Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.mft
File: tTmDGDXIfHUB9sN8tI5gp5WjlLs.mft (raw, json)
Hash identifier: GTS1kKndgM1RACtwrCgxh3gn+OKC7AiYBj/O/VMhY48=
Subject key identifier: 00:61:0D:C0:E7:02:BF:B1:0D:0A:EC:E8:23:A8:BA:52:EE:B4:4B:9D
Authority key identifier: B5:39:83:18:35:C8:7C:75:01:F6:C3:7C:B4:8E:60:A7:95:A3:94:BB
Certificate issuer: /CN=b539831835c87c7501f6c37cb48e60a795a394bb
Certificate serial: 019A4EF50C610A2ABF1CCFE592C0AE1C750F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTmDGDXIfHUB9sN8tI5gp5WjlLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 13:01:13 +0000
Manifest this update: Tue 04 Nov 2025 13:01:13 +0000
Manifest next update: Wed 05 Nov 2025 13:01:13 +0000
Files and hashes: 1: tTmDGDXIfHUB9sN8tI5gp5WjlLs.crl (hash: 0/P+G8qHxiN+tPv8pgwXI8oKozc5uMb6fMmOCSw5Hjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTmDGDXIfHUB9sN8tI5gp5WjlLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:0c:61:0a:2a:bf:1c:cf:e5:92:c0:ae:1c:75:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b539831835c87c7501f6c37cb48e60a795a394bb
Validity
Not Before: Nov 4 13:01:13 2025 GMT
Not After : Nov 5 13:01:13 2025 GMT
Subject: CN=00610dc0e702bfb10d0aece823a8ba52eeb44b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8a:36:fe:c6:99:cd:3f:35:1a:0c:7a:11:21:
c2:30:f6:c5:bd:7b:58:d8:ea:27:12:11:8e:db:0a:
39:20:18:0b:25:0a:07:d6:2c:89:b5:b9:6c:97:19:
a5:e7:e1:6a:d1:b5:9e:2b:f9:8f:43:1c:7b:4c:da:
f5:50:d3:16:fb:c2:72:ae:7c:b5:a3:af:95:00:46:
0d:80:5e:0c:dd:11:45:82:a8:ed:b8:b6:a7:b3:6a:
0b:c0:8e:98:2c:26:e1:7e:c8:04:53:4c:92:35:ff:
7b:3d:40:18:b5:e2:c4:3f:28:45:dc:26:a5:17:19:
94:43:98:ae:90:3b:6c:94:77:bf:4e:65:30:04:74:
4e:80:81:1e:c9:42:a8:c1:23:cd:15:d4:4d:5a:df:
e9:aa:f0:ce:f3:87:22:c9:7b:1c:fd:83:c6:cb:19:
66:d4:fe:bf:0b:11:c0:33:49:78:4c:8e:b7:57:62:
07:15:5c:a5:68:e5:fb:26:7d:3b:17:06:c7:49:e7:
34:1d:bd:67:22:1c:28:07:6d:24:76:89:da:5a:cb:
fc:37:fc:ff:79:31:e3:11:04:d6:5b:8f:53:1c:91:
5f:51:e4:a0:ce:79:a2:05:8d:55:76:38:7f:30:6b:
c5:96:a2:b7:6d:b2:49:cf:68:fa:25:b8:45:ce:0d:
68:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:61:0D:C0:E7:02:BF:B1:0D:0A:EC:E8:23:A8:BA:52:EE:B4:4B:9D
X509v3 Authority Key Identifier:
keyid:B5:39:83:18:35:C8:7C:75:01:F6:C3:7C:B4:8E:60:A7:95:A3:94:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTmDGDXIfHUB9sN8tI5gp5WjlLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c0:40:77:26:89:ac:07:c0:fd:9f:47:2e:81:33:36:9c:e0:
0e:77:90:ce:81:48:00:30:f4:3e:38:76:1d:d7:a8:8f:b5:32:
42:d2:62:35:30:2f:dd:83:25:26:47:87:a4:4f:23:d2:d3:0e:
06:95:91:5f:88:1d:77:e6:c0:31:89:91:0e:c3:8d:45:85:db:
d9:7f:6f:94:f7:ac:d8:e6:99:40:59:78:10:3d:ab:49:4d:4b:
f8:dc:23:da:9a:58:c1:b4:fa:41:3f:4f:56:cb:25:ce:79:80:
48:41:47:4d:6c:aa:4c:32:e3:eb:05:15:61:4f:7d:70:5b:50:
00:c5:1a:ad:ea:b1:c4:d0:bd:28:16:7d:45:38:6d:92:88:78:
75:c4:f9:51:11:74:8a:2c:ce:98:30:f9:da:83:fa:c9:41:8d:
3b:2f:0a:c8:84:b0:23:44:74:c7:d2:5a:11:80:6f:67:91:51:
19:80:d1:2a:6d:eb:ad:06:13:d5:35:69:85:29:40:2e:2d:88:
c7:0d:e4:d1:de:bd:d5:9f:77:b9:b6:65:45:c1:4b:ca:50:9a:
9d:f2:fa:ae:49:cd:9f:21:a1:98:d2:a8:e4:89:af:5c:85:ba:
a0:37:5f:a6:b9:be:b5:72:ed:09:10:6e:4e:08:28:ea:04:26:
b1:d7:f7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:46:18 2025 by rpki-client