Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
File: TddPu7rljdCHbZnoDsgqEaRHf34.mft (raw, json)
Hash identifier: BiXiZ3rlNo8sQwl0ed7BUGmYVI3kTywDV6IfBds0pj4=
Subject key identifier: 86:D0:7B:AB:DD:01:C8:75:83:A1:C5:A7:16:C0:07:92:F6:1C:C0:35
Authority key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
Certificate issuer: /CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Certificate serial: 019A1DD115ABCDE51F897DB32F0705279979
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
Manifest number: 0EF3
Signing time: Sun 26 Oct 2025 00:00:33 +0000
Manifest this update: Sun 26 Oct 2025 00:00:33 +0000
Manifest next update: Mon 27 Oct 2025 00:00:33 +0000
Files and hashes: 1: 4Jp18k3WgZxFLlIl31FziAZ_pyE.roa (hash: Rdy6GJGskKOgLLcQAYAa6TgfgY93QdTyE4LXA4WR8FE=)
2: J-mZDParjvz3ljIfTzlhasavsBo.roa (hash: X+bwHIE0wlCUwYusUU0uKi4Yc/Kz9/L2eOGJbsIOXJw=)
3: JbzhdefJbSbcMWzYg2HKOZi42yQ.roa (hash: Lr8qqBdkJKxtoR5S2Pga1jAiow0N/LgTqH30jZ9Ys0M=)
4: TddPu7rljdCHbZnoDsgqEaRHf34.crl (hash: /7t4ZpUreHXbKRGJnctfRBVglqAFkYH4Mdtft4P/faU=)
5: cxjVghHfKz7r8jK0ajPAm20QF-U.roa (hash: HPsMihI6S6ZtrZUoih477ooLtwdT/SYfO2io/vTyfY8=)
6: d852wo13D922O1kxvHO2L_8C0MU.roa (hash: HBCOzohfyjSX600EtZoiv9El3W7QzIDEos4plB6TxSI=)
7: hDkefyVIo6CtSmC9usLxfbXSHJo.roa (hash: 2L43qW8nvv7ZuypirwxJV5b95hzLgxd1pp/3t2CraNw=)
8: jIbMiSFlsQdlGZXR1HxPoO5c35o.roa (hash: QE4Ii8v6WxF41ed0I+H7egny9WwHZOU3Z66ypjFLn7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:d1:15:ab:cd:e5:1f:89:7d:b3:2f:07:05:27:99:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Validity
Not Before: Oct 26 00:00:33 2025 GMT
Not After : Oct 27 00:00:33 2025 GMT
Subject: CN=86d07babdd01c87583a1c5a716c00792f61cc035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7e:48:d1:3a:23:2a:89:ac:ac:39:8d:ef:48:
74:ba:b8:b9:fe:de:eb:6e:8a:b6:52:ff:a4:cd:c8:
83:2f:f6:0b:6a:f7:60:40:93:59:aa:e0:d2:3a:df:
23:7b:ed:f7:dd:10:31:ec:26:e1:ce:9c:9a:14:50:
45:a6:f1:83:fb:d5:db:14:07:30:f2:56:f8:37:e9:
95:40:50:35:44:85:f0:e7:0d:fc:64:22:32:3d:c1:
8a:ae:2a:0f:7d:04:19:cd:bc:ac:4b:b2:12:46:28:
24:50:8b:71:84:13:c2:7a:9f:0a:bd:2c:4d:ee:ba:
07:83:75:62:6f:69:f3:3c:3a:27:5a:47:a0:1c:e4:
42:17:41:42:d5:7f:2a:7b:f0:8e:1f:8d:94:0e:73:
f9:6c:a2:04:18:5d:c1:62:51:c2:2c:75:76:61:fa:
ef:ca:1f:a8:69:1d:e3:d3:9e:f3:c2:02:04:f3:a1:
df:bf:c8:be:e8:9e:1a:3e:9f:f3:89:d8:64:92:e2:
02:a0:b4:8a:e6:d6:62:39:cb:26:07:14:a3:e3:b1:
d7:d9:ec:52:e6:6e:d3:9b:41:5b:02:e2:90:7b:2d:
18:11:0b:88:6e:07:8f:a6:d7:9f:21:55:8a:db:81:
1b:37:ba:10:d2:43:e3:64:e2:4b:51:8b:f6:41:18:
c4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D0:7B:AB:DD:01:C8:75:83:A1:C5:A7:16:C0:07:92:F6:1C:C0:35
X509v3 Authority Key Identifier:
keyid:4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:41:bc:5b:40:27:11:d5:97:89:7c:cd:6a:ce:09:08:fd:f4:
d3:26:b4:97:95:fd:92:70:ba:a4:9b:14:2e:be:00:da:0e:fc:
b2:65:59:29:b4:e6:38:a2:1b:fd:2c:04:9e:3f:3f:27:4f:6d:
ea:b7:0d:f8:73:3d:38:6b:03:2d:f5:f0:b4:0b:d1:b9:c3:4d:
88:1c:99:df:30:2f:a2:f3:07:9c:0b:31:e4:22:42:f8:30:db:
d2:c4:3c:96:83:11:0c:37:b0:03:aa:47:0e:b1:57:d5:f8:bf:
06:93:98:34:c7:4e:3f:19:59:fd:c5:91:3a:da:71:37:fe:c8:
fc:c3:22:53:19:a8:ba:f6:db:81:e7:4f:92:12:cf:d8:86:57:
f1:0d:d5:96:5b:8b:93:d8:f2:79:c9:78:88:f0:d3:7d:14:c6:
22:cf:0f:71:b6:5f:d1:94:9f:5c:a8:e6:48:a5:b6:bb:dc:a6:
75:93:45:1d:db:8d:8b:04:fa:2f:c2:1f:0f:d4:dc:8b:61:c2:
df:12:17:2d:e8:42:9f:c6:ff:62:4b:b1:54:18:97:c1:e9:05:
d5:fa:40:85:2d:8e:3c:32:7e:65:8e:b5:8c:74:86:c6:61:87:
e1:14:b0:cc:44:c9:48:d4:2b:f9:97:7f:ea:00:89:55:ae:fa:
4d:e0:9a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 04:55:31 2025 by rpki-client