Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
File: TtA31O4-XScGWtgDVlgqL9wrSI0.mft (raw, json)
Hash identifier: Fe01bAXNOnPTRQoSoD2ENJiaIiEC6QFVFAhlBlQUKwk=
Subject key identifier: 5D:20:B6:91:E2:35:75:82:E1:CE:35:85:11:E6:5C:AD:DD:1B:66:55
Authority key identifier: 4E:D0:37:D4:EE:3E:5D:27:06:5A:D8:03:56:58:2A:2F:DC:2B:48:8D
Certificate issuer: /CN=4ed037d4ee3e5d27065ad80356582a2fdc2b488d
Certificate serial: 019A72940CDE0585BB81766F41C5DCDFBD33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
Manifest number: 109D
Signing time: Tue 11 Nov 2025 11:01:36 +0000
Manifest this update: Tue 11 Nov 2025 11:01:36 +0000
Manifest next update: Wed 12 Nov 2025 11:01:36 +0000
Files and hashes: 1: TtA31O4-XScGWtgDVlgqL9wrSI0.crl (hash: mu95A/bvmYJcdMz3GKbrklxMk88EiJQtkAMDn+n5ptQ=)
2: eOJpQF5FNoppqB79NhjuknNPvas.roa (hash: 0TneR6h3XAtyeO7uLkVkGQTYXZHCJ04//nJtpw2jBn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:94:0c:de:05:85:bb:81:76:6f:41:c5:dc:df:bd:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed037d4ee3e5d27065ad80356582a2fdc2b488d
Validity
Not Before: Nov 11 11:01:36 2025 GMT
Not After : Nov 12 11:01:36 2025 GMT
Subject: CN=5d20b691e2357582e1ce358511e65caddd1b6655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fa:35:94:57:be:4f:c1:fe:ef:1e:cc:f6:87:
a0:68:21:3c:ef:0c:30:76:b1:02:e9:3a:c6:d7:83:
40:a2:5e:ce:56:e4:74:03:0a:f3:d3:b9:05:31:ea:
75:e4:91:fe:c4:66:86:3e:c1:c9:70:c4:eb:af:15:
8f:24:70:0d:e0:76:dc:26:08:5a:06:fe:fc:d3:34:
ee:a8:4a:b2:b6:47:b8:60:5b:6e:4a:7e:ef:d8:78:
27:f2:e7:e0:ff:e1:d4:68:83:96:3f:88:1d:66:8c:
73:1b:9e:7a:87:f3:b7:8b:71:d9:34:cd:6c:9b:fa:
0a:53:f9:dd:1c:d0:9f:7b:10:1e:02:0b:0c:ce:58:
88:0d:8b:a5:f3:7d:58:5d:86:9b:f6:0e:31:b0:46:
00:5e:47:cd:44:2d:10:6f:c0:4a:a0:b7:96:c1:3b:
d1:a1:49:57:ba:e6:e7:c3:1f:2d:61:2e:61:e8:df:
2f:f6:bb:60:5f:3e:1f:14:73:6e:d3:56:c1:a3:e7:
0d:4d:01:d3:3a:5d:78:ba:1d:79:95:88:cf:16:c8:
b5:e1:9d:90:de:ca:d8:3e:8f:26:d0:26:00:b4:3c:
c0:9b:92:80:96:a6:be:dc:b9:e7:fb:02:02:99:66:
b9:0f:b8:15:76:aa:bd:2d:39:69:1e:42:fd:bd:fd:
b6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:20:B6:91:E2:35:75:82:E1:CE:35:85:11:E6:5C:AD:DD:1B:66:55
X509v3 Authority Key Identifier:
keyid:4E:D0:37:D4:EE:3E:5D:27:06:5A:D8:03:56:58:2A:2F:DC:2B:48:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:3d:fe:1d:1b:9a:26:22:90:21:7e:5a:41:9a:af:62:3c:53:
ce:c4:43:0b:87:b2:03:c5:28:8a:ec:81:8b:9c:06:31:c2:1a:
58:66:f2:1f:30:2b:3a:3d:d9:97:31:5f:24:3f:01:16:8d:18:
7e:a6:c7:88:3b:d6:1b:be:d3:51:f6:36:24:d1:64:cc:bc:f7:
ed:1a:bf:f1:27:3f:e8:67:14:6e:dd:2f:7e:f3:bc:28:d9:cb:
79:23:31:ef:b2:34:91:87:e2:4c:7e:79:c6:a7:c9:c9:bd:14:
13:c0:8b:fb:59:c7:90:12:84:5f:50:39:16:d4:db:37:2d:f6:
82:c9:a4:e3:74:93:1e:51:e2:1c:37:37:4b:66:b3:95:dd:04:
a0:d2:15:df:b8:c9:ba:b3:e1:86:c7:fa:ce:27:8c:04:1a:fd:
60:f4:6e:4f:b7:f3:36:f7:bc:2f:a6:72:02:15:3b:ce:80:56:
80:90:49:62:db:a6:35:5e:45:1b:d4:aa:c0:e2:fe:3c:ec:60:
80:58:bf:77:a6:76:79:6d:87:41:d8:72:1b:cd:09:2e:d4:c3:
10:ba:94:cc:73:3f:3a:b0:0d:6b:00:5a:d5:8c:fc:3f:8a:23:
3d:e9:65:d1:88:72:b2:cd:87:18:29:29:b2:8c:db:73:c6:77:
78:a1:6a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:32 2025 by rpki-client