Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
File: ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft (raw, json)
Hash identifier: 98cLNU+xf6vkc8Zuo3HiAK3vU+2OgMWcc3rjSQ2/nU4=
Subject key identifier: 3E:A3:F4:72:C1:B0:9F:C3:AE:0C:39:95:C4:05:15:49:BA:4C:1D:21
Authority key identifier: B6:D7:F3:68:FA:1C:F5:B1:AA:AA:76:B0:F1:F2:3C:06:75:0A:84:26
Certificate issuer: /CN=b6d7f368fa1cf5b1aaaa76b0f1f23c06750a8426
Certificate serial: 0199FD349CAA4C2F45288AE1CA17D8A24736
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
Manifest number: 05B8
Signing time: Sun 19 Oct 2025 16:01:47 +0000
Manifest this update: Sun 19 Oct 2025 16:01:47 +0000
Manifest next update: Mon 20 Oct 2025 16:01:47 +0000
Files and hashes: 1: mgO2bfWYu0Z3yfKtycB0eHY39X8.roa (hash: 60DQx4kpFtDfON86MP27ODodoK2c+Xs/qbF18XYACcg=)
2: rg97vUvro1QUCZLNC-zT_PYGVh8.roa (hash: iZBiJSmpj/Q8UocwtFDbOX3xmzAVEyiNjKTvOdI8ZqE=)
3: ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl (hash: tAxDKoj04sc4H2dyjQbzJ8uqyAR5G8JW75C3GtsUmXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:9c:aa:4c:2f:45:28:8a:e1:ca:17:d8:a2:47:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6d7f368fa1cf5b1aaaa76b0f1f23c06750a8426
Validity
Not Before: Oct 19 16:01:47 2025 GMT
Not After : Oct 20 16:01:47 2025 GMT
Subject: CN=3ea3f472c1b09fc3ae0c3995c4051549ba4c1d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:34:68:5c:eb:32:48:5d:c9:68:5e:0f:89:2a:
4b:3b:d1:8c:75:5c:b4:ed:fe:e0:cb:8c:a3:3c:63:
0b:7f:8d:65:7c:ac:58:b9:7b:b3:d1:5f:3f:6d:a3:
f5:97:b0:d1:8e:fa:a2:0a:14:d3:39:8d:23:4f:b8:
12:4d:65:b1:e9:46:20:ac:6b:19:86:97:6f:05:ef:
82:e3:bb:98:39:1d:cc:56:74:22:ef:cf:82:f6:fd:
c9:34:d5:64:ba:91:8b:a0:82:48:6e:eb:fc:43:ac:
76:7b:cc:89:76:1b:bc:d9:38:82:fc:6c:3d:65:27:
22:58:2a:eb:76:b4:25:11:99:7b:2d:2c:d5:1c:6a:
b6:35:4c:38:1a:f7:a3:09:c7:54:fa:8e:9a:3b:3c:
21:3a:5d:0f:64:3b:08:aa:cf:53:e4:41:ea:87:af:
f5:6d:48:a1:a2:7f:65:13:f3:4f:bd:6c:41:72:d8:
1d:30:2f:09:78:60:2b:ca:29:9e:ff:98:45:e1:a9:
80:1f:dc:b8:9e:b4:40:fa:e2:44:90:db:c7:d6:e8:
b8:78:0c:09:fd:76:77:7c:59:c4:14:c0:12:40:93:
5f:47:a9:34:1a:2e:8d:9e:74:15:80:df:af:19:5d:
3a:a0:3a:5e:c3:e1:04:22:da:03:88:b0:3f:2e:6d:
25:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A3:F4:72:C1:B0:9F:C3:AE:0C:39:95:C4:05:15:49:BA:4C:1D:21
X509v3 Authority Key Identifier:
keyid:B6:D7:F3:68:FA:1C:F5:B1:AA:AA:76:B0:F1:F2:3C:06:75:0A:84:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:59:ad:8b:b3:51:14:33:aa:a9:b7:ba:42:8c:16:1b:48:f7:
b4:60:d6:5f:b9:8c:e8:87:e9:ff:4c:3d:17:0f:34:aa:3c:c8:
18:74:a0:8b:e8:63:ba:6c:d1:0c:f8:f2:cf:f8:3c:3b:7b:3b:
cf:6a:c4:e0:62:91:15:b1:88:6b:b6:b0:ea:9c:c2:fa:7f:80:
c8:aa:cd:48:0a:32:2e:2b:8b:39:6f:a0:80:0a:aa:ba:2c:1b:
cf:07:c7:fc:14:2d:ad:8d:6e:f4:77:96:de:c4:78:0d:07:99:
ab:82:1d:1e:f8:ce:ba:19:b3:6d:37:e6:bc:f7:aa:b9:01:c2:
ac:a3:1a:9f:7f:48:c9:0a:71:eb:37:ad:e3:7e:55:54:8d:2c:
da:67:c1:4a:8e:70:e5:bd:04:67:5a:ce:de:0e:36:8a:84:59:
54:0e:db:64:67:a6:31:b8:ac:70:b5:d5:77:a3:1c:77:30:36:
0b:68:2a:b9:3c:d6:ee:ff:b0:1d:b1:c0:65:41:e5:f4:f6:51:
cd:39:83:78:fe:fc:08:fc:4a:c0:43:fb:d2:8b:7a:36:a5:5e:
5a:d4:f5:12:a5:8c:c7:63:90:7c:d1:c1:7b:26:39:86:eb:bb:
f7:6a:29:0c:76:60:5d:3d:06:08:e1:21:62:01:46:e1:21:86:
21:38:a9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:20 2025 by rpki-client