Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
File: TdbneabA8LCSFmIjgEZ9zi0Roxg.mft (raw, json)
Hash identifier: dmdEhJPpQlfB3xSjHpb2kB7UbZf+ktYaJetbGulbVlQ=
Subject key identifier: 44:99:E4:B0:FA:02:F6:EF:4A:57:B6:D8:87:B0:1A:34:34:81:AB:13
Authority key identifier: 4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18
Certificate issuer: /CN=4dd6e779a6c0f0b09216622380467dce2d11a318
Certificate serial: 019A50E3016E9C43656C1C5CDAB7D885B34E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
Manifest number: 16A0
Signing time: Tue 04 Nov 2025 22:00:45 +0000
Manifest this update: Tue 04 Nov 2025 22:00:45 +0000
Manifest next update: Wed 05 Nov 2025 22:00:45 +0000
Files and hashes: 1: TdbneabA8LCSFmIjgEZ9zi0Roxg.crl (hash: FEgszanMyuMBI+NjRGonLl7Z4ufghBadWogGGUCCwK4=)
2: gjoyy0FPdmf2zrdNnLaoUXfqkA8.roa (hash: RTgHJsDHudCpwL05o4vGq9BVppolqh2KaIXjwJZDWfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:01:6e:9c:43:65:6c:1c:5c:da:b7:d8:85:b3:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd6e779a6c0f0b09216622380467dce2d11a318
Validity
Not Before: Nov 4 22:00:45 2025 GMT
Not After : Nov 5 22:00:45 2025 GMT
Subject: CN=4499e4b0fa02f6ef4a57b6d887b01a343481ab13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:67:5c:da:1e:2c:1e:40:94:5d:22:79:0d:e7:
76:7c:a4:a2:7c:c0:bb:a1:99:27:1c:c9:d2:1f:5c:
64:68:70:84:36:4f:a5:53:48:59:99:dd:98:05:98:
3c:06:69:75:b3:04:bb:3a:3e:4e:62:0e:d7:56:49:
b0:d3:4b:5b:51:5e:7d:5a:4a:78:37:75:fb:36:4f:
08:4c:e4:ab:c3:b0:ed:41:13:76:3e:f1:3c:a3:4e:
ce:8a:ad:26:3b:25:03:b5:5c:ae:34:e1:06:9b:92:
d1:94:b5:58:99:b3:12:a5:1a:1d:8d:a6:7b:af:4c:
51:83:4c:ae:26:71:5c:0d:e7:2a:d3:d5:e3:f4:cf:
75:9c:87:6a:f3:62:89:2c:f8:5e:25:71:82:7e:6f:
0e:07:7c:b2:5f:26:0f:4c:ec:45:e7:38:2a:1b:d1:
83:a3:8f:de:09:83:81:d8:6f:3b:5d:e1:74:55:5b:
4b:e9:b6:c7:51:eb:09:88:62:f4:08:a8:82:2d:2a:
2b:18:97:67:3d:ed:86:c2:dc:21:38:ef:50:fb:ba:
a0:c7:7f:5f:7a:05:20:34:01:f0:cd:3f:37:34:7e:
ec:11:10:07:43:71:ee:d2:09:99:b3:b7:f6:b0:46:
ff:3a:b6:b2:5c:42:9d:e8:9e:c1:54:27:22:d5:99:
8c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:99:E4:B0:FA:02:F6:EF:4A:57:B6:D8:87:B0:1A:34:34:81:AB:13
X509v3 Authority Key Identifier:
keyid:4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:d7:f1:cc:54:bb:82:d2:6e:9b:5f:ea:63:a7:f1:8f:97:39:
6a:41:39:14:1e:15:10:90:dd:25:23:ad:d4:f4:72:7f:ba:2f:
20:60:59:f6:cb:5c:2c:ea:49:d8:10:cc:1e:90:02:26:5e:2a:
99:74:86:da:49:76:1e:ae:5f:cc:a4:9e:e5:54:4e:07:23:6a:
47:95:aa:46:ac:16:f7:ae:0a:30:49:dc:f6:92:df:17:bf:2a:
1c:96:35:2e:91:59:cd:ed:c6:62:32:1e:ea:98:47:00:63:12:
a5:fb:a3:b2:ba:a5:94:d4:78:aa:16:e3:8a:e5:36:5e:fb:ad:
3f:a4:b7:cf:98:5b:1d:39:09:67:f8:50:b9:52:03:5c:15:85:
42:88:fa:a5:e8:05:02:63:03:53:7e:ea:ff:ee:88:79:8e:df:
07:ed:fa:66:c9:89:4d:38:2f:a3:34:99:1d:7d:1a:03:f2:16:
44:ba:25:8a:a6:95:bd:e8:3b:b7:a2:9e:73:da:0e:d5:40:0d:
bd:cc:58:41:8b:ac:f3:be:da:44:07:82:39:7f:8b:14:48:4c:
69:cb:98:c3:7f:c4:36:7d:84:2e:b0:b4:97:9a:44:4e:ed:12:
39:d7:d9:08:96:99:c8:1f:2f:42:46:ea:cc:24:ba:15:58:d0:
46:ab:b4:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:19:32 2025 by rpki-client