Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft
File: TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft (raw, json)
Hash identifier: eN1KhcRVVwfqOm29etW+zQ+TTuEtwGs/MIgVn7ceMqA=
Subject key identifier: D8:FC:82:03:15:7D:BB:BF:4D:44:D0:F1:F1:63:0C:05:2F:C9:46:C4
Authority key identifier: 4C:33:C0:E1:4D:57:EA:BC:3B:65:E3:8A:77:36:BE:BE:49:09:2E:9E
Certificate issuer: /CN=4c33c0e14d57eabc3b65e38a7736bebe49092e9e
Certificate serial: 019A0B25A165925B382D8E68E2D4E6C25E70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDPA4U1X6rw7ZeOKdza-vkkJLp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft
Manifest number: 0E2F
Signing time: Wed 22 Oct 2025 09:00:06 +0000
Manifest this update: Wed 22 Oct 2025 09:00:06 +0000
Manifest next update: Thu 23 Oct 2025 09:00:06 +0000
Files and hashes: 1: NgIKF8jcDLCHN3aJD8aULMWPG30.roa (hash: 9imCN3WetXg8Q1ELNvwqDIt+zXYLct6tp7egk/4AdG8=)
2: TDPA4U1X6rw7ZeOKdza-vkkJLp4.crl (hash: Uk8DffyhaHM43cKa+V0iLfbByrduEqCVK+zNdr4qtMY=)
3: k_nIf6wVx1Xdxat4zYtnBqTL13Y.roa (hash: HaoM7rJ6dUREUsX3C7dLkVUY9dcgJCaHV1PnH/ISMtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDPA4U1X6rw7ZeOKdza-vkkJLp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:25:a1:65:92:5b:38:2d:8e:68:e2:d4:e6:c2:5e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c33c0e14d57eabc3b65e38a7736bebe49092e9e
Validity
Not Before: Oct 22 09:00:06 2025 GMT
Not After : Oct 23 09:00:06 2025 GMT
Subject: CN=d8fc8203157dbbbf4d44d0f1f1630c052fc946c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9b:fe:06:4c:84:f6:1e:c7:73:93:11:90:55:
c2:72:4a:27:07:37:96:94:4d:08:77:66:55:b8:1b:
64:e1:c3:1e:b7:a0:ee:7c:eb:5b:3c:b6:3d:6c:76:
f6:09:cc:94:06:38:2a:1c:c8:3e:b7:7e:31:d2:aa:
91:bd:ad:f6:44:e6:44:3b:30:15:7c:58:74:ad:35:
28:67:af:95:55:43:cb:78:ee:7e:03:2e:70:00:9b:
de:0b:c1:c7:8f:1c:4a:8e:6d:fa:e2:b6:89:d7:fd:
e2:d9:59:3d:33:dd:b9:e0:5f:49:5a:3e:e5:4f:c4:
10:9c:df:ac:f2:79:6a:db:09:56:37:6d:49:63:4b:
b0:50:6f:12:13:95:9b:03:f6:72:ea:d7:64:42:1e:
b7:ba:0e:30:cf:a9:7a:a2:d4:58:cb:b5:36:56:28:
f3:b6:00:f7:d1:94:70:9b:45:61:72:9d:3f:e4:89:
0c:85:41:d4:67:03:d3:76:af:44:88:8b:c7:32:06:
a1:83:e1:95:0a:4e:a2:58:3d:d6:ba:3d:4a:67:88:
7d:8d:ae:ce:e0:21:ba:2b:c2:e1:c3:ff:fa:ca:fa:
1a:6e:d5:1d:3c:c7:70:09:eb:48:fb:62:26:1b:1c:
c6:94:7f:7f:8c:38:9b:36:2b:4a:9c:6e:6c:90:3f:
1a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:FC:82:03:15:7D:BB:BF:4D:44:D0:F1:F1:63:0C:05:2F:C9:46:C4
X509v3 Authority Key Identifier:
keyid:4C:33:C0:E1:4D:57:EA:BC:3B:65:E3:8A:77:36:BE:BE:49:09:2E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDPA4U1X6rw7ZeOKdza-vkkJLp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:8a:1c:25:15:0d:2b:5e:0e:8a:0f:fd:db:18:55:66:f1:82:
df:c9:3d:23:27:56:e5:dc:6f:d5:42:ea:8b:8e:29:81:19:ee:
59:a9:5c:57:1e:5d:31:6d:26:f3:1a:2d:37:76:e2:89:a8:9a:
c4:ff:eb:f9:9e:a3:55:cf:6a:fd:46:1b:67:b6:9d:81:cb:11:
62:25:56:33:05:97:48:f9:2d:0c:c0:bb:09:24:96:aa:4d:52:
e6:d6:69:be:34:1a:57:00:25:5b:e0:6a:a5:c1:c9:d6:67:f0:
af:33:e7:ef:ea:64:59:78:25:54:7c:eb:ad:79:fd:20:57:c1:
87:ac:e9:57:9a:f5:bc:93:fb:88:bb:ac:b8:ef:8b:04:d1:20:
6e:a2:e8:06:cb:7c:3a:54:dd:df:01:23:16:92:07:d6:b8:f8:
11:a8:07:be:95:f1:0f:44:d9:be:06:83:25:09:00:23:de:bc:
ed:10:30:49:5e:c4:9a:73:9f:1e:de:3f:17:ab:a1:ea:83:e9:
70:c6:89:28:92:a3:56:d2:7b:11:ce:46:4f:4a:0c:95:71:25:
32:e6:51:5a:3c:8f:36:2f:74:34:b2:3c:45:76:68:fc:4f:10:
03:b6:df:43:10:58:13:44:62:93:26:9d:90:ef:c6:05:ae:16:
6c:5d:b7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 12:33:32 2025 by rpki-client