Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
File: ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft (raw, json)
Hash identifier: ZjTlP5siJmAfmDvJk4LLHlxbU9C0rorhe2TfCCGIWUo=
Subject key identifier: AF:92:46:93:05:0D:BB:33:76:FF:F5:B3:A1:78:E7:8D:8D:2F:3E:23
Authority key identifier: B6:D7:F3:68:FA:1C:F5:B1:AA:AA:76:B0:F1:F2:3C:06:75:0A:84:26
Certificate issuer: /CN=b6d7f368fa1cf5b1aaaa76b0f1f23c06750a8426
Certificate serial: 019A730182FD613A925A5206CDF30C0E438E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
Manifest number: 05F5
Signing time: Tue 11 Nov 2025 13:01:10 +0000
Manifest this update: Tue 11 Nov 2025 13:01:10 +0000
Manifest next update: Wed 12 Nov 2025 13:01:10 +0000
Files and hashes: 1: mgO2bfWYu0Z3yfKtycB0eHY39X8.roa (hash: 60DQx4kpFtDfON86MP27ODodoK2c+Xs/qbF18XYACcg=)
2: rg97vUvro1QUCZLNC-zT_PYGVh8.roa (hash: iZBiJSmpj/Q8UocwtFDbOX3xmzAVEyiNjKTvOdI8ZqE=)
3: ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl (hash: 6I5CRlt6s5okPmFQHnSccZUmem0BVIie6DvvRXqTyho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:82:fd:61:3a:92:5a:52:06:cd:f3:0c:0e:43:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6d7f368fa1cf5b1aaaa76b0f1f23c06750a8426
Validity
Not Before: Nov 11 13:01:10 2025 GMT
Not After : Nov 12 13:01:10 2025 GMT
Subject: CN=af924693050dbb3376fff5b3a178e78d8d2f3e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d5:59:78:25:9b:20:53:0f:bf:a2:3f:b5:c0:
09:ad:f5:c3:d3:5e:d1:4a:81:ac:ac:47:7a:d5:73:
ad:aa:90:ab:d3:6e:22:1e:0b:7e:01:99:26:52:4a:
4b:6c:7d:cb:33:f9:27:04:1e:f8:c0:4d:09:fe:87:
0a:c8:25:84:45:5b:ad:27:a1:22:82:0c:74:27:89:
b1:80:ba:37:44:1f:5a:53:7e:2a:62:58:1e:d0:59:
92:7a:d0:cc:79:f7:b2:4a:ef:8e:57:bf:2d:37:d8:
53:15:65:49:4e:1a:5f:82:e8:f4:62:54:85:53:9e:
5f:27:b1:6c:95:c8:bd:a2:df:1a:8a:a1:5c:18:e7:
33:c1:ab:d4:0c:e0:88:9f:c8:35:0d:63:f0:79:d8:
b9:2d:fd:0a:94:a4:06:aa:21:8d:45:34:93:ee:26:
59:41:cc:3d:b4:fa:f7:27:67:2f:b4:13:a2:47:35:
9a:da:55:86:a6:f7:50:92:0c:50:94:f8:7f:37:b4:
52:5c:45:62:ed:da:32:22:75:ff:d6:01:da:5d:6e:
8e:59:3b:53:9c:e4:f8:fe:30:89:1b:55:bf:f7:f6:
d0:34:5d:43:8e:f7:c2:93:d8:54:65:16:2a:f2:47:
04:c3:02:50:3e:45:57:e0:bc:be:54:af:e5:7a:e0:
e6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:92:46:93:05:0D:BB:33:76:FF:F5:B3:A1:78:E7:8D:8D:2F:3E:23
X509v3 Authority Key Identifier:
keyid:B6:D7:F3:68:FA:1C:F5:B1:AA:AA:76:B0:F1:F2:3C:06:75:0A:84:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:bd:1a:6c:b8:8d:19:68:96:14:af:d7:eb:f4:4a:a1:6a:d3:
