Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
File: TDJWN81N6a_lO9TxIav2IkX2cU8.mft (raw, json)
Hash identifier: kSLndMDE8H7UUaQrtkT2Xmj5CYOzHI5xKJGAVp1lirE=
Subject key identifier: 0C:3D:2C:05:58:5F:BE:8E:C6:30:E5:62:69:75:AE:78:91:19:2E:27
Authority key identifier: 4C:32:56:37:CD:4D:E9:AF:E5:3B:D4:F1:21:AB:F6:22:45:F6:71:4F
Certificate issuer: /CN=4c325637cd4de9afe53bd4f121abf62245f6714f
Certificate serial: 019A22F788A27004ADF36E1513AD80D6A20D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
Manifest number: 07EB
Signing time: Mon 27 Oct 2025 00:00:38 +0000
Manifest this update: Mon 27 Oct 2025 00:00:38 +0000
Manifest next update: Tue 28 Oct 2025 00:00:38 +0000
Files and hashes: 1: LYDDQOnitFMTtAyGKwDs2TyB_cA.roa (hash: sjSPKMVEsY4HYjeMnDvZAekbl4IrY01T9jduMhK7Jbc=)
2: TDJWN81N6a_lO9TxIav2IkX2cU8.crl (hash: 1nfTd27YO+jlwnXOaeXyoCFXZl9wXsJxBwNkri5Uo54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:88:a2:70:04:ad:f3:6e:15:13:ad:80:d6:a2:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c325637cd4de9afe53bd4f121abf62245f6714f
Validity
Not Before: Oct 27 00:00:38 2025 GMT
Not After : Oct 28 00:00:38 2025 GMT
Subject: CN=0c3d2c05585fbe8ec630e5626975ae7891192e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0e:83:59:28:a1:04:e8:5f:a6:dc:6b:02:83:
31:5c:be:85:45:96:5c:37:25:b2:91:2d:87:fb:e4:
8a:ea:eb:92:dd:95:85:d7:45:db:97:05:f4:c9:62:
1c:c1:91:0f:9e:66:64:c9:19:1c:66:b9:37:11:9c:
f4:de:c5:73:28:d7:02:fd:5b:b4:36:b0:a0:0a:42:
2a:da:ec:7d:bd:64:2f:e9:3e:36:87:41:4d:6f:4a:
93:e7:c7:ac:fe:c7:3a:76:bc:1c:3a:cb:29:cd:25:
be:76:23:31:ee:bc:a4:d0:c6:e4:13:e7:01:15:47:
08:b2:85:e5:3e:d3:47:47:2f:ba:46:f3:9e:08:36:
d0:68:4b:64:6e:0e:c2:65:1a:a7:47:b9:63:43:43:
41:46:a8:cd:ae:fa:dc:92:46:54:94:89:76:ff:a1:
d7:f4:6c:dd:28:b6:aa:fb:7f:94:c9:20:7a:0a:e9:
3a:a0:d3:93:92:e9:68:0b:c3:8f:88:84:50:2e:b0:
2e:f0:75:df:63:bc:12:a8:76:33:e7:26:8f:9f:db:
cc:b6:e9:6d:e9:8d:b7:3a:d9:de:07:c5:17:11:fb:
57:79:5c:e0:f6:9c:7b:7e:82:3a:3f:f7:53:2c:3b:
d7:77:4b:f4:fd:30:ba:ca:a3:e7:03:16:88:00:0a:
29:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:3D:2C:05:58:5F:BE:8E:C6:30:E5:62:69:75:AE:78:91:19:2E:27
X509v3 Authority Key Identifier:
keyid:4C:32:56:37:CD:4D:E9:AF:E5:3B:D4:F1:21:AB:F6:22:45:F6:71:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:5b:8c:8b:14:61:c9:c6:ed:a6:c9:65:71:2d:74:48:02:e3:
59:6f:b6:5b:40:7f:58:e4:0b:88:cd:9e:6e:9e:f7:8c:c5:da:
a6:16:d6:94:0c:aa:73:09:b8:b8:ad:24:9f:fb:16:e1:96:15:
c8:43:19:ee:97:36:3e:2a:8a:de:f6:99:98:30:fd:84:44:5b:
59:a5:7b:63:9f:71:b0:6d:e6:a1:74:8d:cc:7b:7b:62:83:49:
ca:7c:ea:30:79:26:34:63:ad:18:6b:53:49:8e:5c:57:72:da:
37:cc:c3:56:ea:2e:32:be:04:9b:af:4a:c9:69:a3:17:93:80:
c7:53:59:59:48:0b:c0:56:8b:ac:06:da:4d:15:44:00:f9:2e:
44:e3:ed:f1:ae:6d:7f:0e:6c:71:9b:fe:6b:ef:89:7a:6d:04:
2d:fa:8c:e8:29:06:74:88:ff:77:bd:6c:11:da:ec:a7:b5:ef:
19:7f:eb:d3:d9:54:2e:5e:ee:13:f2:dc:b3:f6:37:fd:14:e4:
92:ed:bb:bf:da:a4:b7:0e:66:cc:ee:b0:7a:2c:56:29:3f:79:
a3:26:6a:6a:8b:80:3c:e3:5e:b0:5e:46:cf:d7:a6:ae:0f:2a:
66:22:d1:55:69:d6:5c:77:3d:ef:bb:cb:c9:fb:9e:c6:75:28:
bb:8d:e5:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:34:42 2025 by rpki-client