cc:82:79:3b:c8:02:87:aa:71:d3:b1:7d:98:0c:57:24:4a:c1:
28:34:65:9e:ad:f5:d9:bb:28:22:08:f2:3f:d5:72:a0:30:15:
c1:35:6b:95:2c:05:f7:25:be:17:e8:21:dc:56:4c:c3:ce:e1:
dd:cd:41:df:72:84:de:9f:0e:06:89:42:61:be:98:30:32:09:
fe:75:45:0c:04:12:14:c1:7e:21:52:c9:ca:3d:46:8a:ca:8f:
4d:6a:cb:68:09:e5:c6:51:c4:fa:ca:22:56:b1:85:14:6e:0c:
73:30:13:00:46:19:85:17:08:93:46:04:90:b2:b3:ff:7a:ad:
b8:47:86:78:e2:05:df:a2:fe:5d:69:77:71:49:d1:19:39:47:
84:61:8f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:17:27 2025 by rpki-client