Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
File: TDOTsqG9eRmFmAeDirHjsAN7i08.mft (raw, json)
Hash identifier: jq8mShAR12uFjIrZi+tRp61q+Tgis2Fue9eC16W96aQ=
Subject key identifier: 91:6F:8F:B9:1A:30:8D:03:C3:2D:AD:0C:96:75:E3:4F:69:68:17:BC
Authority key identifier: 4C:33:93:B2:A1:BD:79:19:85:98:07:83:8A:B1:E3:B0:03:7B:8B:4F
Certificate issuer: /CN=4c3393b2a1bd7919859807838ab1e3b0037b8b4f
Certificate serial: 019A7225B4DDF7797D93D1B664A1A2E9A802
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDOTsqG9eRmFmAeDirHjsAN7i08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
Manifest number: 0E1B
Signing time: Tue 11 Nov 2025 09:01:04 +0000
Manifest this update: Tue 11 Nov 2025 09:01:04 +0000
Manifest next update: Wed 12 Nov 2025 09:01:04 +0000
Files and hashes: 1: TDOTsqG9eRmFmAeDirHjsAN7i08.crl (hash: j0mM589eBKxtrPq+h7cTRWMMHoXrj327fS4inUPOIb4=)
2: y6xk5yyaeCIuQcfJUMGsvyLuakI.roa (hash: 5cTQO7InxQ4ef2VY7Tlc4nQ2LkIPqai+B4whSvQRHdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDOTsqG9eRmFmAeDirHjsAN7i08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:b4:dd:f7:79:7d:93:d1:b6:64:a1:a2:e9:a8:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3393b2a1bd7919859807838ab1e3b0037b8b4f
Validity
Not Before: Nov 11 09:01:04 2025 GMT
Not After : Nov 12 09:01:04 2025 GMT
Subject: CN=916f8fb91a308d03c32dad0c9675e34f696817bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e4:fa:65:d6:e1:63:8c:39:1d:fd:93:2d:29:
8d:84:cd:b0:2b:29:80:83:06:33:20:da:67:50:04:
c5:2a:df:e8:45:af:fc:50:0b:6c:ae:18:4d:e0:27:
48:39:13:5d:98:23:82:39:f6:13:03:16:ec:ff:c0:
dc:5b:51:bb:7d:82:fb:0d:7f:13:2c:9b:88:1f:7f:
4c:37:06:c2:dd:0f:d2:4e:ae:58:0b:83:58:f5:67:
be:26:8d:3a:3f:78:53:b9:f8:6e:73:78:77:d3:b3:
dd:71:79:0d:0f:5d:74:26:b5:a5:ee:6a:f5:cd:ed:
cb:73:b4:4c:d8:6d:d3:e9:78:35:37:5a:7c:b8:63:
74:7b:ff:66:fb:63:87:84:0c:91:20:9e:d3:05:85:
d8:88:4d:7d:90:56:3e:33:74:74:91:ae:f0:db:97:
73:60:7d:b5:f8:9e:86:51:0d:ad:74:08:c0:f1:33:
d2:7f:28:a9:ed:b5:6c:97:60:d9:91:ca:88:a9:97:
5a:c4:79:4c:80:41:9f:2c:62:db:5f:92:84:15:2a:
f1:95:ac:45:fe:50:ab:3b:8f:4a:fd:51:f8:a0:bc:
f1:26:38:3f:86:c3:2c:5b:59:90:5b:a4:a6:19:56:
be:47:2a:24:eb:7d:c8:61:15:a0:00:ab:86:96:78:
39:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:6F:8F:B9:1A:30:8D:03:C3:2D:AD:0C:96:75:E3:4F:69:68:17:BC
X509v3 Authority Key Identifier:
keyid:4C:33:93:B2:A1:BD:79:19:85:98:07:83:8A:B1:E3:B0:03:7B:8B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDOTsqG9eRmFmAeDirHjsAN7i08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:b1:d8:89:b5:6c:b2:7e:63:6d:1f:54:76:ac:1c:d1:e6:18:
ea:b9:78:35:50:ba:e9:09:68:c6:e8:ea:f5:00:d4:ed:58:de:
53:28:28:d7:07:a4:c7:05:62:78:e1:be:30:34:05:5b:f6:8f:
8e:03:81:51:29:e7:c5:8e:34:2f:24:d2:b9:78:53:08:c5:1c:
77:7c:3c:c4:4b:a1:86:9a:ea:59:27:df:b8:f1:f8:64:6e:90:
97:87:1c:90:98:81:d7:70:3b:e8:7d:6d:0f:92:97:e8:54:9f:
97:b7:3a:fa:0f:02:b9:18:71:be:c1:99:10:7d:d9:f1:68:16:
56:f7:3f:47:4e:c9:5a:ce:3a:2d:30:0b:e8:3b:c4:29:be:07:
e5:1d:b9:fc:3e:50:65:9b:08:3d:fe:fe:dd:2f:40:21:f7:d5:
c5:91:66:1e:27:49:f6:56:7b:a7:4d:86:61:fc:56:1a:0e:ea:
5a:4f:f6:58:45:ff:0c:d1:38:2c:da:ce:73:35:b5:19:3e:f6:
56:b7:b5:fb:e5:ab:05:eb:07:de:b6:39:8a:e9:aa:c0:8f:6e:
ac:4d:49:5a:60:6d:a4:c1:37:37:39:65:66:99:fb:3a:b9:c2:
32:bd:a2:47:33:9d:45:8e:a3:45:c1:51:ab:a0:09:67:de:4b:
63:e8:de:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:10 2025 by rpki-client