Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
File: TtA31O4-XScGWtgDVlgqL9wrSI0.mft (raw, json)
Hash identifier: ebnVEwuPIpQygIr5FXz4hOnudLrqiVUvPGoev+6ucdg=
Subject key identifier: 62:87:9D:E5:65:8A:67:A5:7D:AF:ED:6E:5C:90:B5:BF:A9:B1:D9:99
Authority key identifier: 4E:D0:37:D4:EE:3E:5D:27:06:5A:D8:03:56:58:2A:2F:DC:2B:48:8D
Certificate issuer: /CN=4ed037d4ee3e5d27065ad80356582a2fdc2b488d
Certificate serial: 0199FCC6558FFC6476163B58A1FD42FC2B2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
Manifest number: 1060
Signing time: Sun 19 Oct 2025 14:01:20 +0000
Manifest this update: Sun 19 Oct 2025 14:01:20 +0000
Manifest next update: Mon 20 Oct 2025 14:01:20 +0000
Files and hashes: 1: TtA31O4-XScGWtgDVlgqL9wrSI0.crl (hash: 6bSXm23VwnHkSscNRx2ojGioxMmljoielhg7PaBrP7A=)
2: eOJpQF5FNoppqB79NhjuknNPvas.roa (hash: 0TneR6h3XAtyeO7uLkVkGQTYXZHCJ04//nJtpw2jBn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:55:8f:fc:64:76:16:3b:58:a1:fd:42:fc:2b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed037d4ee3e5d27065ad80356582a2fdc2b488d
Validity
Not Before: Oct 19 14:01:20 2025 GMT
Not After : Oct 20 14:01:20 2025 GMT
Subject: CN=62879de5658a67a57dafed6e5c90b5bfa9b1d999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:47:52:29:f6:54:d5:41:ac:a0:23:f3:68:1d:
e6:07:92:1b:66:8a:ef:47:22:48:02:82:dd:87:14:
09:99:52:78:52:c6:23:32:c8:4b:fa:e9:7b:35:6a:
2a:a8:d4:82:a9:60:66:bf:b6:93:38:c2:6c:ea:31:
3b:20:c5:e8:5e:83:f9:68:71:37:98:d9:25:2f:37:
a6:9c:63:57:fe:24:e2:ef:79:bf:99:4c:1a:ed:7b:
fd:0b:cc:1b:01:82:e6:e6:05:f7:04:8c:7a:db:0c:
48:bc:88:b0:07:4a:a0:f7:59:02:1a:d1:8a:e1:33:
d4:95:90:61:fd:ed:f0:94:9c:f9:2c:f8:f2:88:31:
5c:2d:ba:fc:b4:1c:47:72:67:06:7a:3c:35:23:c8:
5e:b6:3f:51:21:1b:ec:53:f3:5c:42:9a:d2:b6:17:
a5:36:fd:ca:77:93:65:92:be:45:47:d0:a9:a1:22:
59:b9:94:bc:29:61:42:64:26:64:6e:f0:23:c2:29:
9c:56:1c:bb:c2:31:00:bd:f4:41:d4:9f:4a:11:5c:
78:d8:75:1c:7f:da:4e:7e:1e:74:33:34:0c:bd:66:
dc:d2:e0:de:87:d7:e4:5f:b8:3a:aa:aa:99:ea:9a:
d1:8b:2d:91:d7:a4:9f:ff:db:f6:bb:fb:f9:b7:b3:
07:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:87:9D:E5:65:8A:67:A5:7D:AF:ED:6E:5C:90:B5:BF:A9:B1:D9:99
X509v3 Authority Key Identifier:
keyid:4E:D0:37:D4:EE:3E:5D:27:06:5A:D8:03:56:58:2A:2F:DC:2B:48:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:be:28:eb:7b:fd:99:de:b7:82:ce:84:c6:b7:55:46:63:84:
54:8c:f8:45:45:8b:20:cf:f5:e2:36:0d:1b:2c:50:8e:44:b6:
18:fb:99:d7:ae:c5:c0:cb:72:53:5e:2f:98:03:71:e2:cf:a0:
4f:5d:7a:11:20:f2:49:19:ba:7b:90:0b:43:30:17:f5:82:28:
af:89:9e:ad:94:7f:6b:c3:3a:12:e9:0a:81:97:80:ac:15:5a:
b1:51:6c:f2:6c:4b:0f:82:af:33:38:36:5b:7d:30:79:43:f6:
be:8c:3b:7f:a3:1b:64:c2:e6:88:4a:6d:c4:c7:d2:11:5a:90:
55:cd:6f:de:a5:a0:91:db:e4:5b:0d:96:32:9d:00:02:2f:29:
97:87:58:2a:28:7f:a6:1f:77:c6:96:84:63:df:52:20:48:bc:
a0:dc:0f:dc:d1:5a:fb:bb:b9:0e:17:6f:9b:eb:6f:e4:c1:66:
8c:49:b8:82:35:24:1c:de:88:5d:68:a0:6a:86:9a:a5:ce:c9:
a1:3b:98:63:f3:b7:36:2b:4d:b0:26:53:81:1f:d5:67:99:2a:
a5:ff:cb:c5:24:cb:83:5d:85:fd:17:c9:ea:3e:a5:bf:bb:8e:
75:14:fe:6d:38:8a:67:c3:c0:65:fe:bb:e3:f0:8c:4e:7e:e5:
18:c8:48:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:42:55 2025 by rpki-client