Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
File: TdbneabA8LCSFmIjgEZ9zi0Roxg.mft (raw, json)
Hash identifier: XxYq0k3+s+mFJPJrn1h/jVfwA9mmUpLLklZIQ8behJo=
Subject key identifier: 21:DD:01:15:14:AD:91:C9:74:61:CF:17:E8:EB:B5:C6:73:4C:2E:B4
Authority key identifier: 4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18
Certificate issuer: /CN=4dd6e779a6c0f0b09216622380467dce2d11a318
Certificate serial: 019A4EF5AB09F42E8572F4CB2A973B53B8F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
Manifest number: 169F
Signing time: Tue 04 Nov 2025 13:01:54 +0000
Manifest this update: Tue 04 Nov 2025 13:01:54 +0000
Manifest next update: Wed 05 Nov 2025 13:01:54 +0000
Files and hashes: 1: TdbneabA8LCSFmIjgEZ9zi0Roxg.crl (hash: 4/b5bSRD0q64gWjYswNgY5Jy7Sa4ZbpsH/F5W+wuwEg=)
2: gjoyy0FPdmf2zrdNnLaoUXfqkA8.roa (hash: RTgHJsDHudCpwL05o4vGq9BVppolqh2KaIXjwJZDWfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:ab:09:f4:2e:85:72:f4:cb:2a:97:3b:53:b8:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd6e779a6c0f0b09216622380467dce2d11a318
Validity
Not Before: Nov 4 13:01:54 2025 GMT
Not After : Nov 5 13:01:54 2025 GMT
Subject: CN=21dd011514ad91c97461cf17e8ebb5c6734c2eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:01:26:50:9d:c4:c2:69:81:9f:23:de:d2:d2:
e5:b2:47:2b:bb:20:81:46:3c:75:1d:09:b7:43:2c:
fd:82:85:7b:ec:3d:78:38:8d:d5:29:33:53:e3:d0:
fe:f4:cb:16:cd:cf:dc:e8:bd:a5:9c:75:3a:20:5e:
43:15:4c:59:3b:35:00:79:6a:0f:32:dd:28:04:69:
69:0f:a1:fd:2e:9a:53:0e:e5:c7:11:17:ea:33:3f:
af:23:8b:60:61:a1:be:6d:fc:65:85:33:cf:25:e1:
b9:76:75:1e:b2:ef:3d:f3:36:f4:99:27:6c:35:31:
40:08:a3:f6:d4:b4:aa:4b:90:5f:25:de:63:9e:10:
67:9d:ce:7f:03:53:bf:c4:40:42:3b:1d:1e:87:36:
a3:4d:3d:be:cf:b4:b7:21:49:79:ab:80:d8:b4:3b:
12:d9:92:7e:d4:54:c0:e1:4c:5c:ef:4f:f0:bc:c5:
47:eb:39:ec:78:e6:e6:f0:1d:f1:a6:38:97:cd:01:
5f:32:a6:ed:60:1b:08:c0:65:1e:d0:c1:43:d7:a4:
ef:cf:48:ec:2d:cb:08:12:e1:af:16:7c:f7:4a:18:
4b:87:fd:1f:1f:cc:f7:09:46:d4:80:66:3f:89:b6:
19:0c:e9:df:58:9c:91:6f:79:c8:20:2c:00:92:0c:
99:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:DD:01:15:14:AD:91:C9:74:61:CF:17:E8:EB:B5:C6:73:4C:2E:B4
X509v3 Authority Key Identifier:
keyid:4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:96:69:3f:d5:3e:0d:a0:26:ee:dd:1a:95:f5:a8:df:84:6f:
69:cd:95:10:6c:4c:c0:ee:f1:9c:33:9b:96:0f:d8:ba:26:3b:
