Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.mft
File: tdh_3Ccq4Fhhh4bnQXB1V79OGjM.mft (raw, json)
Hash identifier: odx51I9SnsgVdPaD3zSmyIiA0Zx1W0LUptOkJV6qfzk=
Subject key identifier: 66:39:76:F6:C3:3B:14:F9:EF:B9:38:3E:4B:EF:2C:DE:24:73:32:58
Authority key identifier: B5:D8:7F:DC:27:2A:E0:58:61:87:86:E7:41:70:75:57:BF:4E:1A:33
Certificate issuer: /CN=b5d87fdc272ae058618786e741707557bf4e1a33
Certificate serial: 019A7149FD10E05400AB1E7CF2D934CB4E17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.mft
Manifest number: 04BA
Signing time: Tue 11 Nov 2025 05:01:05 +0000
Manifest this update: Tue 11 Nov 2025 05:01:05 +0000
Manifest next update: Wed 12 Nov 2025 05:01:05 +0000
Files and hashes: 1: qQy9nbutIB840i93Gc6Vw1Yt6lA.roa (hash: 65g5a8+QhFyUXfSxWzLsMCFvk+W/xMxKhOR8kW2aeMw=)
2: tdh_3Ccq4Fhhh4bnQXB1V79OGjM.crl (hash: X8zQGjdh/9/svVnSe99vXZsNrHRjE5jzThUmHiLAFoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:fd:10:e0:54:00:ab:1e:7c:f2:d9:34:cb:4e:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5d87fdc272ae058618786e741707557bf4e1a33
Validity
Not Before: Nov 11 05:01:05 2025 GMT
Not After : Nov 12 05:01:05 2025 GMT
Subject: CN=663976f6c33b14f9efb9383e4bef2cde24733258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b8:48:39:cb:6d:c1:7e:cf:86:34:95:66:d3:
63:4f:72:be:8a:b8:0f:d7:c9:5a:e2:c9:0b:04:73:
9d:9c:91:7b:43:76:03:39:79:a1:b3:e0:75:2a:27:
0e:96:cf:74:1d:ef:77:da:82:d4:f4:4d:71:4c:48:
02:92:c2:59:b4:3e:87:75:ea:64:d2:c9:20:ef:44:
0c:0a:db:85:40:fb:58:7e:c1:bd:12:bf:25:da:18:
6d:e2:7f:02:bc:7d:1a:36:a2:75:77:e3:67:bd:30:
aa:b4:25:55:87:06:a9:5b:4a:2e:e9:5e:2f:39:f6:
0b:86:07:ba:37:31:e3:d6:35:a6:10:f5:4f:e1:8a:
4c:11:35:2e:41:55:13:49:a8:1e:a6:4c:a1:f1:dc:
0c:73:84:7c:f1:99:21:a3:e3:28:98:dc:d7:9b:2f:
01:31:26:22:d9:3b:3e:5a:8b:18:fc:6e:01:9f:52:
d2:24:42:22:60:3c:7b:33:fa:76:c3:9c:80:d9:7a:
8a:30:51:8f:f1:88:2d:55:8d:45:2c:97:e2:d0:45:
1d:26:5c:9c:35:7e:82:de:49:7d:85:11:e6:a3:45:
32:6c:ef:37:f7:e3:ed:7a:fc:0b:71:f7:c4:1a:bd:
c1:43:77:13:c1:47:e6:a0:db:b4:0e:52:e4:3c:54:
e3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:39:76:F6:C3:3B:14:F9:EF:B9:38:3E:4B:EF:2C:DE:24:73:32:58
X509v3 Authority Key Identifier:
keyid:B5:D8:7F:DC:27:2A:E0:58:61:87:86:E7:41:70:75:57:BF:4E:1A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:c6:73:67:ee:c8:dc:d7:a0:72:57:ac:ee:db:ae:9b:18:d5:
