Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft
File: TtTTbmM3JKGxeUm8QiR2lk518GU.mft (raw, json)
Hash identifier: 6O5c9VhRsVn2p3UiFstO7qM6m6yMjNG+NP6uG/mGDZI=
Subject key identifier: 86:AC:37:08:E1:35:77:73:45:68:FD:52:07:9B:34:C6:2E:94:BE:87
Authority key identifier: 4E:D4:D3:6E:63:37:24:A1:B1:79:49:BC:42:24:76:96:4E:75:F0:65
Certificate issuer: /CN=4ed4d36e633724a1b17949bc422476964e75f065
Certificate serial: 0199FD6B56C63C6B0EA257E65CA79CA21178
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtTTbmM3JKGxeUm8QiR2lk518GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 17:01:34 +0000
Manifest this update: Sun 19 Oct 2025 17:01:34 +0000
Manifest next update: Mon 20 Oct 2025 17:01:34 +0000
Files and hashes: 1: CnryW-h9KBqAbLH3yoElsj6kkME.roa (hash: LGWkYgge1+9ItWTLHb68eWMOdZQGepA7ESiUA3d7dLI=)
2: TtTTbmM3JKGxeUm8QiR2lk518GU.crl (hash: Bs4QVN6kxmp7+OvoJSuXBIa83MDGOGirDXPtDNprUpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtTTbmM3JKGxeUm8QiR2lk518GU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:56:c6:3c:6b:0e:a2:57:e6:5c:a7:9c:a2:11:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed4d36e633724a1b17949bc422476964e75f065
Validity
Not Before: Oct 19 17:01:34 2025 GMT
Not After : Oct 20 17:01:34 2025 GMT
Subject: CN=86ac3708e13577734568fd52079b34c62e94be87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b7:a3:36:29:4f:71:22:ce:3b:08:d4:66:f3:
6a:94:49:9a:2e:6a:6e:2b:71:a2:85:59:71:68:02:
5a:20:84:a5:12:74:ce:02:1a:8a:93:52:16:cf:1a:
a0:19:41:6b:d1:5c:1a:25:e0:46:85:d2:a8:1a:2b:
75:f4:b5:31:5c:cc:31:cc:70:7f:04:a1:a0:24:1c:
0b:8f:34:85:46:a8:db:96:40:f3:49:59:c1:d6:8d:
fe:0f:99:0b:0a:8f:b5:7c:49:73:16:48:86:41:b5:
8a:ef:1f:d9:93:a4:55:5e:9b:3a:e1:12:ed:7d:b3:
24:83:35:65:08:f1:3b:4a:dc:b6:46:02:dd:bc:58:
d2:19:47:a1:73:fd:74:5e:cb:58:a8:26:92:73:9d:
ae:f1:d6:f1:40:27:43:97:80:41:21:66:1f:48:17:
e4:db:65:18:80:40:96:35:d5:d8:e6:00:4e:28:2d:
7c:30:fc:a2:91:04:c4:d1:f9:ac:7d:49:6a:fb:e3:
69:a7:3e:cf:26:31:ea:2d:bb:2e:25:2c:ca:30:cf:
7d:9c:c5:05:68:c5:71:80:6f:84:31:55:e1:78:1d:
db:50:58:0d:10:22:a2:1b:26:55:aa:df:53:e9:e7:
bd:3e:b3:f6:70:15:82:51:44:25:d9:d0:5e:69:2d:
a1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:AC:37:08:E1:35:77:73:45:68:FD:52:07:9B:34:C6:2E:94:BE:87
X509v3 Authority Key Identifier:
keyid:4E:D4:D3:6E:63:37:24:A1:B1:79:49:BC:42:24:76:96:4E:75:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtTTbmM3JKGxeUm8QiR2lk518GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:10:64:d0:46:c9:32:b9:a3:29:ee:00:c0:9b:e8:64:62:1f:
ae:0d:f3:0a:5b:e4:b8:c9:57:19:85:83:9c:0e:1d:18:20:9c:
24:aa:9a:33:9c:0a:85:d0:bf:aa:ce:59:38:f7:22:5b:31:1a:
7c:45:0d:27:69:34:bd:33:db:75:f9:59:ec:3a:a3:35:5d:42:
67:aa:8c:f0:65:c9:ec:2d:9c:8b:32:5d:84:9b:35:67:15:5c:
5c:b1:c4:63:c2:15:5c:68:1e:73:ae:3e:4e:40:a9:fa:93:99:
3e:21:0b:59:01:25:44:bd:bb:fa:57:4c:bc:3c:be:b9:b2:f5:
7d:17:b0:6f:d4:dc:c4:ea:6b:98:90:30:bd:21:97:0a:e5:eb:
03:33:fd:f0:b7:3e:84:04:22:93:45:fa:a9:04:32:26:ac:cf:
58:21:6e:8d:22:13:c4:b4:36:50:4c:3e:fb:9b:35:fd:c7:2d:
ff:7b:97:bc:7f:f1:6a:70:f1:d5:de:fe:51:67:94:70:10:3e:
db:6e:62:d3:16:53:c5:c9:4e:a8:5f:a8:0d:ee:da:62:20:08:
f9:53:e4:1b:c9:0d:9b:92:5c:1a:ba:90:0d:36:2d:e9:69:71:
14:68:c6:1a:af:c8:db:d6:49:bf:16:63:80:48:64:86:8a:f3:
5e:12:74:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:41 2025 by rpki-client