Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft
File: Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft (raw, json)
Hash identifier: J0k4ISkezFpiib9bXosDafakq0aHGqUdditVmNDiNeI=
Subject key identifier: C6:83:55:19:B0:BC:B3:72:42:69:1A:31:FD:B0:0D:41:84:F6:8A:66
Authority key identifier: 4E:DC:68:9B:B2:2D:09:47:55:74:F4:1C:0E:5D:97:C0:45:93:09:28
Certificate issuer: /CN=4edc689bb22d09475574f41c0e5d97c045930928
Certificate serial: 019A71EEA1D6597F8AD7DE1349AD8DD0DA4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ttxom7ItCUdVdPQcDl2XwEWTCSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 08:00:55 +0000
Manifest this update: Tue 11 Nov 2025 08:00:55 +0000
Manifest next update: Wed 12 Nov 2025 08:00:55 +0000
Files and hashes: 1: Ttxom7ItCUdVdPQcDl2XwEWTCSg.crl (hash: HvFEKRRaTggcbK774Zb5xub0no6SI+qyUSnT7IQBoDk=)
2: zj8x9LPhXlzEHQ9u1uzhgnhO97g.roa (hash: e3RgXnvTwkUusOiV6XnE/u7ua1aPibK0pF3ch7NYWK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ttxom7ItCUdVdPQcDl2XwEWTCSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:a1:d6:59:7f:8a:d7:de:13:49:ad:8d:d0:da:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4edc689bb22d09475574f41c0e5d97c045930928
Validity
Not Before: Nov 11 08:00:55 2025 GMT
Not After : Nov 12 08:00:55 2025 GMT
Subject: CN=c6835519b0bcb37242691a31fdb00d4184f68a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1a:59:c5:d7:56:41:27:0b:28:53:f2:e2:aa:
f6:02:e4:96:e7:bc:f4:0a:5d:53:01:05:c8:0b:28:
41:df:51:b2:f7:97:50:7f:fb:74:7b:b5:a8:0e:43:
12:bb:b2:b1:1c:cf:38:2c:35:8a:12:13:d9:95:36:
cc:7d:ee:0d:e5:c8:94:f4:3c:4e:88:37:02:07:f9:
13:99:42:4f:07:63:24:41:67:80:d1:df:4a:c3:b9:
53:25:9e:ea:89:68:ea:4e:14:89:f1:c5:ac:7c:96:
e3:74:f9:09:82:3e:26:a6:82:2e:cb:7c:37:51:b5:
bd:93:bc:4c:cd:79:43:ad:27:41:54:d6:6d:98:d9:
89:25:6a:ce:50:e0:db:31:a6:5c:9e:1f:04:09:0e:
2f:15:2d:fb:a8:03:18:91:a2:ae:4b:bd:5e:e3:94:
13:7a:8f:81:78:6b:53:3c:ea:af:1d:d7:81:c7:96:
8b:20:07:4a:a4:7e:47:3f:d1:06:80:32:10:13:6e:
51:ec:98:64:39:5f:fe:ff:43:e1:8c:e1:b8:24:d6:
d4:5f:c1:87:85:e4:22:59:79:56:85:8d:3f:cc:be:
c5:01:a0:d1:78:28:0f:6f:aa:97:73:d7:b1:86:7f:
e9:e9:8d:0a:8c:87:e0:b8:24:e1:c7:ef:22:5c:68:
2d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:83:55:19:B0:BC:B3:72:42:69:1A:31:FD:B0:0D:41:84:F6:8A:66
X509v3 Authority Key Identifier:
keyid:4E:DC:68:9B:B2:2D:09:47:55:74:F4:1C:0E:5D:97:C0:45:93:09:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ttxom7ItCUdVdPQcDl2XwEWTCSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:26:7f:77:8e:61:6c:47:48:fd:d3:02:97:6a:b0:d7:78:e3:
bb:a7:41:5e:4e:e6:7a:d6:e8:a6:ae:96:d1:10:29:1e:e3:3a:
a3:f1:c5:83:35:84:b3:5b:9f:61:9e:b2:06:5c:44:80:5a:42:
ff:69:3f:f2:11:40:10:38:fb:04:12:69:84:87:e1:97:6b:3e:
11:4b:0a:6f:fe:55:88:70:44:eb:c1:56:69:63:84:a2:e0:73:
d8:95:b3:09:8a:fe:81:4f:39:43:af:0f:d3:04:66:20:88:c8:
d9:8e:03:4a:c1:c5:38:68:85:01:52:09:3b:06:71:fe:29:b1:
f8:42:a4:50:26:0a:13:6c:64:b5:5a:5e:9e:42:75:20:d0:7b:
eb:92:63:28:0b:09:9d:7c:6c:30:ed:20:b1:18:2b:ca:e9:ff:
cf:51:3f:2d:e7:16:d2:2b:df:f8:7e:f7:83:ac:b2:61:03:72:
51:2e:da:f9:1d:67:3d:a4:eb:09:3d:03:a9:28:05:57:ef:b8:
0a:59:6a:70:5c:8b:b6:20:36:8a:a1:32:ba:fb:ee:7b:01:fe:
8f:35:63:e2:3c:fe:60:7c:51:79:73:01:58:9a:40:05:1f:36:
ab:7c:33:fa:f1:5b:31:88:d0:07:d1:56:07:90:c3:e0:d4:40:
cb:43:ca:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:17 2025 by rpki-client