Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft
File: Tt5MZdc1r3knftFOtsTPVATHiNU.mft (raw, json)
Hash identifier: bbbgjYEJD8VGtF+TZW8x7K8YpVue/8qZhKRzDmuaXRc=
Subject key identifier: A9:93:ED:31:26:FE:1F:C2:85:70:B4:2A:3A:A5:81:6C:42:6D:F4:28
Authority key identifier: 4E:DE:4C:65:D7:35:AF:79:27:7E:D1:4E:B6:C4:CF:54:04:C7:88:D5
Certificate issuer: /CN=4ede4c65d735af79277ed14eb6c4cf5404c788d5
Certificate serial: 019A503DF2A8632633DDA687D13D5A99C870
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tt5MZdc1r3knftFOtsTPVATHiNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft
Manifest number: 094E
Signing time: Tue 04 Nov 2025 19:00:28 +0000
Manifest this update: Tue 04 Nov 2025 19:00:28 +0000
Manifest next update: Wed 05 Nov 2025 19:00:28 +0000
Files and hashes: 1: CNpxwuWXiobnr753WTcJ-SvZEQU.roa (hash: +W4soYxTO8aYTDMgF940blaVc3sdpMhU9iF5WZMoCzU=)
2: Tt5MZdc1r3knftFOtsTPVATHiNU.crl (hash: IQBM5VCzlj9FKaDBBF9ZvHcq9WYq/FbW6zdTjtl+VfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tt5MZdc1r3knftFOtsTPVATHiNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:f2:a8:63:26:33:dd:a6:87:d1:3d:5a:99:c8:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ede4c65d735af79277ed14eb6c4cf5404c788d5
Validity
Not Before: Nov 4 19:00:28 2025 GMT
Not After : Nov 5 19:00:28 2025 GMT
Subject: CN=a993ed3126fe1fc28570b42a3aa5816c426df428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:59:47:96:e8:6a:f1:c3:a6:3f:65:03:25:b4:
ca:4f:ce:d9:f7:f4:db:7c:eb:36:9f:fe:cf:16:ff:
48:db:70:fd:c7:9f:fb:45:51:2d:d3:22:ba:b1:09:
ca:41:2c:98:59:88:35:44:78:91:40:81:a8:9b:5b:
22:23:df:2e:96:e3:04:fb:aa:76:10:41:a0:6e:b9:
21:37:01:77:a6:76:3f:a0:f2:ef:13:1d:f5:57:96:
86:0a:a0:a4:83:cb:a3:56:16:00:8c:fa:e3:31:da:
89:52:18:ee:4b:c7:36:59:f8:7b:cd:bc:04:75:79:
f6:eb:1a:41:2a:d2:cc:89:5e:ec:bd:8d:96:e6:3e:
b6:45:fc:cb:1f:4c:6f:25:f1:65:ab:a4:da:00:0a:
96:61:83:a5:4a:a1:5e:57:66:a1:7f:b3:26:b8:b2:
50:01:9e:82:d7:a8:3a:db:83:d1:41:19:30:9e:c1:
93:16:d2:38:2f:f6:2d:73:31:02:65:0e:42:3f:c8:
dc:34:b5:65:15:71:21:39:bb:58:56:7e:59:ce:3e:
80:66:e9:fa:d2:74:1f:9a:51:8d:b7:f3:00:fd:6c:
e5:76:77:c6:31:09:98:3c:bd:72:e3:26:a2:60:b1:
26:df:24:ea:67:3c:10:76:97:b9:59:a9:b2:7e:69:
37:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:93:ED:31:26:FE:1F:C2:85:70:B4:2A:3A:A5:81:6C:42:6D:F4:28
X509v3 Authority Key Identifier:
keyid:4E:DE:4C:65:D7:35:AF:79:27:7E:D1:4E:B6:C4:CF:54:04:C7:88:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tt5MZdc1r3knftFOtsTPVATHiNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:4a:97:b9:35:04:37:6a:c9:45:04:5a:ba:0a:5b:31:57:62:
5f:65:12:04:fe:43:a5:a8:59:e5:b0:26:05:b8:6c:5b:a3:4d:
4b:91:c8:43:d0:0e:8d:b5:f3:af:e7:bb:fe:a9:85:a9:e7:53:
0c:38:9c:16:b0:7d:d2:85:f3:45:ea:c9:45:93:81:66:91:cd:
6b:08:30:e8:37:de:99:b6:c6:b1:2f:7c:b9:2c:70:f5:d4:09:
f2:7b:d6:85:77:dd:61:3f:f9:63:d2:5e:5e:c3:57:dc:73:3f:
ea:41:8b:ff:12:1c:e0:6d:84:b6:88:99:ff:41:ec:a2:2a:a2:
dc:52:dd:61:fc:fb:17:b6:a7:01:a0:b4:3f:c2:6a:d9:e8:15:
46:6e:02:97:74:a2:8a:7a:92:db:2b:0d:3f:b9:7d:02:7f:15:
fc:24:1a:23:76:b4:00:00:37:08:9c:69:19:e6:af:e6:2a:73:
42:70:0d:29:97:bb:3d:b2:5c:0f:a8:2b:34:24:20:80:4f:c8:
83:e9:12:e2:d0:10:e1:3e:fc:84:3a:0f:e1:2c:bc:06:91:5a:
82:be:ef:42:41:3d:25:2f:7d:4d:1a:80:82:2f:c8:d8:2a:39:
45:1c:4e:9e:87:6e:6b:27:a5:d0:a0:f7:6a:49:83:eb:d9:8c:
a8:ee:0a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:28:59 2025 by rpki-client