Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/94c3c5-c9b1-46e0-a05e-4764bd00d310/1/tTk77GZMj073jtxIvs1jnIKlOgU.mft
File: tTk77GZMj073jtxIvs1jnIKlOgU.mft (raw, json)
Hash identifier: iCR56HjGd0K6sYKPFoFzH2VMxZ1/J9GjIYTmcTLA2XI=
Subject key identifier: A0:31:C1:E7:46:EB:9E:AD:DF:78:FC:DA:31:D0:6D:69:10:EA:5F:91
Authority key identifier: B5:39:3B:EC:66:4C:8F:4E:F7:8E:DC:48:BE:CD:63:9C:82:A5:3A:05
Certificate issuer: /CN=b5393bec664c8f4ef78edc48becd639c82a53a05
Certificate serial: 019A1EACDD9106B04173AD8EB1DB03888753
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTk77GZMj073jtxIvs1jnIKlOgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/94c3c5-c9b1-46e0-a05e-4764bd00d310/1/tTk77GZMj073jtxIvs1jnIKlOgU.mft
Manifest number: 149A
Signing time: Sun 26 Oct 2025 04:00:36 +0000
Manifest this update: Sun 26 Oct 2025 04:00:36 +0000
Manifest next update: Mon 27 Oct 2025 04:00:36 +0000
Files and hashes: 1: tTk77GZMj073jtxIvs1jnIKlOgU.crl (hash: xHh70TOutQfZM0Z5KkRw9+AwyYMG8oKrT5t0YOzaoXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/94c3c5-c9b1-46e0-a05e-4764bd00d310/1/tTk77GZMj073jtxIvs1jnIKlOgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/94c3c5-c9b1-46e0-a05e-4764bd00d310/1/tTk77GZMj073jtxIvs1jnIKlOgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTk77GZMj073jtxIvs1jnIKlOgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:ac:dd:91:06:b0:41:73:ad:8e:b1:db:03:88:87:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5393bec664c8f4ef78edc48becd639c82a53a05
Validity
Not Before: Oct 26 04:00:36 2025 GMT
Not After : Oct 27 04:00:36 2025 GMT
Subject: CN=a031c1e746eb9eaddf78fcda31d06d6910ea5f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:41:af:14:41:bd:26:b7:de:b4:12:2a:36:a4:
21:6c:df:45:a9:2b:9b:f3:de:c5:4d:c8:f0:05:01:
ea:f7:ba:f8:4f:c0:d7:82:f9:75:84:89:8c:5b:7d:
af:19:46:13:80:0a:bd:4e:95:79:4d:d9:38:d6:dd:
99:c5:3f:b7:53:5c:b1:95:8a:4f:ee:78:f4:f8:d5:
47:11:20:3a:d3:b2:74:81:a9:a8:7c:64:df:57:72:
eb:d7:d4:e6:d1:98:c6:17:e5:8b:10:20:23:c4:a0:
7e:00:86:5f:4d:03:41:53:62:de:04:b9:92:43:45:
c4:6f:db:32:a5:32:1c:58:38:b7:bf:7a:2f:b9:6b:
5d:fd:28:b0:50:50:78:ef:63:dc:64:a4:3d:c4:9b:
13:0d:8a:50:18:af:e7:57:f4:8f:c5:83:cd:13:33:
61:e0:86:85:4a:43:01:bd:b2:64:8f:c0:c8:84:57:
df:f6:b1:1b:59:2f:71:e9:49:59:2f:d8:46:5c:a5:
35:0e:ce:8c:b7:2b:cd:7f:b1:50:9b:32:6d:b9:02:
52:5a:46:d9:7a:e2:63:fd:94:23:6c:87:3f:bb:c4:
e3:5f:81:31:ec:dd:4f:0e:92:5c:38:cf:e3:3b:ec:
c1:ce:39:03:43:56:ef:c9:b9:38:fa:ed:94:fe:03:
a6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:31:C1:E7:46:EB:9E:AD:DF:78:FC:DA:31:D0:6D:69:10:EA:5F:91
X509v3 Authority Key Identifier:
keyid:B5:39:3B:EC:66:4C:8F:4E:F7:8E:DC:48:BE:CD:63:9C:82:A5:3A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTk77GZMj073jtxIvs1jnIKlOgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/94c3c5-c9b1-46e0-a05e-4764bd00d310/1/tTk77GZMj073jtxIvs1jnIKlOgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/94c3c5-c9b1-46e0-a05e-4764bd00d310/1/tTk77GZMj073jtxIvs1jnIKlOgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:0e:fb:28:9d:74:ba:52:03:ee:71:9b:76:20:d6:71:25:d0:
c2:b9:b2:bb:4a:91:10:47:af:14:aa:8b:1d:95:34:5a:c7:3b:
d8:f2:4a:6a:39:6b:73:a0:a7:1f:3a:15:43:15:af:73:78:0a:
ce:ef:68:ad:1b:81:e6:14:17:f0:0b:61:f8:73:e4:b3:b8:d0:
5f:25:68:c3:1c:12:b4:38:ec:08:7b:d3:8c:5c:e1:05:f6:33:
ac:ad:97:b5:6f:4c:5d:4f:9d:62:08:94:6b:44:64:7e:77:97:
95:ca:ba:6b:91:14:88:46:f2:fe:ae:b1:03:f6:c4:7f:02:2d:
79:23:cb:25:b8:c4:a9:24:96:78:45:4f:df:d5:3b:23:ff:bc:
cb:2b:d3:c4:c2:71:9e:4a:e7:33:98:49:63:fd:bf:72:e6:06:
94:15:3b:ff:d0:f0:33:73:6a:ce:f8:b5:c7:9c:c8:c2:aa:c9:
e7:3f:54:3a:e7:68:bd:2b:b1:ab:af:d5:d5:0c:c0:eb:9a:60:
ea:3f:57:74:d6:42:cc:48:d7:b0:9e:68:1f:f6:85:ca:ed:a1:
a7:7e:1d:2f:e0:bb:0d:29:10:41:a0:d1:c5:95:11:87:cd:35:
e8:ac:2b:c4:a5:d9:18:63:54:ef:67:73:5e:33:f6:6d:f8:25:
02:66:a3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 10:52:38 2025 by rpki-client