Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.mft
File: tTZGbQNoUuL3N2reE4BGFDuZTMM.mft (raw, json)
Hash identifier: RN7fh5DPBk2deGywbdU8WC0IHMBHVo/nVtbmE/KjLHU=
Subject key identifier: 46:8F:65:F5:39:31:60:C8:48:D5:07:6A:E9:11:DC:48:AF:78:A7:06
Authority key identifier: B5:36:46:6D:03:68:52:E2:F7:37:6A:DE:13:80:46:14:3B:99:4C:C3
Certificate issuer: /CN=b536466d036852e2f7376ade138046143b994cc3
Certificate serial: 019A500746E533C92ABAC7697F5FE34A0E1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTZGbQNoUuL3N2reE4BGFDuZTMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 18:00:45 +0000
Manifest this update: Tue 04 Nov 2025 18:00:45 +0000
Manifest next update: Wed 05 Nov 2025 18:00:45 +0000
Files and hashes: 1: 4dgJmFIjsrGv5rSLSqks3SszRsQ.roa (hash: Sg9Vz95hfxUFPzxyRHpzX8FvIho0lOoY/A6mHLZCWkE=)
2: tTZGbQNoUuL3N2reE4BGFDuZTMM.crl (hash: +G1HiPL2WSY+mR3+u8Xn6jIvPQN6RFS/exjbdygFxfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTZGbQNoUuL3N2reE4BGFDuZTMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:46:e5:33:c9:2a:ba:c7:69:7f:5f:e3:4a:0e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b536466d036852e2f7376ade138046143b994cc3
Validity
Not Before: Nov 4 18:00:45 2025 GMT
Not After : Nov 5 18:00:45 2025 GMT
Subject: CN=468f65f5393160c848d5076ae911dc48af78a706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:31:df:76:27:8f:39:12:82:6d:58:d1:13:e7:
be:49:00:8e:59:ad:d3:e6:21:37:b5:5d:55:6a:ad:
5e:bf:92:b5:b3:a1:b7:f5:e7:ba:6d:c4:86:53:67:
17:ee:bf:3f:10:9a:a1:b9:bc:ae:d9:fc:99:e3:b3:
ac:c6:5c:aa:d2:78:9c:2a:30:10:bc:27:00:b9:3c:
1f:07:02:6d:ff:aa:a5:f6:fe:6a:50:86:05:4c:71:
19:92:dc:70:2b:8a:e5:da:f0:55:bc:92:6e:d3:66:
bf:37:0c:3b:78:04:54:30:42:2b:d7:19:41:44:0f:
ce:ec:e9:7d:d1:3a:80:09:0c:15:b9:9d:86:c7:36:
ef:ff:67:59:05:82:23:9f:56:dc:26:4e:59:91:14:
d7:d1:da:65:b9:96:65:14:b0:92:f6:0c:9d:b8:92:
d8:d9:e0:5c:f7:d4:a9:31:6d:c8:01:f5:11:87:b0:
b9:88:d6:5d:1d:ce:b3:79:64:e2:cc:43:7a:bf:a9:
e7:01:a8:6d:e1:d4:5d:a7:73:ec:29:f0:7f:c0:f7:
02:65:ef:5e:37:24:7e:2b:d8:4c:00:64:a1:2e:80:
18:45:a4:42:7a:2f:62:c2:3a:05:64:75:70:08:22:
70:94:13:c7:bc:49:19:09:72:80:9c:e1:8a:02:cc:
4f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:8F:65:F5:39:31:60:C8:48:D5:07:6A:E9:11:DC:48:AF:78:A7:06
X509v3 Authority Key Identifier:
keyid:B5:36:46:6D:03:68:52:E2:F7:37:6A:DE:13:80:46:14:3B:99:4C:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTZGbQNoUuL3N2reE4BGFDuZTMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:34:de:b0:81:0a:de:7f:f7:53:e7:3c:2f:37:20:21:9b:c5:
78:15:10:2f:51:0f:71:f5:d1:f6:79:c7:ee:27:09:16:9a:23:
b2:d2:25:b5:7f:62:bb:e8:07:6f:84:30:1b:8f:85:bc:0b:59:
b2:09:3c:de:ab:69:ee:bd:f0:d5:b4:ce:cf:4a:be:43:12:6f:
69:47:ca:d5:42:ea:87:38:b5:71:a7:a9:ab:a2:9b:84:03:b0:
b2:1b:bf:8c:24:cc:d9:e3:f8:04:f8:be:7d:e4:2d:2f:6d:a6:
d0:60:14:ca:59:50:4b:99:7b:00:f1:10:ee:d7:b2:01:d5:73:
d6:e7:1b:d1:82:86:e3:ae:22:1e:35:54:43:76:ff:2c:c2:cf:
42:da:e3:25:d3:20:fc:3e:d8:5c:fe:de:bb:86:cb:ee:41:3f:
6b:63:ab:72:98:fe:dd:16:38:48:5c:61:a8:c5:71:2c:3e:16:
11:c0:1a:3e:18:81:cd:a9:de:94:c5:1f:1c:d2:4e:e9:08:f7:
dd:30:b9:9c:c6:58:a3:36:ad:b7:89:cd:ad:8d:3d:b2:98:28:
65:8c:c7:40:38:99:14:07:13:0c:ab:0b:65:92:af:59:a4:e8:
b8:92:b1:9a:c2:9d:d7:2a:0b:88:34:22:7c:0e:1a:bb:65:8e:
dd:ed:77:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:20:38 2025 by rpki-client