b1:3c:91:28:64:88:e4:e4:4e:a6:7b:6f:1b:36:55:8e:2d:e4:
fe:07:a9:ef:7e:3e:a7:1d:2e:f8:65:dc:7e:71:64:ec:0a:6b:
b6:65:c9:fd:67:37:9c:04:43:49:44:9a:d7:38:b2:96:76:81:
59:9b:35:0f:d2:39:0e:23:b2:07:82:2d:2a:8c:e9:52:67:5a:
db:26:b4:97:12:19:7c:40:77:de:f3:41:c1:f6:cd:ff:5f:c1:
45:3a:d8:11:38:d3:95:c5:2a:81:e5:09:6f:02:40:09:21:66:
13:5b:45:29:33:68:5a:ca:62:f1:74:58:1c:3b:e4:b9:12:2a:
04:0c:62:0d:38:1f:89:e8:83:aa:e9:80:00:f7:11:f0:8c:26:
58:ac:c0:a8:82:09:73:5f:ff:e2:ae:fa:44:b1:38:55:1e:ee:
16:7f:15:ab:5c:ac:e3:ce:c5:a0:e6:9c:67:f3:3e:ea:80:5f:
82:50:d0:d7:2f:39:2e:87:be:3f:0f:3b:e9:9f:14:90:d8:c0:
f8:b0:71:a7:bc:42:07:bd:40:ff:65:03:7d:83:7e:d4:af:c4:
b8:45:93:21:44:21:6b:85:18:01:d3:da:72:86:95:8b:c5:1b:
1d:fb:4f:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSf0Q4FQAqx588tk0y04XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1ZDg3ZmRjMjcyYWUwNTg2MTg3ODZlNzQxNzA3NTU3YmY0
ZTFhMzMwHhcNMjUxMTExMDUwMTA1WhcNMjUxMTEyMDUwMTA1WjAzMTEwLwYDVQQD
Eyg2NjM5NzZmNmMzM2IxNGY5ZWZiOTM4M2U0YmVmMmNkZTI0NzMzMjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLhIOcttwX7PhjSVZtNjT3K+irgP
18la4skLBHOdnJF7Q3YDOXmhs+B1KicOls90He932oLU9E1xTEgCksJZtD6Hdepk
0skg70QMCtuFQPtYfsG9Er8l2hht4n8CvH0aNqJ1d+NnvTCqtCVVhwapW0ou6V4v
OfYLhge6NzHj1jWmEPVP4YpMETUuQVUTSagepkyh8dwMc4R88Zkho+MomNzXmy8B
MSYi2Ts+WosY/G4Bn1LSJEIiYDx7M/p2w5yA2XqKMFGP8YgtVY1FLJfi0EUdJlyc
NX6C3kl9hRHmo0UybO839+PtevwLcffEGr3BQ3cTwUfmoNu0DlLkPFTjGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGY5dvbDOxT577k4PkvvLN4kczJYMB8GA1UdIwQY
MBaAFLXYf9wnKuBYYYeG50FwdVe/ThozMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGRoXzNDY3E0RmhoaDRiblFYQjFWNzlPR2pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC82NzBiMTAtMTBlYi00NzZmLTg0ZWYt
MTU2ZWRhMmI1NWI2LzEvdGRoXzNDY3E0RmhoaDRiblFYQjFWNzlPR2pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC82NzBiMTAtMTBlYi00NzZmLTg0ZWYtMTU2ZWRhMmI1NWI2
LzEvdGRoXzNDY3E0RmhoaDRiblFYQjFWNzlPR2pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKsZzZ+7I
3Negcles7tuumxjVsTyRKGSI5OROpntvGzZVji3k/gep734+px0u+GXcfnFk7Apr
tmXJ/Wc3nARDSUSa1ziylnaBWZs1D9I5DiOyB4ItKozpUmda2ya0lxIZfEB33vNB
wfbN/1/BRTrYETjTlcUqgeUJbwJACSFmE1tFKTNoWspi8XRYHDvkuRIqBAxiDTgf
ieiDqumAAPcR8IwmWKzAqIIJc1//4q76RLE4VR7uFn8Vq1ys487FoOacZ/M+6oBf
glDQ1y85Loe+Pw876Z8UkNjA+LBxp7xCB71A/2UDfYN+1K/EuEWTIUQha4UYAdPa
coaVi8UbHftPkQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:43 2025 by rpki-client