Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
File: TtMkzMCQuDGCmReur3ODTwg0Ss4.mft (raw, json)
Hash identifier: ikTyEKMnNZaeSFBEAM37UMPFM4bU5HHOpgUVRrQxpU0=
Subject key identifier: 7D:9E:19:88:AB:95:F2:E8:E9:A9:ED:44:CC:A9:23:1A:3B:DD:37:68
Authority key identifier: 4E:D3:24:CC:C0:90:B8:31:82:99:17:AE:AF:73:83:4F:08:34:4A:CE
Certificate issuer: /CN=4ed324ccc090b831829917aeaf73834f08344ace
Certificate serial: 0199FC8F1D9E9F311BE19957AE2C4F47167A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
Manifest number: 01F2
Signing time: Sun 19 Oct 2025 13:01:01 +0000
Manifest this update: Sun 19 Oct 2025 13:01:01 +0000
Manifest next update: Mon 20 Oct 2025 13:01:01 +0000
Files and hashes: 1: LpPDa_hMKwPOheYcHrNv5BDTWog.roa (hash: 2CoZfLFeobkKqc9qZWTYrYW94wPP5u5Zmz2xUC1WQvs=)
2: TtMkzMCQuDGCmReur3ODTwg0Ss4.crl (hash: 5Zaz5HIlW19mEudeUd0oHQMQMmAZDo27vvko7m5Kpm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:1d:9e:9f:31:1b:e1:99:57:ae:2c:4f:47:16:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed324ccc090b831829917aeaf73834f08344ace
Validity
Not Before: Oct 19 13:01:01 2025 GMT
Not After : Oct 20 13:01:01 2025 GMT
Subject: CN=7d9e1988ab95f2e8e9a9ed44cca9231a3bdd3768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cb:31:6d:e7:58:4b:12:ba:66:02:8a:9c:ed:
23:db:b4:18:1b:43:7d:17:ce:78:a5:35:36:60:7a:
10:46:6f:eb:6d:34:e1:82:d8:f5:fb:c6:2f:07:6d:
a4:a3:39:0f:30:6d:bf:91:ce:61:7f:de:7e:cf:55:
ff:cc:6d:56:91:8b:c9:e7:1c:a6:71:a0:92:41:ce:
cb:47:51:80:67:8d:b8:11:34:3d:e3:83:0f:18:55:
5e:cc:a9:64:ac:e1:34:e7:7f:05:09:67:9c:1d:1f:
38:88:ab:c7:ff:ab:38:a4:72:ec:fc:96:38:ac:1f:
38:90:4a:05:70:90:19:22:ad:a0:7f:22:8c:b0:cc:
c6:ea:a0:39:ac:a8:2b:35:40:1d:be:aa:95:3b:8e:
d9:40:64:71:de:95:f4:8b:94:52:68:af:48:ce:c4:
fa:5d:85:0d:8d:34:04:aa:87:2e:af:bc:4e:5f:6d:
81:27:63:14:52:3b:26:6c:54:ed:74:ba:99:ec:c5:
ac:85:df:0e:df:19:84:89:43:fa:1b:a2:06:c1:8c:
a7:2f:4a:01:bf:69:fd:48:62:b1:e7:fe:42:a0:c0:
74:03:a3:f7:0d:69:28:0e:d5:71:c3:e3:00:b0:aa:
32:c6:70:0b:59:f2:2c:43:34:56:92:37:30:55:73:
81:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:9E:19:88:AB:95:F2:E8:E9:A9:ED:44:CC:A9:23:1A:3B:DD:37:68
X509v3 Authority Key Identifier:
keyid:4E:D3:24:CC:C0:90:B8:31:82:99:17:AE:AF:73:83:4F:08:34:4A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:0b:ee:56:f0:e0:6b:8a:a2:19:06:b6:e4:fd:cf:73:80:4e:
50:4e:64:9e:d7:9d:9a:4a:1d:a6:97:d6:43:12:91:ae:ad:de:
f7:b2:17:5d:91:e3:1e:67:67:b0:92:c3:ca:9b:a3:e3:d8:c6:
38:72:5c:31:bd:7d:ef:4c:87:2b:46:59:13:11:c3:27:b1:96:
71:9d:d1:0a:58:20:6f:bb:f3:67:04:dd:f2:09:90:8f:8e:db:
d8:24:8c:05:bd:e5:33:67:ab:86:46:cb:3d:d4:05:f1:06:55:
5b:da:f7:de:62:7e:47:4a:c3:d0:85:6e:27:cd:2b:b4:6c:45:
52:2d:0d:86:5f:cb:f2:6a:e0:db:7f:d6:ef:65:06:cc:89:44:
3a:a0:c5:45:ac:39:3f:ce:5c:4d:19:92:79:73:75:af:32:e6:
08:a3:9d:05:37:ad:23:d5:e0:d0:7b:5b:48:80:00:2e:e1:c4:
17:19:25:86:ee:29:84:38:17:e1:d8:36:bb:9f:f9:e9:6a:9a:
52:5d:43:50:2e:93:72:14:2c:4a:4e:5f:3d:59:27:a5:ae:06:
5e:fc:ff:a5:0a:dd:f2:1e:8f:3a:e4:6c:ce:ce:ad:94:1d:69:
d1:f7:7c:52:82:f1:d7:9a:1c:9d:51:f8:58:5b:0b:31:bc:23:
5e:3b:b4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:46 2025 by rpki-client