Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
File: TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft (raw, json)
Hash identifier: hcPeRfckLTV5CO6j5WwTKPWE6TuwIjKjokX2a0iBFKE=
Subject key identifier: 5D:32:7A:1A:7D:91:9C:3D:89:7D:AD:25:3C:5F:DE:48:CB:51:C1:46
Authority key identifier: 4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
Certificate issuer: /CN=4d3f54f304e6b851608c293978b16ba51ac0350e
Certificate serial: 019A533ED651345BFED50B1D1B80C4EC2E1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 09:00:18 +0000
Manifest this update: Wed 05 Nov 2025 09:00:18 +0000
Manifest next update: Thu 06 Nov 2025 09:00:18 +0000
Files and hashes: 1: 2-8ODfbSISRCVrFLypE1beop4mI.roa (hash: CTu3Z/KQAufmJs+pAxP0V5GvviRUTQPwl9gEk4hUm6E=)
2: TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl (hash: VR2eqUhqfWxKc8yW2LbKGjMfGcx+ky/v9/l47x3bi10=)
3: xOYkGw3SqmDNjUBUXBvZW0U-4J4.roa (hash: CMrEVMiwQAaT7qSr6cVaZ45q/VR6zzPcJBOroZoc7n8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3e:d6:51:34:5b:fe:d5:0b:1d:1b:80:c4:ec:2e:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3f54f304e6b851608c293978b16ba51ac0350e
Validity
Not Before: Nov 5 09:00:18 2025 GMT
Not After : Nov 6 09:00:18 2025 GMT
Subject: CN=5d327a1a7d919c3d897dad253c5fde48cb51c146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f1:fa:9a:f8:8e:d2:d0:c6:5b:ce:5d:27:34:
13:d1:67:84:4e:02:ec:04:ee:28:fd:5c:c5:50:8d:
22:39:98:d0:82:09:0e:58:aa:03:63:bd:33:7a:43:
6c:9a:84:bd:0e:c2:9f:c3:6a:aa:a0:73:cd:ae:30:
d6:8f:7c:af:14:ad:a3:91:88:de:29:b7:8c:67:a0:
43:92:ff:61:7b:7c:07:2b:fc:66:d0:a0:39:32:42:
b6:22:40:b6:e8:83:9e:5e:c0:6f:b8:03:56:e7:65:
4f:da:0e:93:2a:55:9d:2a:a4:0d:1b:2a:a0:2a:7d:
e6:10:0a:c1:15:2d:93:27:76:d0:25:31:1b:72:92:
a2:3a:bd:38:70:a1:d4:62:ad:3e:e2:fb:d7:28:96:
d8:57:64:ff:61:d2:12:c1:af:86:02:a2:02:05:1d:
63:9e:a3:4f:cf:91:4c:8c:2a:7f:16:b8:8a:7e:d9:
b7:16:45:e7:1b:54:5a:8f:f2:ba:52:90:30:b4:c3:
14:cb:db:ef:da:b9:1a:b0:9e:96:d5:6b:3f:e9:1a:
b9:56:1a:fc:04:c9:b7:da:7b:cb:0e:48:4e:9f:62:
ee:e2:d9:4c:66:d3:0d:ec:54:41:30:7e:4a:cb:e9:
2d:ce:5c:3e:56:dd:3f:02:57:8b:40:25:aa:ca:29:
7e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:32:7A:1A:7D:91:9C:3D:89:7D:AD:25:3C:5F:DE:48:CB:51:C1:46
X509v3 Authority Key Identifier:
keyid:4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:4b:c7:af:7f:00:5b:07:62:53:17:58:d8:3e:5e:62:7c:f3:
39:7d:5f:1e:f0:55:1c:42:e2:e5:36:ef:22:9c:8f:e0:37:43:
04:30:32:91:b7:90:91:f9:1c:94:d3:d2:8d:ce:c3:e4:c1:f0:
3c:0e:1f:59:aa:96:2a:3b:63:4b:60:5c:d8:d7:9e:bd:11:5f:
6c:16:3e:24:cc:16:d6:51:cd:49:3f:e5:94:06:aa:b9:a2:53:
ad:0e:b8:ca:ca:0d:83:c2:d3:db:fb:87:a2:b1:ff:c5:3b:cb:
b7:36:c6:88:c9:c9:4e:a3:3f:9c:9e:ad:81:fa:70:a9:45:3b:
a5:11:65:3d:28:01:2a:7c:02:b9:74:05:58:5b:bb:6f:05:f5:
51:74:8a:96:dc:31:0a:9e:f8:90:e0:a8:aa:00:f7:f4:ba:e2:
1f:a0:29:97:ab:fe:48:e9:17:8b:3e:d1:55:a4:16:9a:d8:73:
52:0d:e5:b5:c0:2b:7d:ab:dc:8b:5a:74:5e:3b:49:8f:df:60:
43:31:22:c2:a1:d5:0b:20:10:58:6d:44:5a:44:cd:79:96:01:
e4:b9:89:40:52:d0:ba:4c:85:80:53:f4:e1:bf:e4:a4:3f:f4:
43:25:6c:4d:6d:ec:6f:8a:09:6e:7f:b3:02:07:e0:f0:e9:ae:
ab:4c:8c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:34:14 2025 by rpki-client