Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
File: TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft (raw, json)
Hash identifier: kKWtrPPNcNi5OKe9CZTL7a3/VDPcZhxQrSYfdFwjKso=
Subject key identifier: DC:03:86:3C:72:44:D0:9A:4C:D5:80:B7:47:5B:90:A1:88:16:C1:0C
Authority key identifier: 4C:38:A3:06:A3:7E:E8:7B:EB:FF:72:36:55:3E:0D:3C:B6:72:CD:17
Certificate issuer: /CN=4c38a306a37ee87bebff7236553e0d3cb672cd17
Certificate serial: 019A258A52E12761DB75B9716846ACC0E164
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
Manifest number: 01CD
Signing time: Mon 27 Oct 2025 12:00:13 +0000
Manifest this update: Mon 27 Oct 2025 12:00:13 +0000
Manifest next update: Tue 28 Oct 2025 12:00:13 +0000
Files and hashes: 1: 54qil-gtsg-VmWMUKBbSoP89Sh4.roa (hash: +lFuYFZIeWq9AFirWvNO/gLe0U+wLrmb+nny8MFDRhE=)
2: TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl (hash: WJF+AR4YYzDzXYT9nidrASUYPL2s/7J3l+0gc23EMaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:8a:52:e1:27:61:db:75:b9:71:68:46:ac:c0:e1:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c38a306a37ee87bebff7236553e0d3cb672cd17
Validity
Not Before: Oct 27 12:00:13 2025 GMT
Not After : Oct 28 12:00:13 2025 GMT
Subject: CN=dc03863c7244d09a4cd580b7475b90a18816c10c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:30:cc:ae:43:fc:f5:24:25:df:35:1a:02:71:
6b:65:84:c2:a2:c8:b9:a0:0f:c2:1a:f0:dc:b1:a7:
79:87:11:c0:93:39:31:a6:45:9c:77:bd:4c:70:02:
92:73:f5:df:7a:a6:06:7e:5c:25:82:3b:e9:15:dd:
56:9c:f7:4c:c1:9e:bb:36:ce:a3:47:de:c8:06:f2:
ad:9e:91:9b:c2:5e:62:6a:a6:94:66:16:2f:a7:86:
da:28:56:14:74:c3:a1:f2:99:1b:07:a8:40:9a:b7:
31:20:f2:14:87:07:ed:14:e6:1a:6c:bb:98:b1:59:
37:11:5b:72:25:2d:36:a8:a0:b8:fe:a5:f3:eb:9e:
cd:95:16:63:b2:18:75:56:87:5b:24:7e:fe:8f:5b:
32:c9:43:bd:b0:a3:ef:7a:4b:61:ec:56:fb:7f:8f:
ad:94:90:26:88:24:c8:fd:38:62:31:03:74:72:54:
c1:24:d0:44:61:b2:e4:79:01:b1:2c:02:da:de:02:
62:24:f5:76:8c:6e:93:ef:f8:e6:21:58:4d:92:6c:
97:14:5b:c1:7c:10:e0:1f:52:6a:a8:69:1e:d1:44:
62:54:7f:f9:65:d0:39:16:fe:5d:8e:00:16:68:89:
c4:f0:aa:2b:50:5c:78:a4:49:7a:7b:fb:6c:db:f1:
87:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:03:86:3C:72:44:D0:9A:4C:D5:80:B7:47:5B:90:A1:88:16:C1:0C
X509v3 Authority Key Identifier:
keyid:4C:38:A3:06:A3:7E:E8:7B:EB:FF:72:36:55:3E:0D:3C:B6:72:CD:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:61:46:d9:f6:d9:76:39:50:64:fe:0d:b3:73:32:62:05:b1:
f8:50:42:c6:60:39:c7:39:6f:73:87:36:27:e1:95:e3:1e:61:
b4:76:1f:ae:9d:69:54:6d:46:cb:52:99:77:df:34:e2:cd:e2:
8f:bc:96:6f:ab:7c:a8:49:06:c2:9d:34:d6:d7:af:05:99:57:
ae:84:77:6a:fe:c9:b5:58:cd:f4:2e:e5:56:71:0a:a6:72:20:
e7:bf:00:fa:f4:23:01:ad:47:6c:b0:4a:3d:54:a1:47:88:4b:
80:90:90:c5:7c:d9:d2:45:67:73:bb:35:d7:bf:4a:dd:d0:a3:
e4:02:7f:40:9b:1d:68:f8:57:b4:5a:b2:ee:8b:64:8f:eb:53:
80:65:f9:c3:3e:6a:c1:d8:e2:a2:54:fd:d3:a4:b5:07:5a:46:
2a:42:7a:5f:41:3f:d2:4a:6a:93:b8:e6:49:6d:5b:ea:1f:fd:
76:6c:8f:77:da:d5:ad:5c:91:31:1f:1e:6d:59:74:e3:78:e8:
26:66:dd:ec:3a:eb:f3:d8:2f:bd:44:fe:cc:c3:92:7f:ca:86:
5c:af:cf:63:c1:43:f0:48:99:59:09:a4:4a:f2:78:e6:9c:5b:
6d:ac:f6:6b:33:b1:79:15:6a:66:82:84:94:0b:38:e6:c5:8b:
95:67:0c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:23:23 2025 by rpki-client