Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.mft
File: tTZGbQNoUuL3N2reE4BGFDuZTMM.mft (raw, json)
Hash identifier: 4sFjUalaPS32KKhd0uc6PqIx+BFkXzHFNevMu7PnGs8=
Subject key identifier: 70:F5:6A:63:93:3E:FE:8D:E2:52:06:FB:9D:E4:3F:A0:80:21:61:C4
Authority key identifier: B5:36:46:6D:03:68:52:E2:F7:37:6A:DE:13:80:46:14:3B:99:4C:C3
Certificate issuer: /CN=b536466d036852e2f7376ade138046143b994cc3
Certificate serial: 019A72CA652FBB7841FE0B69D583AE8FEEB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTZGbQNoUuL3N2reE4BGFDuZTMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 12:00:58 +0000
Manifest this update: Tue 11 Nov 2025 12:00:58 +0000
Manifest next update: Wed 12 Nov 2025 12:00:58 +0000
Files and hashes: 1: 4dgJmFIjsrGv5rSLSqks3SszRsQ.roa (hash: Sg9Vz95hfxUFPzxyRHpzX8FvIho0lOoY/A6mHLZCWkE=)
2: tTZGbQNoUuL3N2reE4BGFDuZTMM.crl (hash: yxCRcH+6R1PRJ9MdLMxsp3x0iUYfjwE7kHcSXEOjtUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTZGbQNoUuL3N2reE4BGFDuZTMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:65:2f:bb:78:41:fe:0b:69:d5:83:ae:8f:ee:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b536466d036852e2f7376ade138046143b994cc3
Validity
Not Before: Nov 11 12:00:58 2025 GMT
Not After : Nov 12 12:00:58 2025 GMT
Subject: CN=70f56a63933efe8de25206fb9de43fa0802161c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:49:40:f8:3d:03:a3:8e:5e:7d:76:52:04:a8:
ed:c9:ac:99:fb:9e:a5:3f:fd:ed:96:67:d4:2e:ac:
d6:66:27:3a:b8:18:b2:63:c6:90:9c:03:e0:80:21:
c8:9f:4b:23:19:1c:0f:d9:98:8c:74:df:c1:fd:c3:
8c:32:50:68:8d:71:ca:e0:9b:b7:3c:61:6f:c2:35:
e2:b3:35:7f:81:97:89:63:bf:b8:e1:23:bd:7c:a6:
ba:65:e4:ce:d4:cc:28:7f:6c:22:5d:aa:60:f5:2a:
c1:bf:73:33:c7:84:79:41:db:2c:b0:28:bd:91:26:
9e:40:96:a8:7a:39:b9:ff:50:77:b2:a7:73:76:0e:
c4:52:28:d1:92:85:85:23:d8:30:ae:dc:e5:1b:f0:
ff:83:0d:32:c8:72:00:5a:0c:78:37:38:62:66:1c:
b3:c2:be:5b:ca:16:0f:ee:77:87:ee:20:5f:e4:b4:
f7:7b:31:13:15:fb:73:0c:4d:7b:86:95:95:2f:6c:
7c:d9:e0:92:f9:ea:ab:cf:f7:1c:55:0a:78:8d:5d:
35:fd:35:7d:74:92:b8:dc:39:c4:46:55:18:45:af:
30:80:ba:83:2a:a0:d7:d3:ad:3b:a1:b9:fa:04:f5:
b1:79:0d:b3:67:2c:3c:89:ac:46:25:05:0d:8e:8f:
69:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F5:6A:63:93:3E:FE:8D:E2:52:06:FB:9D:E4:3F:A0:80:21:61:C4
X509v3 Authority Key Identifier:
keyid:B5:36:46:6D:03:68:52:E2:F7:37:6A:DE:13:80:46:14:3B:99:4C:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTZGbQNoUuL3N2reE4BGFDuZTMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:a6:e6:f4:c5:49:5a:07:59:07:e1:d4:1d:96:97:f7:36:32:
56:9b:eb:2d:a6:5c:ff:cc:5f:72:2e:e0:a8:66:a6:22:76:5a:
05:78:79:5b:17:ca:d4:42:c3:cc:df:52:f1:8d:af:9a:54:a5:
a6:ec:1a:b1:fa:e4:3f:ee:56:d4:cc:a6:bb:30:b2:4a:e8:84:
7f:1e:68:e0:da:2a:27:85:87:a0:c9:41:54:ad:8c:c8:cb:19:
e5:a9:ea:d6:d5:6a:54:b5:7e:76:d0:5e:e2:89:a3:01:f5:4b:
d0:a2:6f:ca:ea:65:43:7a:87:7a:ad:de:be:cd:b7:9a:e0:0d:
89:57:0e:a2:d7:38:d5:cf:ed:16:06:7b:3b:bc:a7:44:29:8f:
de:56:af:13:ad:4d:25:c8:27:93:a2:0b:ad:8e:f3:99:c1:6d:
10:de:15:f9:53:8f:12:38:3f:9a:fa:9d:dd:98:d7:d8:1e:2c:
0b:7a:ed:d0:a3:61:55:02:48:cb:3c:b0:2f:db:ad:f5:46:1c:
99:d7:19:63:a5:27:06:42:38:15:82:d4:0c:f3:4f:5b:da:03:
ef:3d:39:1a:8c:60:f1:ac:8a:ac:19:47:ee:d1:1a:c1:b9:bc:
d7:19:44:48:9a:80:8b:7a:1b:fb:fa:43:c2:96:ef:e6:2e:87:
17:ed:fc:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:40:20 2025 by rpki-client