Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
File: TtA31O4-XScGWtgDVlgqL9wrSI0.mft (raw, json)
Hash identifier: bL/+aDX/jgCabEohVYlnp4kWXQlUVU5FMfZG1ebRSws=
Subject key identifier: D1:C8:C1:2B:67:9C:2A:1A:D3:E1:C7:3B:50:E7:95:2F:B0:CD:F4:EE
Authority key identifier: 4E:D0:37:D4:EE:3E:5D:27:06:5A:D8:03:56:58:2A:2F:DC:2B:48:8D
Certificate issuer: /CN=4ed037d4ee3e5d27065ad80356582a2fdc2b488d
Certificate serial: 019A4DE2072248322DFB29C8D898171CFB64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
Manifest number: 108A
Signing time: Tue 04 Nov 2025 08:00:49 +0000
Manifest this update: Tue 04 Nov 2025 08:00:49 +0000
Manifest next update: Wed 05 Nov 2025 08:00:49 +0000
Files and hashes: 1: TtA31O4-XScGWtgDVlgqL9wrSI0.crl (hash: knegy1JnbqzAYckvMzgq4FChnZ9UE6Iayuqj5ncHxvE=)
2: eOJpQF5FNoppqB79NhjuknNPvas.roa (hash: 0TneR6h3XAtyeO7uLkVkGQTYXZHCJ04//nJtpw2jBn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:07:22:48:32:2d:fb:29:c8:d8:98:17:1c:fb:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed037d4ee3e5d27065ad80356582a2fdc2b488d
Validity
Not Before: Nov 4 08:00:49 2025 GMT
Not After : Nov 5 08:00:49 2025 GMT
Subject: CN=d1c8c12b679c2a1ad3e1c73b50e7952fb0cdf4ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:56:f9:38:de:ad:5f:49:b5:7d:5a:53:02:74:
e6:f7:87:c9:ca:a6:a6:7e:45:b4:1a:a7:34:0a:f9:
f4:70:9b:d9:c4:c5:e4:c7:7c:16:24:ba:6f:95:d0:
ea:0b:10:61:c1:57:19:0e:60:b8:52:75:23:e7:dd:
0d:f5:29:91:df:4f:b2:a4:c6:e5:c9:4f:2c:b7:9a:
db:87:35:83:96:e4:42:a5:9d:37:62:3d:6e:7e:d1:
84:15:ea:15:36:d1:83:31:81:31:ab:98:f6:3e:d6:
bd:f5:99:67:bb:f5:d7:d9:06:4d:c5:19:9e:7a:d7:
4c:41:b5:e0:98:ff:cb:24:9d:03:aa:9a:ea:f5:69:
0f:1b:77:4e:98:a0:21:e3:34:79:25:8c:8f:1f:47:
68:f9:70:d0:fc:5a:61:ca:86:25:dc:95:3d:93:1d:
fc:e7:e9:13:8c:74:2f:b5:94:0f:df:cc:84:d8:91:
e6:b4:8c:30:30:51:4d:56:78:92:b3:45:12:96:6f:
37:bf:80:33:4e:d2:c1:15:e1:fd:e1:5f:25:d0:25:
9e:77:72:ab:66:2e:a8:cc:07:fa:a2:41:60:fa:87:
5b:99:05:74:da:71:d9:8a:7a:b3:e3:4a:9d:b8:88:
7f:eb:d1:b5:8c:eb:18:12:e9:cc:95:8c:03:8d:1f:
db:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C8:C1:2B:67:9C:2A:1A:D3:E1:C7:3B:50:E7:95:2F:B0:CD:F4:EE
X509v3 Authority Key Identifier:
keyid:4E:D0:37:D4:EE:3E:5D:27:06:5A:D8:03:56:58:2A:2F:DC:2B:48:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:e2:0b:d3:a2:7f:6f:20:dd:0f:13:f6:f1:3c:d0:fc:61:e3:
80:46:f7:51:62:de:62:b8:56:e8:db:54:5b:b6:cf:ba:d7:92:
ba:82:a5:04:a0:95:bb:4f:30:ca:fd:ef:70:57:0f:9a:fb:91:
bf:62:79:e8:5d:11:f5:1f:dd:fd:75:e9:91:e0:f0:40:b1:3a:
74:23:f5:c5:e6:e4:95:5e:ec:98:3f:34:b1:3a:9d:5f:d9:75:
f7:64:a4:51:52:ef:69:22:4b:8c:23:b6:c4:3d:8c:e7:59:f7:
1a:7e:62:4b:18:d3:b2:30:bb:43:45:da:af:5c:38:1b:64:36:
20:7d:0a:26:59:86:d4:6a:26:84:20:b3:4c:56:f4:24:cb:e9:
2a:e1:b0:f3:90:c2:95:bb:4e:1b:3d:89:95:13:5d:8c:d5:e1:
81:c8:aa:e9:bc:16:b3:a4:47:46:7e:70:49:35:47:14:71:96:
3c:76:ea:06:62:4f:cc:77:9b:50:e5:c9:15:68:18:75:7a:02:
ec:cd:92:2a:33:e2:1f:2d:54:ca:41:3d:e8:1d:24:0b:e8:68:
59:9e:a4:b9:fb:fe:f6:91:cb:3d:12:e2:d0:0b:19:67:04:be:
ca:69:9b:ab:55:9a:8f:d8:a7:0e:e3:f9:1f:38:37:38:a2:cd:
8c:9f:ba:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:15:25 2025 by rpki-client