Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.mft
File: ttaENqdjOfZxRBz71QrUAdPAD_8.mft (raw, json)
Hash identifier: YJOE+WpzNQN1y2ZuV/lX1SQtAHe6YOTwaeXjeITTlJo=
Subject key identifier: 94:4D:26:EF:55:F9:20:44:AE:97:D4:5A:EE:86:4A:A0:5F:ED:1F:27
Authority key identifier: B6:D6:84:36:A7:63:39:F6:71:44:1C:FB:D5:0A:D4:01:D3:C0:0F:FF
Certificate issuer: /CN=b6d68436a76339f671441cfbd50ad401d3c00fff
Certificate serial: 019A4DE218B3C24C88F975A4CB69163354D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ttaENqdjOfZxRBz71QrUAdPAD_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.mft
Manifest number: 1477
Signing time: Tue 04 Nov 2025 08:00:54 +0000
Manifest this update: Tue 04 Nov 2025 08:00:54 +0000
Manifest next update: Wed 05 Nov 2025 08:00:54 +0000
Files and hashes: 1: HROKUTUR5gMY3n6zglHSVCbZS_I.roa (hash: w0BOZ7icboJC4/TfINzPR6MRHeR0gZCuXliuxuy25YQ=)
2: ttaENqdjOfZxRBz71QrUAdPAD_8.crl (hash: 0/Do6v9tggQI3w0sk+MjlHKG4bKP8SaZPobRHw/z0ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ttaENqdjOfZxRBz71QrUAdPAD_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:18:b3:c2:4c:88:f9:75:a4:cb:69:16:33:54:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6d68436a76339f671441cfbd50ad401d3c00fff
Validity
Not Before: Nov 4 08:00:54 2025 GMT
Not After : Nov 5 08:00:54 2025 GMT
Subject: CN=944d26ef55f92044ae97d45aee864aa05fed1f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7f:97:a2:90:2a:e7:98:3c:78:57:62:f3:e8:
46:5f:d6:87:6a:91:93:12:64:b1:a2:3a:ad:10:1e:
b5:0b:ad:c7:a0:9e:52:ea:de:27:72:fe:d6:81:96:
1f:9a:ea:30:ea:40:c8:db:74:b1:e9:a3:79:5b:72:
9b:ab:7f:a2:57:20:5c:58:12:e0:22:1e:3b:8e:b4:
43:b1:14:8d:7e:5b:94:c3:a3:4e:df:8d:ac:1e:5c:
40:3e:69:d1:d1:31:7f:0c:4e:b4:fd:7f:20:8c:0e:
a2:55:83:b9:16:29:d3:a7:68:a3:2a:15:56:d6:ae:
ff:28:25:78:b7:4b:e8:4f:b3:12:e0:07:90:bf:9e:
ea:89:93:fc:f8:55:74:d7:cd:26:73:7d:08:c3:31:
e0:fa:a5:15:d5:20:27:3a:9e:f3:68:bf:82:4d:8d:
5a:dc:79:7f:83:23:42:19:9a:92:f3:35:04:7b:14:
53:cb:66:79:6f:c7:59:85:65:3b:f0:27:43:50:79:
dc:14:c8:2f:91:42:76:14:aa:ba:71:32:dd:6a:ab:
33:a2:a3:56:4a:90:b8:95:42:b6:ad:69:68:fe:47:
91:51:e0:cc:0b:bc:31:de:1b:a9:8f:71:c5:b3:fc:
ad:1a:36:44:67:31:60:b5:ac:3c:60:ef:da:83:88:
95:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:4D:26:EF:55:F9:20:44:AE:97:D4:5A:EE:86:4A:A0:5F:ED:1F:27
X509v3 Authority Key Identifier:
keyid:B6:D6:84:36:A7:63:39:F6:71:44:1C:FB:D5:0A:D4:01:D3:C0:0F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttaENqdjOfZxRBz71QrUAdPAD_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:69:c8:30:cc:61:48:ca:71:fb:0d:d2:15:7d:2d:34:19:96:
1f:07:ed:63:e4:71:65:fa:d3:7f:98:11:fd:35:e6:9a:54:71:
60:92:3e:6c:3f:5d:8e:c7:c2:c3:a9:5a:a8:f2:03:9d:a6:6a:
a1:fe:77:7f:7e:6b:df:ea:96:74:72:28:4c:14:c2:4e:05:25:
a0:08:88:88:eb:bc:5b:82:7a:7d:b3:5a:f6:b7:39:1c:52:dc:
ae:64:e9:c9:80:c7:52:3c:12:c7:fd:e2:53:25:5c:bc:fd:72:
9c:8c:a0:a5:19:a0:b3:ad:71:3c:6f:c5:e9:c1:b7:66:22:4d:
35:d5:05:e1:2a:0e:c9:6c:91:d5:f6:ce:61:b0:5f:ab:1f:89:
a3:88:b3:a7:39:93:6e:39:d3:38:7a:15:bf:fe:33:53:b5:1c:
a4:11:6a:72:29:75:d7:39:0c:d3:63:90:ac:68:db:77:27:14:
2f:fb:77:99:81:0f:ec:23:9f:de:9c:1a:4a:cf:72:8d:cd:a7:
6f:19:28:e2:79:4b:76:c6:52:44:a7:ca:a6:42:b9:8c:c5:4a:
9e:f2:c9:aa:7e:50:59:1e:53:21:d8:91:98:75:61:66:f6:61:
fd:01:14:93:2a:71:0a:90:14:bb:80:f4:6c:b5:84:35:55:dd:
ac:2a:d7:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:14 2025 by rpki-client