Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft
File: Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft (raw, json)
Hash identifier: T4ONAC9gr59K8USDIzHqw0vMRovotz1ss4pU4Hdcip8=
Subject key identifier: 0D:F1:8A:AF:D1:B8:D5:84:28:42:E2:58:0A:22:02:CD:BA:88:8B:EF
Authority key identifier: 4E:DC:68:9B:B2:2D:09:47:55:74:F4:1C:0E:5D:97:C0:45:93:09:28
Certificate issuer: /CN=4edc689bb22d09475574f41c0e5d97c045930928
Certificate serial: 019A4F2B871CFCF4AB10F235023A166A7D94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ttxom7ItCUdVdPQcDl2XwEWTCSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 14:00:43 +0000
Manifest this update: Tue 04 Nov 2025 14:00:43 +0000
Manifest next update: Wed 05 Nov 2025 14:00:43 +0000
Files and hashes: 1: Ttxom7ItCUdVdPQcDl2XwEWTCSg.crl (hash: SY6BAqrjSZSkPI79erzxTAGAEDel2kA5oG14Nj6FuXs=)
2: zj8x9LPhXlzEHQ9u1uzhgnhO97g.roa (hash: e3RgXnvTwkUusOiV6XnE/u7ua1aPibK0pF3ch7NYWK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ttxom7ItCUdVdPQcDl2XwEWTCSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:87:1c:fc:f4:ab:10:f2:35:02:3a:16:6a:7d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4edc689bb22d09475574f41c0e5d97c045930928
Validity
Not Before: Nov 4 14:00:43 2025 GMT
Not After : Nov 5 14:00:43 2025 GMT
Subject: CN=0df18aafd1b8d5842842e2580a2202cdba888bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:15:03:f1:db:2b:bd:e4:ed:6e:19:b2:a5:37:
b9:02:52:30:bd:c3:d2:fc:c1:16:a2:57:90:7a:3c:
ac:6e:ec:ad:d4:ab:9f:52:04:8a:7c:75:01:6f:a1:
22:11:53:6b:73:9c:2d:76:93:f6:c8:09:d1:23:e2:
9e:72:8b:46:12:0e:10:f4:36:4c:21:d5:34:f3:ad:
1e:6c:cc:55:6b:05:1a:71:03:58:49:54:af:46:ca:
b9:fe:2d:4f:fd:c8:fa:f8:3a:2d:bd:db:68:a9:58:
bf:99:f8:2e:c4:c2:e2:6d:1c:f8:d2:98:97:d9:b7:
61:8c:a1:7c:0a:d8:e8:78:1d:30:2c:6a:73:05:99:
bf:8d:ed:7d:64:37:f1:95:33:cd:cb:f9:ca:da:e6:
84:1f:fc:5c:1d:47:2d:3e:aa:59:9a:21:fd:2d:99:
67:03:1f:9b:8e:5f:94:69:63:5d:2e:23:76:44:90:
49:f2:76:76:b5:fa:e1:39:1b:58:43:4a:d6:c3:e9:
33:f4:09:34:42:5e:d1:48:a2:51:41:5a:ee:41:e3:
cb:a2:46:c4:0b:56:34:d4:ed:41:89:05:3b:44:2d:
98:7b:4f:f9:2f:ea:5f:cf:16:7a:a7:dd:cc:b8:98:
92:d7:24:5e:ba:b9:76:50:7b:ed:98:ad:8a:9f:83:
1f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F1:8A:AF:D1:B8:D5:84:28:42:E2:58:0A:22:02:CD:BA:88:8B:EF
X509v3 Authority Key Identifier:
keyid:4E:DC:68:9B:B2:2D:09:47:55:74:F4:1C:0E:5D:97:C0:45:93:09:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ttxom7ItCUdVdPQcDl2XwEWTCSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:19:c1:e6:79:30:7f:1d:12:fa:3d:a7:9a:cc:f3:f4:08:d4:
04:82:76:e9:71:ba:5f:3e:dd:29:17:a2:1c:03:64:6b:14:a0:
d5:78:5e:93:10:59:5a:06:d4:73:d5:42:9a:91:d2:18:01:06:
eb:bb:d6:1b:ca:fb:08:30:ab:13:13:7a:00:f5:ce:d5:e2:a7:
a8:85:7e:f0:43:69:ac:e2:a4:1e:05:a4:81:b2:e4:77:b6:86:
6f:ed:55:a1:84:de:61:4b:5b:0e:51:c7:7a:21:ad:9f:2c:89:
ff:b5:d1:6c:2b:45:b7:a5:56:f3:2d:08:33:c1:b0:f5:40:19:
22:9a:e0:01:e2:80:55:aa:34:a2:29:e0:4f:36:e6:7c:d9:ad:
2f:ea:77:3a:57:56:2b:29:6d:30:ac:48:85:a4:0c:0e:96:d7:
d0:06:5f:b8:0b:fa:1d:94:01:44:48:2b:92:de:6c:ac:d2:fd:
c4:84:85:29:0b:69:d0:4d:7c:b3:51:e8:7e:3a:43:86:4d:a2:
10:87:c2:fc:68:51:d1:c2:7e:ac:1a:ae:51:4e:ac:f8:c7:f1:
4a:13:f7:c1:4e:9b:05:2c:ba:05:58:26:ff:33:7c:52:e8:de:
19:df:c1:4d:ac:02:22:2c:04:92:5d:cf:8f:fd:73:41:89:85:
df:e9:1f:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPK4cc/PSrEPI1AjoWan2UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZGM2ODliYjIyZDA5NDc1NTc0ZjQxYzBlNWQ5N2MwNDU5
MzA5MjgwHhcNMjUxMTA0MTQwMDQzWhcNMjUxMTA1MTQwMDQzWjAzMTEwLwYDVQQD
EygwZGYxOGFhZmQxYjhkNTg0Mjg0MmUyNTgwYTIyMDJjZGJhODg4YmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhUD8dsrveTtbhmypTe5AlIwvcPS
/MEWoleQejysbuyt1KufUgSKfHUBb6EiEVNrc5wtdpP2yAnRI+KecotGEg4Q9DZM
IdU0860ebMxVawUacQNYSVSvRsq5/i1P/cj6+DotvdtoqVi/mfguxMLibRz40piX
2bdhjKF8CtjoeB0wLGpzBZm/je19ZDfxlTPNy/nK2uaEH/xcHUctPqpZmiH9LZln
Ax+bjl+UaWNdLiN2RJBJ8nZ2tfrhORtYQ0rWw+kz9Ak0Ql7RSKJRQVruQePLokbE
C1Y01O1BiQU7RC2Ye0/5L+pfzxZ6p93MuJiS1yReurl2UHvtmK2Kn4MfJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA3xiq/RuNWEKELiWAoiAs26iIvvMB8GA1UdIwQY
MBaAFE7caJuyLQlHVXT0HA5dl8BFkwkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHR4b203SXRDVWRWZFBRY0RsMlh3RVdUQ1NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi83YmJiOTEtYzViMC00ZDBiLTkyNWIt
MDliZTU5ODlkMGFjLzEvVHR4b203SXRDVWRWZFBRY0RsMlh3RVdUQ1NnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi83YmJiOTEtYzViMC00ZDBiLTkyNWItMDliZTU5ODlkMGFj
LzEvVHR4b203SXRDVWRWZFBRY0RsMlh3RVdUQ1NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANhnB5nkw
fx0S+j2nmszz9AjUBIJ26XG6Xz7dKReiHANkaxSg1XhekxBZWgbUc9VCmpHSGAEG
67vWG8r7CDCrExN6APXO1eKnqIV+8ENprOKkHgWkgbLkd7aGb+1VoYTeYUtbDlHH
eiGtnyyJ/7XRbCtFt6VW8y0IM8Gw9UAZIprgAeKAVao0oingTzbmfNmtL+p3OldW
KyltMKxIhaQMDpbX0AZfuAv6HZQBREgrkt5srNL9xISFKQtp0E18s1HofjpDhk2i
EIfC/GhR0cJ+rBquUU6s+MfxShP3wU6bBSy6BVgm/zN8UujeGd/BTawCIiwEkl3P
j/1zQYmF3+kf6Q==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:25:14 2025 by rpki-client