f0:96:9c:73:1e:d8:9c:98:41:c7:52:15:67:14:69:a5:ba:a2:
41:c0:da:bc:2a:98:6e:f1:1f:cf:e3:a8:8f:1e:bb:71:a0:5e:
e7:5c:56:40:6e:8b:24:8e:4f:7f:cf:9b:2c:28:cc:3a:4d:2b:
26:f5:85:9f:d1:d1:54:e8:72:92:0d:2c:62:52:13:bd:49:33:
d4:9e:05:56:03:88:94:10:39:ad:2a:cc:52:62:b3:77:f1:76:
0b:89:99:57:94:7d:56:4b:36:9b:08:03:81:a6:7c:b1:00:72:
8a:66:9c:b6:e8:a0:21:f0:f7:88:69:3f:0f:cd:63:bb:cb:dc:
be:52:c4:f1:eb:bf:d1:13:2f:3a:a2:f0:00:fb:d8:7b:02:43:
52:51:93:b8:3a:49:7b:9e:25:8a:8a:ad:da:e4:42:6e:4b:d1:
93:1c:fd:16:d7:60:95:f3:12:fb:c6:b2:b2:45:b7:18:32:a3:
e8:a2:31:ea:6d:1f:36:13:4a:26:b1:26:1a:f0:b1:db:25:a6:
b3:db:15:14:60:c2:78:23:39:f9:27:70:1d:1b:e9:5d:ec:31:
46:bb:f3:f7:c4:c3:7e:cb:28:ab:1d:b7:d6:d6:38:68:ce:7e:
b0:49:3f:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzAYL9YTqSWlIGzfMMDkOOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2ZDdmMzY4ZmExY2Y1YjFhYWFhNzZiMGYxZjIzYzA2NzUw
YTg0MjYwHhcNMjUxMTExMTMwMTEwWhcNMjUxMTEyMTMwMTEwWjAzMTEwLwYDVQQD
EyhhZjkyNDY5MzA1MGRiYjMzNzZmZmY1YjNhMTc4ZTc4ZDhkMmYzZTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39VZeCWbIFMPv6I/tcAJrfXD017R
SoGsrEd61XOtqpCr024iHgt+AZkmUkpLbH3LM/knBB74wE0J/ocKyCWERVutJ6Ei
ggx0J4mxgLo3RB9aU34qYlge0FmSetDMefeySu+OV78tN9hTFWVJThpfguj0YlSF
U55fJ7Fslci9ot8aiqFcGOczwavUDOCIn8g1DWPwedi5Lf0KlKQGqiGNRTST7iZZ
Qcw9tPr3J2cvtBOiRzWa2lWGpvdQkgxQlPh/N7RSXEVi7doyInX/1gHaXW6OWTtT
nOT4/jCJG1W/9/bQNF1DjvfCk9hUZRYq8kcEwwJQPkVX4Ly+VK/leuDmsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+SRpMFDbszdv/1s6F4542NLz4jMB8GA1UdIwQY
MBaAFLbX82j6HPWxqqp2sPHyPAZ1CoQmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHRmemFQb2M5YkdxcW5hdzhmSThCblVLaENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS82ZDE1ZjQtODZhMi00NmQ5LWIzZWQt
MDhhZWRjMmYyNjM5LzEvdHRmemFQb2M5YkdxcW5hdzhmSThCblVLaENZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS82ZDE1ZjQtODZhMi00NmQ5LWIzZWQtMDhhZWRjMmYyNjM5
LzEvdHRmemFQb2M5YkdxcW5hdzhmSThCblVLaENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh70abLiN
GWiWFK/X6/RKoWrT8Jaccx7YnJhBx1IVZxRppbqiQcDavCqYbvEfz+Oojx67caBe
51xWQG6LJI5Pf8+bLCjMOk0rJvWFn9HRVOhykg0sYlITvUkz1J4FVgOIlBA5rSrM
UmKzd/F2C4mZV5R9Vks2mwgDgaZ8sQByimactuigIfD3iGk/D81ju8vcvlLE8eu/
0RMvOqLwAPvYewJDUlGTuDpJe54lioqt2uRCbkvRkxz9FtdglfMS+8ayskW3GDKj
6KIx6m0fNhNKJrEmGvCx2yWms9sVFGDCeCM5+SdwHRvpXewxRrvz98TDfssoqx23
1tY4aM5+sEk/yg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 17:47:11 2025 by rpki-client