Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft
File: TtTTbmM3JKGxeUm8QiR2lk518GU.mft (raw, json)
Hash identifier: TVQXKXlTGMa4zTTcMjf1YLjbT4GZuzkNu9L2VQ/oLdo=
Subject key identifier: C4:50:F4:E1:E6:6B:1E:23:BA:D1:74:F9:08:B4:03:50:1D:A1:38:8C
Authority key identifier: 4E:D4:D3:6E:63:37:24:A1:B1:79:49:BC:42:24:76:96:4E:75:F0:65
Certificate issuer: /CN=4ed4d36e633724a1b17949bc422476964e75f065
Certificate serial: 019A733848F58EEF345B15C53C7544AE47DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtTTbmM3JKGxeUm8QiR2lk518GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 14:00:59 +0000
Manifest this update: Tue 11 Nov 2025 14:00:59 +0000
Manifest next update: Wed 12 Nov 2025 14:00:59 +0000
Files and hashes: 1: CnryW-h9KBqAbLH3yoElsj6kkME.roa (hash: LGWkYgge1+9ItWTLHb68eWMOdZQGepA7ESiUA3d7dLI=)
2: TtTTbmM3JKGxeUm8QiR2lk518GU.crl (hash: IR608YOOsLZ2rzR6AejyUJlcC3PUOG0J5PFtsfnJH6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtTTbmM3JKGxeUm8QiR2lk518GU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:48:f5:8e:ef:34:5b:15:c5:3c:75:44:ae:47:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed4d36e633724a1b17949bc422476964e75f065
Validity
Not Before: Nov 11 14:00:59 2025 GMT
Not After : Nov 12 14:00:59 2025 GMT
Subject: CN=c450f4e1e66b1e23bad174f908b403501da1388c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:75:5d:04:96:ec:37:2b:18:53:48:f3:fe:76:
b6:8d:ba:e9:ca:08:b1:19:4f:1d:bc:43:d9:9d:ea:
a2:54:89:67:f7:dd:5d:4b:39:be:74:9c:db:49:9f:
9f:39:76:a2:0e:c0:6b:cb:51:f1:55:c4:f8:03:36:
48:a3:1b:06:5c:7b:7e:0b:e4:2e:12:b3:e5:d1:39:
c9:60:1c:58:23:44:fe:92:ad:e7:27:ab:4f:7e:82:
84:ae:fe:0c:1f:00:0b:f8:ba:04:c2:c4:e2:d3:ff:
a0:0f:44:37:e6:38:40:b7:58:06:2c:93:c2:87:46:
f7:0d:96:0b:e9:de:45:ee:78:a7:a9:cd:67:dd:8d:
22:35:c0:f0:02:25:9f:73:5d:e9:50:20:cf:bb:af:
e6:ed:30:a1:4a:02:2c:f7:e3:f6:d0:95:24:c6:3d:
d9:2a:f1:06:80:88:dc:10:80:53:73:e2:fe:16:f3:
6f:23:d4:72:26:85:5a:80:c9:25:4b:3e:d7:cd:2b:
8d:73:18:37:d0:ac:db:b7:19:a1:49:b0:38:72:42:
87:0d:71:42:82:22:49:87:bf:9e:07:27:eb:1c:9a:
57:b1:4c:47:81:0d:a4:a1:d5:36:65:92:89:a2:bc:
fe:03:4c:bd:98:e8:29:b3:5e:2b:37:d6:15:fa:43:
de:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:50:F4:E1:E6:6B:1E:23:BA:D1:74:F9:08:B4:03:50:1D:A1:38:8C
X509v3 Authority Key Identifier:
keyid:4E:D4:D3:6E:63:37:24:A1:B1:79:49:BC:42:24:76:96:4E:75:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtTTbmM3JKGxeUm8QiR2lk518GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:01:82:d4:82:05:be:be:63:c4:65:68:4b:1c:17:27:c0:c2:
f1:39:9f:d6:7f:3c:85:ac:3f:d1:5d:c5:1f:f3:15:fa:dc:2c:
f1:1e:75:84:6f:e9:08:95:f3:9a:39:b4:02:75:98:96:97:47:
d4:72:c9:57:4d:ed:36:16:45:55:fe:3e:6a:ff:08:3a:53:af:
18:4e:cc:e3:14:9d:b6:c2:3c:f4:87:cb:a4:6c:15:65:97:92:
b2:6f:f7:ac:48:a5:cc:41:43:81:9a:a0:63:1a:81:a0:d9:99:
8f:fe:f8:d6:50:21:1b:88:68:50:2f:68:ea:c1:c2:97:21:69:
dc:87:78:13:ec:96:b9:31:03:df:93:52:d3:dd:f3:2e:95:df:
ee:21:56:b5:64:dc:49:c6:6e:62:2e:f0:1c:55:12:f8:2d:b6:
b2:43:bf:c0:c4:e1:5b:89:dd:3a:e4:0b:78:27:fc:b4:00:a5:
9e:77:ec:b4:7b:1a:43:30:f6:57:2b:aa:91:e2:25:be:bd:85:
d5:fd:81:a4:71:de:38:f2:1d:91:52:39:90:f6:f5:4a:e1:08:
9c:1c:f8:3b:f0:12:4c:3d:92:f3:a9:94:dd:76:57:90:a4:19:
fa:75:1c:17:b4:19:f1:f4:96:e0:46:c5:d3:6b:58:ae:16:31:
9e:cd:d0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:34 2025 by rpki-client