Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.mft
File: TTuCKQwugJCSSp79nFF8oUpcNwQ.mft (raw, json)
Hash identifier: rwjqrnaxL416OlbDaJS8MjFkAn2xYtdw3kasMo02Lto=
Subject key identifier: FE:62:7F:CE:E8:C9:C2:AE:33:6D:35:DE:A5:46:EC:7D:30:AD:72:C9
Authority key identifier: 4D:3B:82:29:0C:2E:80:90:92:4A:9E:FD:9C:51:7C:A1:4A:5C:37:04
Certificate issuer: /CN=4d3b82290c2e8090924a9efd9c517ca14a5c3704
Certificate serial: 019A71B930C1F7FBCC4E44373CA0A160A91D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTuCKQwugJCSSp79nFF8oUpcNwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:02:33 +0000
Manifest this update: Tue 11 Nov 2025 07:02:33 +0000
Manifest next update: Wed 12 Nov 2025 07:02:33 +0000
Files and hashes: 1: TTuCKQwugJCSSp79nFF8oUpcNwQ.crl (hash: 9OG3TS4wuKfmKHacCwWMfKm4tnYLUI5yIxUTfgKA3Mw=)
2: pdjC9ITQ24acWwqpMZ438xSZhiA.roa (hash: J1OLMcnc+nGL4fyVYlLU268vrwR6/zxGbhF2T7OJ2uY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TTuCKQwugJCSSp79nFF8oUpcNwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:30:c1:f7:fb:cc:4e:44:37:3c:a0:a1:60:a9:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3b82290c2e8090924a9efd9c517ca14a5c3704
Validity
Not Before: Nov 11 07:02:33 2025 GMT
Not After : Nov 12 07:02:33 2025 GMT
Subject: CN=fe627fcee8c9c2ae336d35dea546ec7d30ad72c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3c:38:28:9c:b9:1a:01:f8:fc:30:32:64:7a:
57:12:77:eb:9d:47:04:0c:f5:07:62:a4:73:35:de:
56:78:a9:d4:96:1c:aa:1f:8a:7b:e9:90:c4:da:e9:
d4:a8:c3:ec:e7:fa:cc:41:06:92:70:84:0e:b5:2b:
2e:57:41:e2:7f:a4:94:3d:09:0b:0c:f1:91:a7:90:
f6:3b:38:c6:df:44:7f:e3:1b:95:8a:51:db:e3:7a:
a4:85:57:33:16:ae:fa:85:b7:12:df:b7:63:24:47:
37:46:e7:f0:28:e8:93:e7:04:32:bf:37:4b:9e:d8:
d4:7d:68:a9:19:28:8f:41:42:55:09:de:39:d9:14:
6c:b0:ff:21:72:3a:52:95:f9:47:e6:d5:ca:9c:e2:
c4:85:f3:98:e0:12:e5:69:7f:46:0c:a2:28:37:b5:
cd:93:b7:dc:3e:6f:b9:d7:20:d2:f0:8b:82:8f:47:
7e:97:34:74:63:1e:51:ed:b0:d5:37:a3:0b:44:70:
be:1a:cf:bc:d0:6a:f8:99:38:e5:31:12:aa:91:1b:
6b:06:66:ed:3f:c5:ad:2c:4c:5f:12:3d:30:fa:3c:
2f:43:b8:51:6f:fb:1b:8d:30:67:ed:c4:c6:07:b4:
e7:22:04:96:39:59:c7:f6:2e:d3:18:93:f0:f0:db:
f3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:62:7F:CE:E8:C9:C2:AE:33:6D:35:DE:A5:46:EC:7D:30:AD:72:C9
X509v3 Authority Key Identifier:
keyid:4D:3B:82:29:0C:2E:80:90:92:4A:9E:FD:9C:51:7C:A1:4A:5C:37:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTuCKQwugJCSSp79nFF8oUpcNwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:7c:ec:1a:3c:2d:ed:75:b3:fd:4b:98:b1:02:63:48:53:40:
