Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
File: TtHX3yWkqdXnJ8QvVenjGD02qTo.mft (raw, json)
Hash identifier: eqshMSIhPa/J8W/imjusiCw68DfabLW4INtecxt501U=
Subject key identifier: 23:DD:43:AD:B7:10:4D:38:87:0A:3A:9A:68:F0:DD:15:2F:66:30:82
Authority key identifier: 4E:D1:D7:DF:25:A4:A9:D5:E7:27:C4:2F:55:E9:E3:18:3D:36:A9:3A
Certificate issuer: /CN=4ed1d7df25a4a9d5e727c42f55e9e3183d36a93a
Certificate serial: 0199FC21BBA3DB06801D94701B0682F737E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtHX3yWkqdXnJ8QvVenjGD02qTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
Manifest number: 106D
Signing time: Sun 19 Oct 2025 11:01:33 +0000
Manifest this update: Sun 19 Oct 2025 11:01:33 +0000
Manifest next update: Mon 20 Oct 2025 11:01:33 +0000
Files and hashes: 1: GjqXm9JUjjlZZ0PJdXVG1lJFjCg.roa (hash: N8pnAe9jWWy/GU0t4cg3SHXORnEo2+UUYssAVJRTLSs=)
2: TtHX3yWkqdXnJ8QvVenjGD02qTo.crl (hash: dcSvCPQ0tNuc9aas0+xomn2l10g7SGub9ca94DbNn44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtHX3yWkqdXnJ8QvVenjGD02qTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:bb:a3:db:06:80:1d:94:70:1b:06:82:f7:37:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed1d7df25a4a9d5e727c42f55e9e3183d36a93a
Validity
Not Before: Oct 19 11:01:33 2025 GMT
Not After : Oct 20 11:01:33 2025 GMT
Subject: CN=23dd43adb7104d38870a3a9a68f0dd152f663082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:42:43:97:79:57:4d:24:95:33:9f:35:ee:88:
46:84:4a:39:42:b0:8b:2f:c1:31:76:a6:4a:27:4d:
8f:be:64:1b:dd:b0:c6:49:26:8e:4a:9e:fd:e2:56:
ee:c9:50:7f:62:54:3e:89:cb:98:8c:b1:1a:84:86:
50:27:f5:0b:c0:b7:3f:3e:f1:e7:7c:91:b7:43:1f:
9e:11:d0:47:b8:fa:13:11:7b:b4:8d:1a:97:fe:53:
7e:23:e1:3e:67:8e:ff:c4:78:a3:cc:26:50:41:4e:
b1:2b:8e:44:99:e5:b1:67:26:d8:13:2d:13:54:68:
d1:d9:b5:3d:8d:78:72:d9:71:c3:f1:c8:23:16:0c:
69:7a:ce:76:b5:26:9a:cf:56:3e:96:00:4f:02:2d:
62:aa:46:64:db:de:5f:9b:e5:33:fc:bd:8c:10:57:
5a:e7:18:1a:a6:ec:23:c6:d3:a3:7e:37:2e:44:a4:
4c:48:05:5b:6a:98:e9:21:82:9e:bc:75:96:d0:1f:
84:7a:10:dc:ae:35:92:4d:86:da:af:f2:0d:1a:89:
86:a6:44:cc:b1:ff:17:0e:62:80:7e:ac:43:10:72:
c6:95:ab:79:7f:f2:54:2b:58:02:aa:62:2f:5b:e7:
41:7f:90:45:46:44:e6:42:3e:21:07:53:c6:00:e8:
7c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DD:43:AD:B7:10:4D:38:87:0A:3A:9A:68:F0:DD:15:2F:66:30:82
X509v3 Authority Key Identifier:
keyid:4E:D1:D7:DF:25:A4:A9:D5:E7:27:C4:2F:55:E9:E3:18:3D:36:A9:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtHX3yWkqdXnJ8QvVenjGD02qTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:63:1b:12:a1:ae:34:ba:bc:5f:c0:3e:3d:eb:4f:fa:52:ab:
9d:dc:75:bd:54:0c:c9:b3:fb:17:f2:5f:b8:dc:a2:a5:65:ca:
30:57:54:83:a2:35:5f:0f:ae:98:0d:f7:db:61:b5:90:81:1c:
70:9d:0a:88:bc:1b:cf:10:d3:71:d7:11:91:f5:e4:68:0d:98:
6e:33:10:32:57:00:47:d5:a8:08:8b:87:79:65:7a:14:59:14:
95:c2:b2:34:c8:65:b2:38:11:ed:8a:71:17:6c:50:b1:f1:5a:
10:9b:42:a3:a8:74:d2:13:8c:df:9b:a1:80:9d:8e:47:e3:67:
6e:45:69:69:3e:27:55:14:92:fa:28:29:54:70:19:e3:7d:b6:
fa:71:03:ec:be:9f:b2:58:fe:49:8d:86:78:98:0a:66:82:d8:
47:65:34:9e:bd:b9:e1:a4:b5:4d:40:bd:69:85:d4:66:ec:b5:
75:d2:b3:3e:53:75:55:15:41:33:bf:40:14:38:4c:62:8c:a3:
a9:01:42:39:52:14:23:26:20:b8:38:22:97:98:7c:53:44:c6:
9a:81:bd:10:ce:d7:1f:c2:c8:8c:2c:94:ec:e6:53:a0:cc:c7:
72:17:b2:f0:45:c5:c7:a7:95:7b:87:f7:23:e1:9b:25:c3:0c:
ba:76:cd:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:13:26 2025 by rpki-client