Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
File: TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft (raw, json)
Hash identifier: vvQgu8+p9I20XPu93MAFHn1qYzDzGmsz6FDJqvgL+gQ=
Subject key identifier: 71:2D:D0:17:0D:CD:46:27:83:15:B6:42:6A:D8:41:7C:D5:6F:74:7C
Authority key identifier: 4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
Certificate issuer: /CN=4d3f54f304e6b851608c293978b16ba51ac0350e
Certificate serial: 019A22F7B2916D4F7FED2FC463BB0AADB70E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
Manifest number: 16F6
Signing time: Mon 27 Oct 2025 00:00:49 +0000
Manifest this update: Mon 27 Oct 2025 00:00:49 +0000
Manifest next update: Tue 28 Oct 2025 00:00:49 +0000
Files and hashes: 1: 2-8ODfbSISRCVrFLypE1beop4mI.roa (hash: CTu3Z/KQAufmJs+pAxP0V5GvviRUTQPwl9gEk4hUm6E=)
2: TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl (hash: M/h3tMiB2StveKsGf/fgdCzNGVt0T8jCEYpO6txjsPI=)
3: xOYkGw3SqmDNjUBUXBvZW0U-4J4.roa (hash: CMrEVMiwQAaT7qSr6cVaZ45q/VR6zzPcJBOroZoc7n8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:b2:91:6d:4f:7f:ed:2f:c4:63:bb:0a:ad:b7:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3f54f304e6b851608c293978b16ba51ac0350e
Validity
Not Before: Oct 27 00:00:49 2025 GMT
Not After : Oct 28 00:00:49 2025 GMT
Subject: CN=712dd0170dcd46278315b6426ad8417cd56f747c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:99:f7:47:d2:cd:17:57:dc:f1:ce:43:b3:4d:
32:91:6d:25:b7:7a:b1:90:33:ee:78:f0:60:d4:c7:
7c:b1:7b:01:f8:5d:9d:da:f6:47:bb:0d:89:37:6a:
06:5d:2d:a7:a5:c4:fe:80:77:23:b3:e5:3d:a8:df:
03:6d:13:09:f0:a4:b5:94:1d:cd:41:8a:77:9d:08:
80:1f:0d:97:99:e6:03:44:60:c7:f6:de:bb:9d:73:
8a:bb:2c:98:36:3f:61:16:f3:96:15:8b:2e:c2:86:
0e:d7:c5:27:20:ea:ef:e9:9d:83:e7:6d:bf:28:0d:
8e:87:ee:3f:5f:c9:be:d8:a9:7b:d0:a6:0b:3e:f8:
97:cb:73:98:87:2d:ad:37:e3:93:83:71:1a:74:5f:
88:9a:fc:a1:84:25:00:78:41:8c:13:9f:a4:13:c7:
3a:9a:fc:7e:a7:60:4b:81:5c:c8:1c:a2:8f:3b:84:
3a:9c:71:78:c1:96:61:47:bb:9b:d6:b7:bd:a7:84:
ac:46:71:5e:56:26:36:89:8e:85:67:c8:9a:56:2b:
ac:fb:0d:fe:83:46:23:27:2c:7d:e7:3f:0b:6f:3e:
5e:06:42:54:7e:b7:82:57:d4:0c:12:aa:57:33:43:
24:c5:75:b1:74:15:db:01:1c:4e:26:80:b4:5c:05:
50:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:2D:D0:17:0D:CD:46:27:83:15:B6:42:6A:D8:41:7C:D5:6F:74:7C
X509v3 Authority Key Identifier:
keyid:4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:5b:1c:bc:0f:fa:1d:d0:a5:39:53:63:91:76:28:d1:7c:5c:
4c:4f:93:72:2f:31:f8:9f:9d:85:6e:29:d9:92:d0:f4:b6:56:
af:c6:27:c9:22:d6:7d:38:f7:fd:e8:f2:93:d0:05:cf:f8:0d:
0f:ba:e3:5e:08:1a:df:18:37:c7:3a:7e:6d:43:a2:b8:dc:f0:
c2:4a:d0:01:53:62:d3:00:02:56:c3:44:a4:56:25:b3:5f:59:
24:88:cc:3c:84:f4:ae:c5:08:b7:d5:96:13:16:7c:b8:11:a5:
e5:80:e0:34:f1:5e:68:20:37:a4:dc:74:68:e2:ea:bf:0f:68:
a9:6d:85:c7:ee:ac:f7:b7:de:f4:38:97:d9:f2:ba:13:1c:5b:
2e:79:c7:09:2f:0d:82:2f:fb:fb:47:78:f1:fd:6d:d6:98:4e:
d0:6c:c1:cd:df:48:dc:7d:91:dc:57:48:e2:fe:f7:3e:68:07:
c5:08:37:55:97:9e:96:ba:47:f7:4c:21:e5:d5:c5:31:d3:1d:
3f:fe:8b:53:c3:a6:1f:d5:2c:f0:b0:d6:11:5a:83:15:00:11:
7d:f9:54:b2:76:59:33:92:b1:9a:fd:63:54:38:04:20:81:23:
37:48:46:59:0e:0d:20:9c:db:7b:f2:2f:35:12:58:de:4c:3b:
15:bc:a0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 02:08:54 2025 by rpki-client