Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft
File: Tt5MZdc1r3knftFOtsTPVATHiNU.mft (raw, json)
Hash identifier: qM/EJebvvl0Wc9YIJyGQXHilDsTS+y7Denz8jMRbwh8=
Subject key identifier: 90:80:3C:32:8C:27:50:D4:F3:18:3A:8E:D0:2E:80:60:17:49:26:44
Authority key identifier: 4E:DE:4C:65:D7:35:AF:79:27:7E:D1:4E:B6:C4:CF:54:04:C7:88:D5
Certificate issuer: /CN=4ede4c65d735af79277ed14eb6c4cf5404c788d5
Certificate serial: 019A0110BBFEEBED2FBCC5D75AD8CE7B64AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tt5MZdc1r3knftFOtsTPVATHiNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft
Manifest number: 0925
Signing time: Mon 20 Oct 2025 10:01:05 +0000
Manifest this update: Mon 20 Oct 2025 10:01:05 +0000
Manifest next update: Tue 21 Oct 2025 10:01:05 +0000
Files and hashes: 1: CNpxwuWXiobnr753WTcJ-SvZEQU.roa (hash: +W4soYxTO8aYTDMgF940blaVc3sdpMhU9iF5WZMoCzU=)
2: Tt5MZdc1r3knftFOtsTPVATHiNU.crl (hash: ymPPCCtyg42IysOcpgqbHhoMHuCkivL0/cMhWzMiR/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tt5MZdc1r3knftFOtsTPVATHiNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:10:bb:fe:eb:ed:2f:bc:c5:d7:5a:d8:ce:7b:64:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ede4c65d735af79277ed14eb6c4cf5404c788d5
Validity
Not Before: Oct 20 10:01:05 2025 GMT
Not After : Oct 21 10:01:05 2025 GMT
Subject: CN=90803c328c2750d4f3183a8ed02e806017492644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d5:b4:f5:6b:f2:7a:91:f3:90:b9:84:f2:88:
88:da:12:11:45:96:02:17:f7:3b:4a:34:1f:bc:a4:
16:a2:be:39:cb:b1:68:f9:be:52:22:b6:a3:2e:3c:
a9:ae:d6:f3:09:1b:22:e5:87:61:f0:6a:be:b0:ec:
2c:14:73:cb:78:cf:3e:ab:4c:b3:36:b8:12:2f:9c:
42:13:a9:ff:92:a3:14:c8:ec:72:d5:29:1d:cf:fa:
6b:f7:84:7d:29:cf:6f:f7:20:d7:e1:d1:09:a1:9b:
20:33:42:0e:18:77:5c:3e:7e:65:de:4f:1a:6a:d5:
dd:7f:60:46:3b:59:8a:ae:ff:15:59:8d:ec:80:57:
d9:54:57:80:61:27:d6:09:09:5c:0b:8d:1c:dc:5f:
4c:84:00:01:cf:ba:c8:20:21:e3:f9:0d:7f:f9:95:
27:fe:45:47:d3:12:53:60:7e:32:db:56:bf:3b:c9:
52:51:b3:9c:45:61:70:dc:3d:24:85:c0:8b:b8:8e:
18:a9:59:f3:18:6d:af:78:cb:b9:4c:ca:5d:95:9f:
cb:c2:85:d9:a6:b8:4f:5d:1a:c7:83:31:34:34:d2:
a5:6d:30:4d:51:47:69:ce:82:fc:ef:b1:08:91:f4:
d7:fc:12:ff:7b:9b:7f:8d:43:a9:a6:59:75:26:b6:
b0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:80:3C:32:8C:27:50:D4:F3:18:3A:8E:D0:2E:80:60:17:49:26:44
X509v3 Authority Key Identifier:
keyid:4E:DE:4C:65:D7:35:AF:79:27:7E:D1:4E:B6:C4:CF:54:04:C7:88:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tt5MZdc1r3knftFOtsTPVATHiNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:eb:96:05:eb:26:5b:1e:7e:07:61:82:d1:47:48:39:57:26:
27:1c:f2:bf:36:e4:05:8f:51:5b:49:b5:24:54:bd:fb:27:68:
2e:63:4a:38:5c:00:de:b9:b7:5b:a4:59:25:df:a7:b9:d9:4b:
f5:37:a9:76:72:86:b1:8a:c1:cf:f7:39:74:f0:ca:94:24:00:
49:e3:13:3f:1f:69:dd:e7:6e:ac:75:af:10:1d:cc:58:a4:3d:
27:3e:51:4c:43:1b:93:4b:fb:b3:a0:8c:90:4a:0f:10:6b:be:
8c:74:4f:6b:be:21:48:ec:d2:ba:3a:c5:2b:2a:f3:a9:2e:c9:
f2:37:6b:4b:65:c3:75:ca:a8:8e:75:93:d5:b6:e2:7a:fd:9d:
c6:1f:dd:8a:5d:bd:f1:56:24:32:5f:ed:e8:a9:73:e7:99:cf:
b1:38:2e:e6:86:b6:d5:7c:88:b0:bf:56:d8:00:28:38:35:7d:
fe:ff:de:fd:c9:7d:68:8e:b6:8b:9e:fd:92:81:c6:9d:5b:db:
93:76:f7:65:1c:b0:7c:0e:5f:13:24:73:c0:ae:e9:be:ac:fa:
39:52:f8:2c:d9:55:5d:26:dc:52:e0:8b:7f:d8:a2:7a:35:77:
7e:b1:bd:58:7d:72:84:fc:71:16:d5:dc:d6:d3:22:70:dc:d8:
51:6f:78:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:33:28 2025 by rpki-client