6b:13:3b:83:2d:ce:e8:61:5d:b8:9a:70:6e:3c:16:84:ec:ed:
85:82:6c:03:32:ab:49:d5:e2:ec:d0:b9:a5:94:12:2d:c6:3e:
69:20:79:d8:5c:40:d5:dd:57:c1:05:7a:b4:c2:72:97:0f:da:
71:1c:16:fa:77:9e:48:c6:f2:11:b4:65:19:ee:f1:3f:bd:29:
27:56:b8:a4:3a:df:6c:ad:15:d8:70:65:89:f8:95:f9:5a:92:
11:79:e3:6f:07:dd:c3:b5:25:05:37:16:55:47:ff:da:f0:5f:
54:04:60:67:23:db:4e:dd:20:a5:0f:59:7f:54:db:af:fc:3d:
44:c0:4b:9f:51:de:1d:38:9d:f1:35:24:5f:c4:7e:b2:cb:8d:
5e:b5:5a:e3:7a:c1:90:e6:82:a5:af:57:35:36:5c:93:6e:9e:
db:68:8c:49:16:e6:46:e9:1f:52:66:8d:08:14:74:dc:f6:f1:
b7:d8:21:91:fa:30:77:ee:f6:b3:0c:d1:60:70:71:93:40:56:
80:b7:05:f7:80:ec:0d:51:8b:c2:81:f7:8c:75:47:7e:8d:37:
a1:ce:91:2a:a1:42:5e:b8:86:92:4b:68:48:6e:e2:9c:ea:1b:
de:3e:77:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuTDB9/vMTkQ3PKChYKkdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkM2I4MjI5MGMyZTgwOTA5MjRhOWVmZDljNTE3Y2ExNGE1
YzM3MDQwHhcNMjUxMTExMDcwMjMzWhcNMjUxMTEyMDcwMjMzWjAzMTEwLwYDVQQD
EyhmZTYyN2ZjZWU4YzljMmFlMzM2ZDM1ZGVhNTQ2ZWM3ZDMwYWQ3MmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzw4KJy5GgH4/DAyZHpXEnfrnUcE
DPUHYqRzNd5WeKnUlhyqH4p76ZDE2unUqMPs5/rMQQaScIQOtSsuV0Hif6SUPQkL
DPGRp5D2OzjG30R/4xuVilHb43qkhVczFq76hbcS37djJEc3RufwKOiT5wQyvzdL
ntjUfWipGSiPQUJVCd452RRssP8hcjpSlflH5tXKnOLEhfOY4BLlaX9GDKIoN7XN
k7fcPm+51yDS8IuCj0d+lzR0Yx5R7bDVN6MLRHC+Gs+80Gr4mTjlMRKqkRtrBmbt
P8WtLExfEj0w+jwvQ7hRb/sbjTBn7cTGB7TnIgSWOVnH9i7TGJPw8Nvz3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP5if87oycKuM2013qVG7H0wrXLJMB8GA1UdIwQY
MBaAFE07gikMLoCQkkqe/ZxRfKFKXDcEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFR1Q0tRd3VnSkNTU3A3OW5GRjhvVXBjTndRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9jNWNjZDgtOGYwZC00ODYyLTg2YWEt
ZDk3OWVjZTkzMjg1LzEvVFR1Q0tRd3VnSkNTU3A3OW5GRjhvVXBjTndRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9jNWNjZDgtOGYwZC00ODYyLTg2YWEtZDk3OWVjZTkzMjg1
LzEvVFR1Q0tRd3VnSkNTU3A3OW5GRjhvVXBjTndRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMnzsGjwt
7XWz/UuYsQJjSFNAaxM7gy3O6GFduJpwbjwWhOzthYJsAzKrSdXi7NC5pZQSLcY+
aSB52FxA1d1XwQV6tMJylw/acRwW+neeSMbyEbRlGe7xP70pJ1a4pDrfbK0V2HBl
ifiV+VqSEXnjbwfdw7UlBTcWVUf/2vBfVARgZyPbTt0gpQ9Zf1Tbr/w9RMBLn1He
HTid8TUkX8R+ssuNXrVa43rBkOaCpa9XNTZck26e22iMSRbmRukfUmaNCBR03Pbx
t9ghkfowd+72swzRYHBxk0BWgLcF94DsDVGLwoH3jHVHfo03oc6RKqFCXriGkkto
SG7inOob3j53RQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:03 2025 by rpki-client