Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
File: TtMkzMCQuDGCmReur3ODTwg0Ss4.mft (raw, json)
Hash identifier: hoUobQDoIPJ5iAsqWJ2VVfZw051N4M7BstUWCoUMef8=
Subject key identifier: 30:C3:DA:72:66:C4:BB:5A:6D:C4:3F:DC:F8:89:A7:C0:50:D5:C0:F6
Authority key identifier: 4E:D3:24:CC:C0:90:B8:31:82:99:17:AE:AF:73:83:4F:08:34:4A:CE
Certificate issuer: /CN=4ed324ccc090b831829917aeaf73834f08344ace
Certificate serial: 019A5375B9BF08F2FF277F57165B9C08EF35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
Manifest number: 021F
Signing time: Wed 05 Nov 2025 10:00:15 +0000
Manifest this update: Wed 05 Nov 2025 10:00:15 +0000
Manifest next update: Thu 06 Nov 2025 10:00:15 +0000
Files and hashes: 1: LpPDa_hMKwPOheYcHrNv5BDTWog.roa (hash: 2CoZfLFeobkKqc9qZWTYrYW94wPP5u5Zmz2xUC1WQvs=)
2: TtMkzMCQuDGCmReur3ODTwg0Ss4.crl (hash: V5JQYgC5s/JBEYdF1o3hwWOrmOlPZuGoWHQX4V1VtOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:75:b9:bf:08:f2:ff:27:7f:57:16:5b:9c:08:ef:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed324ccc090b831829917aeaf73834f08344ace
Validity
Not Before: Nov 5 10:00:15 2025 GMT
Not After : Nov 6 10:00:15 2025 GMT
Subject: CN=30c3da7266c4bb5a6dc43fdcf889a7c050d5c0f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e2:a2:72:01:a1:6e:71:68:0e:3d:b4:5b:31:
e5:c1:80:78:5a:fb:7f:24:70:88:54:f4:64:f2:b6:
98:6e:d6:f5:dd:c1:7a:ff:69:3b:5e:20:f4:fb:00:
66:0b:69:89:6e:0b:e0:79:d9:04:26:b6:06:4a:dd:
da:a4:69:47:41:5b:a0:00:48:15:dc:dc:90:04:6f:
66:6a:cc:d6:08:df:de:10:34:bb:93:57:b0:2c:32:
b9:9e:8c:67:e7:8a:03:05:a4:c5:a3:ec:61:d7:fd:
f5:52:ef:f2:57:2f:dd:91:f5:85:0d:f2:07:4b:5f:
8b:c4:e1:5b:08:ad:dd:cc:27:10:01:ef:8f:48:c8:
16:31:82:6f:76:4d:97:c7:e9:5b:13:4e:be:c6:28:
6d:c5:2f:4c:c3:2c:8e:43:be:cf:71:cb:e1:e8:b9:
15:f0:73:19:af:f6:5a:c1:ad:2a:41:de:ba:16:27:
bf:94:85:9a:3c:22:62:ab:c4:48:b5:ad:1c:31:23:
61:71:e1:5f:1a:7f:10:8f:3d:f9:e3:86:11:86:65:
ef:30:e6:35:dd:fc:94:c8:df:c0:0d:07:cc:74:95:
e1:90:cc:1c:6c:5f:1f:45:b1:b9:9c:54:33:16:94:
5e:c7:ff:03:f5:be:99:70:07:a5:71:1d:e4:88:40:
58:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C3:DA:72:66:C4:BB:5A:6D:C4:3F:DC:F8:89:A7:C0:50:D5:C0:F6
X509v3 Authority Key Identifier:
keyid:4E:D3:24:CC:C0:90:B8:31:82:99:17:AE:AF:73:83:4F:08:34:4A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:f7:a4:f7:39:9f:8f:3c:4b:c5:5a:26:39:0d:14:99:a6:e6:
f8:52:8e:74:23:cd:93:5b:01:cd:7d:1e:46:95:05:c5:ea:ea:
09:40:3b:db:4c:6c:82:90:b0:bd:85:e8:07:43:ae:47:eb:06:
52:ea:ad:f6:97:1c:9a:20:f1:0c:42:f3:1b:cc:bb:68:88:de:
a0:18:a1:53:eb:80:71:e9:f6:16:b8:a5:50:c7:0f:1a:03:05:
0a:d4:d5:61:c2:14:99:3e:70:01:dc:b5:7b:bb:4b:f8:f8:ad:
64:81:ae:02:3b:1b:27:d4:87:22:4b:c1:f8:55:06:96:00:a6:
7a:a8:9e:7d:01:83:c1:1c:7d:a3:92:ae:29:25:23:6c:a1:a8:
8c:0a:07:b1:d1:51:5d:2f:a4:9f:ef:6d:3b:bf:31:88:c7:59:
45:9c:c3:79:e8:5f:57:77:76:18:d8:aa:dd:0a:44:83:b8:eb:
4c:2c:71:50:13:23:8b:d9:29:38:3b:eb:1d:c5:24:fc:67:31:
74:74:39:b3:1a:1b:04:c2:4d:25:ab:40:09:96:5d:1c:d5:75:
c4:9e:9f:95:24:73:51:70:aa:53:fd:5d:69:e5:7a:ec:49:ad:
30:6c:ee:42:41:92:51:22:06:58:62:df:ee:ff:69:8b:89:6a:
9a:61:0c:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTdbm/CPL/J39XFlucCO81MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZDMyNGNjYzA5MGI4MzE4Mjk5MTdhZWFmNzM4MzRmMDgz
NDRhY2UwHhcNMjUxMTA1MTAwMDE1WhcNMjUxMTA2MTAwMDE1WjAzMTEwLwYDVQQD
EygzMGMzZGE3MjY2YzRiYjVhNmRjNDNmZGNmODg5YTdjMDUwZDVjMGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuKicgGhbnFoDj20WzHlwYB4Wvt/
JHCIVPRk8raYbtb13cF6/2k7XiD0+wBmC2mJbgvgedkEJrYGSt3apGlHQVugAEgV
3NyQBG9maszWCN/eEDS7k1ewLDK5noxn54oDBaTFo+xh1/31Uu/yVy/dkfWFDfIH
S1+LxOFbCK3dzCcQAe+PSMgWMYJvdk2Xx+lbE06+xihtxS9MwyyOQ77Pccvh6LkV
8HMZr/Zawa0qQd66Fie/lIWaPCJiq8RIta0cMSNhceFfGn8Qjz3544YRhmXvMOY1
3fyUyN/ADQfMdJXhkMwcbF8fRbG5nFQzFpRex/8D9b6ZcAelcR3kiEBYPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDDD2nJmxLtabcQ/3PiJp8BQ1cD2MB8GA1UdIwQY
MBaAFE7TJMzAkLgxgpkXrq9zg08INErOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHRNa3pNQ1F1REdDbVJldXIzT0RUd2cwU3M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8wMTdjMzctNjFiNi00ZDQwLTg4MWEt
NTNhMDg0MzkwNTI3LzEvVHRNa3pNQ1F1REdDbVJldXIzT0RUd2cwU3M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8wMTdjMzctNjFiNi00ZDQwLTg4MWEtNTNhMDg0MzkwNTI3
LzEvVHRNa3pNQ1F1REdDbVJldXIzT0RUd2cwU3M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF/ek9zmf
jzxLxVomOQ0Umabm+FKOdCPNk1sBzX0eRpUFxerqCUA720xsgpCwvYXoB0OuR+sG
Uuqt9pccmiDxDELzG8y7aIjeoBihU+uAcen2FrilUMcPGgMFCtTVYcIUmT5wAdy1
e7tL+PitZIGuAjsbJ9SHIkvB+FUGlgCmeqiefQGDwRx9o5KuKSUjbKGojAoHsdFR
XS+kn+9tO78xiMdZRZzDeehfV3d2GNiq3QpEg7jrTCxxUBMji9kpODvrHcUk/Gcx
dHQ5sxobBMJNJatACZZdHNV1xJ6flSRzUXCqU/1daeV67EmtMGzuQkGSUSIGWGLf
7v9pi4lqmmEM7Q==
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:22:20 2025 by rpki-client