Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
File: TTAqLdUXpho7lSdG8u6fvkNtY0k.mft (raw, json)
Hash identifier: j6DnzqKBP7O/RXd3/KucYk/xU+QiPiR3x0MzhYivSsc=
Subject key identifier: 01:C5:C3:32:CA:08:8C:74:52:65:0B:B4:49:3D:0E:E1:08:74:12:15
Authority key identifier: 4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
Certificate issuer: /CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Certificate serial: 019A72CA62E80682462DA147DD5145A47EEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
Manifest number: 1724
Signing time: Tue 11 Nov 2025 12:00:57 +0000
Manifest this update: Tue 11 Nov 2025 12:00:57 +0000
Manifest next update: Wed 12 Nov 2025 12:00:57 +0000
Files and hashes: 1: OS7c8-e6_IPhh6UsfkxpmetgvVM.roa (hash: u4NSl9jjxeT5MDlBDBHxspeJOasrj/ytcidQr1I6tQs=)
2: TTAqLdUXpho7lSdG8u6fvkNtY0k.crl (hash: 3Ldmw12NnQDtaDxJ5apXVvmVZtUEv4F8Gd0aNPeaQ88=)
3: ujFYCfp3NT3vzURuQfX3QSbCmrc.roa (hash: Mq+9HfcpF+4pzQa3kfg+LdSo4w+vmYd+Egj8pIwlOE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:62:e8:06:82:46:2d:a1:47:dd:51:45:a4:7e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Validity
Not Before: Nov 11 12:00:57 2025 GMT
Not After : Nov 12 12:00:57 2025 GMT
Subject: CN=01c5c332ca088c7452650bb4493d0ee108741215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:cd:6e:6b:16:34:dc:66:67:2d:e3:ae:25:2a:
aa:de:5f:d3:61:27:d9:a6:47:c0:77:4e:d4:83:d3:
5d:aa:41:cb:18:81:dd:8e:05:36:26:9b:45:3c:7f:
58:82:c9:b9:ce:16:3f:64:95:9e:49:d1:9b:44:23:
fa:0f:ec:69:79:92:12:59:6c:56:93:e4:6a:49:a2:
af:af:b4:c5:af:da:7c:f7:49:b5:19:a9:87:b4:42:
6b:06:5c:d3:9e:39:96:bb:90:60:54:ea:7a:e1:50:
47:91:39:7a:b0:82:97:a9:db:a6:9b:42:f8:25:88:
29:76:75:db:c8:24:e7:b8:d7:9a:17:d7:ba:ce:2d:
32:88:71:06:ce:fc:d7:3d:f6:0f:ed:72:af:f5:ca:
1e:08:ae:c0:c0:79:3d:ac:1c:53:77:3b:e7:72:56:
36:22:19:a0:f2:18:69:a2:cb:13:27:3e:d1:a5:e5:
0a:e5:ae:77:80:25:13:18:c9:29:2c:27:7b:89:94:
be:d1:1c:71:7d:ec:04:4c:42:92:7a:be:ee:30:fb:
ba:f0:5f:e5:61:7c:25:53:16:99:94:f2:a7:b3:7b:
51:46:1e:67:d3:51:81:3c:98:89:ec:e6:9d:9a:cf:
be:00:db:ef:ad:f9:e5:b6:64:bb:9e:9e:15:4a:b6:
a5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C5:C3:32:CA:08:8C:74:52:65:0B:B4:49:3D:0E:E1:08:74:12:15
X509v3 Authority Key Identifier:
keyid:4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:83:9b:f1:27:a0:50:39:77:3c:69:25:c8:bf:ab:08:ff:cf:
b3:e6:42:e8:e0:62:fd:e0:3b:e4:09:8f:6b:66:ae:43:ec:92:
98:b0:aa:32:89:cd:49:0a:68:63:63:7c:73:f7:a0:c4:be:e1:
05:44:d4:fb:9f:7d:fb:8d:88:c8:9e:17:42:39:58:94:27:98:
65:39:7c:51:51:1d:70:50:18:91:ba:26:35:cc:bb:8e:91:6d:
c8:4e:9a:f2:8f:10:6f:36:b6:96:6b:ea:4c:75:32:5f:78:f8:
0c:a4:19:c7:18:59:56:7f:1f:dd:9f:bd:80:9a:60:7d:b8:8f:
43:bc:6d:b6:37:de:f9:48:e0:21:57:29:c1:c3:de:3c:19:35:
62:e1:15:77:f6:2d:ef:a1:5e:e5:e2:bb:b5:0d:c7:a8:e7:b6:
a8:e3:13:55:07:64:fd:37:bd:47:38:dc:5a:25:84:aa:6d:85:
9f:48:5c:7e:ca:45:1d:65:f8:14:90:70:82:8b:65:26:ff:54:
cf:2a:3b:fa:1d:d9:cb:68:86:ad:dd:ed:52:43:dd:9d:0c:07:
e1:b2:32:3b:62:da:c6:9a:8e:4d:01:1c:99:e3:32:b7:60:69:
1f:3f:38:9e:56:86:e5:75:0d:0f:0a:51:41:47:9e:90:89:3c:
ad:0a:2e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:43 2025 by rpki-client