Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft
File: TtaClltaFeoMReqF7z20vnFnlpY.mft (raw, json)
Hash identifier: gkJiani3pyaQ9KMQPneYNKtxtxSAY/hm0xV4+ZOFO9g=
Subject key identifier: A2:A0:E8:B5:BC:83:19:1C:AE:24:22:C0:3B:BB:23:8A:CD:78:AB:3C
Authority key identifier: 4E:D6:82:96:5B:5A:15:EA:0C:45:EA:85:EF:3D:B4:BE:71:67:96:96
Certificate issuer: /CN=4ed682965b5a15ea0c45ea85ef3db4be71679696
Certificate serial: 0199FD342DC53C3B6649B574049D1DAB68BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtaClltaFeoMReqF7z20vnFnlpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft
Manifest number: 0509
Signing time: Sun 19 Oct 2025 16:01:19 +0000
Manifest this update: Sun 19 Oct 2025 16:01:19 +0000
Manifest next update: Mon 20 Oct 2025 16:01:19 +0000
Files and hashes: 1: 3aqe87dN2fz6qQQtxNwtFo2__ps.roa (hash: Lt1Bd1g6jAvktpInXW5Oo10n3abY0buPeadfOybeVY0=)
2: TtaClltaFeoMReqF7z20vnFnlpY.crl (hash: i2P4ctgn6cG7Xnn26qzMNLM6KpOBHyWfH9jGREe4Pos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtaClltaFeoMReqF7z20vnFnlpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:2d:c5:3c:3b:66:49:b5:74:04:9d:1d:ab:68:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed682965b5a15ea0c45ea85ef3db4be71679696
Validity
Not Before: Oct 19 16:01:19 2025 GMT
Not After : Oct 20 16:01:19 2025 GMT
Subject: CN=a2a0e8b5bc83191cae2422c03bbb238acd78ab3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ea:73:53:55:49:ab:7b:87:bf:44:7d:99:4c:
66:b2:44:fe:4d:53:d0:d2:ee:a7:1d:e5:9e:6a:68:
14:c5:99:c5:1d:9e:c1:5c:40:aa:87:37:d6:cd:c5:
ec:9d:73:7a:7c:ba:ee:d8:bd:d4:d0:6c:3d:79:7f:
4a:69:1f:ef:ce:df:7b:a8:db:fd:63:3d:f1:81:3f:
f5:d0:0b:ee:78:7c:0a:a5:81:ae:0b:aa:8a:5d:cf:
60:eb:f5:45:34:71:ac:eb:90:8c:57:e6:be:20:d5:
18:b7:7e:48:c8:44:fd:59:b5:1e:b7:0b:9b:3b:b7:
31:5a:bb:64:07:1f:ef:b0:69:d6:b9:a6:ed:1c:07:
dd:2d:ef:a6:ea:ac:c1:f1:a6:cd:cc:c1:76:93:4d:
91:c9:24:6d:fa:6d:fb:58:1c:ec:87:af:0f:a7:78:
bf:d3:76:f4:9c:d0:e3:79:9d:54:31:f1:8b:77:b7:
05:c0:48:01:26:46:e8:bf:46:3f:ed:de:ad:c3:05:
4f:ff:cf:76:03:ff:c5:66:a0:e5:8d:c8:0f:13:b4:
fb:6f:d3:d2:5e:2e:15:03:e5:e8:6c:c6:58:05:c5:
6d:7c:c6:59:af:85:fb:96:34:19:dd:37:16:38:5a:
b9:02:f2:cf:14:d9:d9:d4:ec:a2:5e:64:74:39:27:
22:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A0:E8:B5:BC:83:19:1C:AE:24:22:C0:3B:BB:23:8A:CD:78:AB:3C
X509v3 Authority Key Identifier:
keyid:4E:D6:82:96:5B:5A:15:EA:0C:45:EA:85:EF:3D:B4:BE:71:67:96:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtaClltaFeoMReqF7z20vnFnlpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:43:35:90:15:42:40:5a:0c:ac:1f:da:62:ea:bf:d7:d0:a5:
8e:8c:d1:cd:7f:6b:16:55:29:18:ac:f9:c9:44:b1:8f:7f:d7:
69:ea:9d:a8:b5:cd:89:46:3f:c7:4e:05:4f:8e:a3:6e:c3:8b:
e1:07:c9:20:01:3a:1b:15:b9:8d:d7:ba:df:90:af:4e:1c:ac:
e7:56:52:75:7d:12:d7:5f:3a:bd:8a:ff:c5:7d:c6:f4:40:5c:
c2:df:9e:65:52:ef:a1:ed:32:3c:56:0b:3b:83:31:fe:be:14:
d4:08:82:b8:06:e3:69:86:51:d4:52:ed:33:c7:8e:50:1a:60:
99:49:78:c0:40:c4:7f:e2:e5:0e:7c:3f:a4:c5:0c:ce:ff:4a:
37:2a:fa:fc:09:49:c2:a7:c5:c5:6e:a5:36:42:e9:52:b0:92:
fd:85:d9:60:2d:af:c2:1c:c1:b5:77:c2:a7:5a:86:ed:3f:74:
65:39:6a:43:bc:4d:fb:18:67:2a:c6:ee:6d:47:7c:56:dc:a4:
92:44:d2:f3:d2:70:0a:61:64:aa:fb:2e:61:44:47:ee:db:2e:
e5:91:8d:b3:0d:e8:d8:85:ae:19:bd:48:86:ba:2e:ff:c0:2b:
d7:f9:56:2c:2a:06:a1:bf:c1:2a:05:d4:f8:55:8e:7a:e3:9b:
60:62:27:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:39:38 2025 by rpki-client