Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.mft
File: ttaENqdjOfZxRBz71QrUAdPAD_8.mft (raw, json)
Hash identifier: giCKrRZx94KtOSD9rLcpVgpM9/eMJHNIsidN4wDha14=
Subject key identifier: 72:56:A1:B6:8D:A7:87:6A:79:C3:AB:17:9B:4C:1C:38:61:3C:93:8D
Authority key identifier: B6:D6:84:36:A7:63:39:F6:71:44:1C:FB:D5:0A:D4:01:D3:C0:0F:FF
Certificate issuer: /CN=b6d68436a76339f671441cfbd50ad401d3c00fff
Certificate serial: 0199FCC6A460746AFB908C853DD44827ECE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ttaENqdjOfZxRBz71QrUAdPAD_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.mft
Manifest number: 144D
Signing time: Sun 19 Oct 2025 14:01:40 +0000
Manifest this update: Sun 19 Oct 2025 14:01:40 +0000
Manifest next update: Mon 20 Oct 2025 14:01:40 +0000
Files and hashes: 1: HROKUTUR5gMY3n6zglHSVCbZS_I.roa (hash: w0BOZ7icboJC4/TfINzPR6MRHeR0gZCuXliuxuy25YQ=)
2: ttaENqdjOfZxRBz71QrUAdPAD_8.crl (hash: f8ewdsgW2LSqqWdc55M+c2rRa9sozLnKwiypIzhjzow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ttaENqdjOfZxRBz71QrUAdPAD_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:a4:60:74:6a:fb:90:8c:85:3d:d4:48:27:ec:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6d68436a76339f671441cfbd50ad401d3c00fff
Validity
Not Before: Oct 19 14:01:40 2025 GMT
Not After : Oct 20 14:01:40 2025 GMT
Subject: CN=7256a1b68da7876a79c3ab179b4c1c38613c938d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:95:29:82:27:e8:b3:ae:b6:3a:2d:6f:2e:a2:
c2:a5:9c:3a:58:b1:bc:71:c9:fe:39:e8:42:eb:a5:
e1:3e:0d:ec:8a:3c:40:78:90:c3:d1:4d:15:e6:91:
c6:fe:06:b2:7d:38:0e:c2:f7:c4:b5:d7:3b:de:3e:
90:90:cc:67:61:c7:81:1a:9a:5b:e5:bf:e2:a3:be:
7b:e0:fe:4d:1c:49:94:61:80:bd:79:90:71:8f:48:
d9:68:56:ec:f3:fa:6d:b7:14:b8:b9:38:c7:ca:32:
20:6c:03:b2:1f:57:de:ec:a6:7d:ee:64:0f:24:0a:
99:1e:d2:3b:0c:54:85:f6:02:56:72:d9:02:c3:21:
c7:57:00:51:2b:ee:58:b8:2a:b5:a8:3d:16:b9:7e:
38:08:8f:bb:08:ad:0f:48:eb:de:b2:4f:76:95:74:
80:17:47:68:cf:9e:5b:16:41:2d:5b:bf:1e:60:f3:
e1:c1:fe:74:98:3c:f6:9e:49:a2:07:35:6b:db:e3:
b0:21:3c:98:f6:e1:80:11:6d:b4:5f:f7:39:2b:68:
7f:10:32:3b:a6:f4:ae:e4:c7:b5:19:9c:1d:21:f0:
bc:58:63:2c:43:42:fe:42:cf:f8:70:b8:06:41:da:
18:5b:3a:33:1f:e5:cb:88:f3:a1:9a:cb:79:c7:a1:
24:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:56:A1:B6:8D:A7:87:6A:79:C3:AB:17:9B:4C:1C:38:61:3C:93:8D
X509v3 Authority Key Identifier:
keyid:B6:D6:84:36:A7:63:39:F6:71:44:1C:FB:D5:0A:D4:01:D3:C0:0F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttaENqdjOfZxRBz71QrUAdPAD_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:1c:01:c3:a3:41:5c:b2:7b:cd:f8:e4:2d:2f:b6:c2:c1:83:
9b:f3:1e:a1:8f:50:63:da:18:8b:a9:c6:80:3d:47:a5:bb:2b:
64:51:23:ae:fa:85:85:39:ab:0e:4a:f2:e7:de:74:48:ef:7c:
fe:4c:ba:00:db:96:df:43:45:d6:4a:43:5f:fe:45:8f:b8:6d:
85:8f:c4:44:37:b9:0f:cb:80:39:6f:e8:4b:c3:b5:3b:1d:fb:
65:1c:84:b4:4b:c6:33:18:ae:30:92:12:76:db:46:0f:d7:36:
82:a0:c3:8c:52:66:dc:fc:84:dc:e6:05:ea:3f:d4:9f:1a:13:
8d:6a:6b:9b:f7:d0:c6:bb:5a:c6:bb:88:c2:25:6e:4c:c7:2a:
db:45:ce:5c:74:fd:e5:5a:30:e0:80:a0:00:59:ba:3d:14:1b:
34:ed:28:54:73:7e:4a:74:dc:25:58:f0:87:38:a0:82:64:2f:
ca:e0:7c:44:62:bf:c3:00:d8:1c:76:ca:79:91:b2:de:4b:77:
5d:d2:13:ba:7a:af:4b:1f:9c:a7:1a:3e:31:8f:6e:e6:13:7c:
c2:aa:18:a9:78:d1:09:e1:f7:4a:0c:3d:62:75:61:e0:51:48:
69:5a:39:fc:44:bb:da:71:db:ea:29:24:98:76:d7:af:e4:e4:
ac:fe:a3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:45 2025 by rpki-client