Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
File: TdbneabA8LCSFmIjgEZ9zi0Roxg.mft (raw, json)
Hash identifier: n25JpcQEocuJlVx26CaMPhzOGGP0l21byF8oTGv4OQU=
Subject key identifier: 22:85:09:AB:96:D8:74:41:60:70:F6:6B:E0:2E:33:57:B1:E0:46:B8
Authority key identifier: 4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18
Certificate issuer: /CN=4dd6e779a6c0f0b09216622380467dce2d11a318
Certificate serial: 019A2666BC2919AF96A46B349EA2C0A5845F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
Manifest number: 168A
Signing time: Mon 27 Oct 2025 16:00:58 +0000
Manifest this update: Mon 27 Oct 2025 16:00:58 +0000
Manifest next update: Tue 28 Oct 2025 16:00:58 +0000
Files and hashes: 1: TdbneabA8LCSFmIjgEZ9zi0Roxg.crl (hash: Ggt5fIdH9/Lblo90XZ5LC5XVco8YO/ui/J1XzcUG7Ek=)
2: gjoyy0FPdmf2zrdNnLaoUXfqkA8.roa (hash: RTgHJsDHudCpwL05o4vGq9BVppolqh2KaIXjwJZDWfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:66:bc:29:19:af:96:a4:6b:34:9e:a2:c0:a5:84:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd6e779a6c0f0b09216622380467dce2d11a318
Validity
Not Before: Oct 27 16:00:58 2025 GMT
Not After : Oct 28 16:00:58 2025 GMT
Subject: CN=228509ab96d874416070f66be02e3357b1e046b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:26:10:0e:54:4c:af:8d:b5:ba:99:3a:80:f9:
04:4e:88:8d:f9:65:23:f7:f5:69:24:0a:10:4b:17:
20:1b:30:1e:fc:15:a7:1d:0a:a4:c1:c4:0a:a6:69:
cc:b4:e0:1e:ef:cc:2e:ba:3f:97:ec:d3:fc:b7:6c:
2a:47:58:49:45:ac:7c:5c:9c:61:c1:9f:fa:02:b3:
09:46:ce:fe:b5:3f:69:87:7c:77:2d:6b:5a:d4:b4:
d0:eb:f1:c2:0d:14:6c:e0:22:47:e3:6a:46:a5:65:
fa:0c:64:0b:d7:54:f5:be:5a:c2:99:1d:17:7d:b5:
4c:df:81:83:3a:6d:57:41:ad:21:3d:6d:9e:e1:da:
e6:b6:27:e4:8a:b3:65:27:d0:74:e3:2c:c7:8b:16:
b8:a2:88:49:e3:41:c9:ce:66:7f:b5:5c:59:19:69:
32:32:db:9b:20:c9:ab:d2:b2:41:14:53:0e:ff:db:
d9:97:9b:30:93:3b:3f:b1:fc:57:3e:a7:a5:ed:0f:
8b:04:bb:2f:77:47:b1:0e:44:07:04:ca:fe:d4:ec:
35:a0:a5:84:0a:f2:c6:32:09:55:12:ed:17:82:d5:
bd:3d:94:cf:31:47:a1:9d:84:00:c2:ee:07:b3:c8:
c2:2f:da:f9:17:c4:c9:06:d2:6a:4c:0d:1c:7d:8d:
10:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:85:09:AB:96:D8:74:41:60:70:F6:6B:E0:2E:33:57:B1:E0:46:B8
X509v3 Authority Key Identifier:
keyid:4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:61:8b:22:42:94:99:86:eb:29:a7:54:3d:64:94:ea:4f:8d:
64:7e:77:de:e1:0a:d8:9b:03:c5:14:31:58:6a:96:7f:a8:af:
17:56:3b:8b:c5:19:f5:ac:a8:dd:73:3a:28:48:9b:28:2c:50:
38:f8:77:a6:71:14:91:c5:15:b8:95:d6:ec:b8:d4:e9:b0:ab:
29:9e:6d:07:cb:1a:37:4c:3a:42:90:b8:35:22:c0:43:ad:a0:
32:8f:0f:25:46:5c:7d:d6:fa:f2:80:f0:5a:73:ef:ac:4a:16:
cd:51:1a:7a:e0:cc:03:75:24:87:a0:42:42:c9:31:5a:4d:bd:
0d:64:96:a8:b5:a9:18:ac:1f:f5:b7:59:2f:5b:93:1d:2f:3c:
8d:3a:ef:65:22:20:99:81:ae:11:27:33:ed:fa:9d:5a:4a:0e:
16:77:65:20:7d:77:7a:5d:d9:74:5b:dd:5d:6a:04:5c:24:83:
e4:46:f4:d3:0a:cd:8c:ac:97:cf:01:f3:c5:03:ce:2b:29:e1:
84:94:3d:7b:b9:cc:8a:00:75:ae:95:dd:61:94:96:24:c3:53:
e1:00:2a:e5:5b:21:36:af:b4:af:c4:22:99:ac:19:f1:52:4d:
e8:a6:bd:3e:34:88:23:70:0b:a0:e7:05:69:7c:7f:09:0e:75:
f3:bd:42:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 19:50:31 2025 by rpki-client