95:97:ca:d1:01:e6:82:3d:c4:a4:18:7c:6e:3c:b2:ad:15:f1:
98:1b:ab:01:27:f1:f8:31:ae:ca:6b:2d:8a:07:aa:f3:6d:9f:
51:69:22:f0:54:19:c9:9a:60:db:4c:21:12:7b:02:d3:23:28:
6e:90:0e:48:e9:07:17:ef:09:10:7a:8e:ec:ca:6b:31:2f:12:
fc:77:94:9b:17:b6:dc:d4:13:39:0b:4a:fe:46:12:bb:f3:18:
3a:13:d2:e4:69:d3:1d:ff:7c:e4:5c:73:01:ce:bf:6b:a5:dc:
50:30:93:18:96:cb:c0:56:d4:ff:ed:c6:7b:8b:98:23:eb:66:
be:c8:d2:26:2f:d2:34:a7:19:7a:b8:e8:ad:ee:70:fe:1e:69:
ff:21:9d:b6:8e:fa:cb:3e:a8:a1:58:2b:c3:59:fb:1d:8d:80:
f7:56:bb:bd:e9:d6:ca:a8:d1:5b:f8:3d:9d:17:cd:9b:23:7c:
7e:1c:34:3c:f2:35:b1:34:58:61:c1:34:91:9f:d6:56:ae:63:
e9:64:9c:45:ac:9e:25:86:04:bb:b4:60:8d:99:c0:5e:26:19:
cf:68:9f:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9asJ9C6FcvTLKpc7U7j5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZDZlNzc5YTZjMGYwYjA5MjE2NjIyMzgwNDY3ZGNlMmQx
MWEzMTgwHhcNMjUxMTA0MTMwMTU0WhcNMjUxMTA1MTMwMTU0WjAzMTEwLwYDVQQD
EygyMWRkMDExNTE0YWQ5MWM5NzQ2MWNmMTdlOGViYjVjNjczNGMyZWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgEmUJ3EwmmBnyPe0tLlskcruyCB
Rjx1HQm3Qyz9goV77D14OI3VKTNT49D+9MsWzc/c6L2lnHU6IF5DFUxZOzUAeWoP
Mt0oBGlpD6H9LppTDuXHERfqMz+vI4tgYaG+bfxlhTPPJeG5dnUesu898zb0mSds
NTFACKP21LSqS5BfJd5jnhBnnc5/A1O/xEBCOx0ehzajTT2+z7S3IUl5q4DYtDsS
2ZJ+1FTA4Uxc70/wvMVH6znseObm8B3xpjiXzQFfMqbtYBsIwGUe0MFD16Tvz0js
LcsIEuGvFnz3ShhLh/0fH8z3CUbUgGY/ibYZDOnfWJyRb3nIICwAkgyZFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCHdARUUrZHJdGHPF+jrtcZzTC60MB8GA1UdIwQY
MBaAFE3W53mmwPCwkhZiI4BGfc4tEaMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGRibmVhYkE4TENTRm1JamdFWjl6aTBSb3hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9mMGIyODUtZDAzOC00ZGU2LTkzNzQt
YzQ3MmU2MmViZWE4LzEvVGRibmVhYkE4TENTRm1JamdFWjl6aTBSb3hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9mMGIyODUtZDAzOC00ZGU2LTkzNzQtYzQ3MmU2MmViZWE4
LzEvVGRibmVhYkE4TENTRm1JamdFWjl6aTBSb3hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAJZpP9U+
DaAm7t0alfWo34Rvac2VEGxMwO7xnDOblg/YuiY7lZfK0QHmgj3EpBh8bjyyrRXx
mBurASfx+DGuymstigeq822fUWki8FQZyZpg20whEnsC0yMobpAOSOkHF+8JEHqO
7MprMS8S/HeUmxe23NQTOQtK/kYSu/MYOhPS5GnTHf985FxzAc6/a6XcUDCTGJbL
wFbU/+3Ge4uYI+tmvsjSJi/SNKcZerjore5w/h5p/yGdto76yz6ooVgrw1n7HY2A
91a7venWyqjRW/g9nRfNmyN8fhw0PPI1sTRYYcE0kZ/WVq5j6WScRayeJYYEu7Rg
jZnAXiYZz2ifWA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:09:23 2025 by rpki-client