Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft
File: TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft (raw, json)
Hash identifier: v2BVnCVDISWJ/oY56OuaPbvVKkNRiK5AOxR3XJ1BPgg=
Subject key identifier: CB:2D:60:0B:D6:2B:C1:0B:39:03:B0:AE:EB:3A:66:91:33:B5:89:18
Authority key identifier: 4C:33:C0:E1:4D:57:EA:BC:3B:65:E3:8A:77:36:BE:BE:49:09:2E:9E
Certificate issuer: /CN=4c33c0e14d57eabc3b65e38a7736bebe49092e9e
Certificate serial: 019A4EBD455E8FE021BBF98B92B7753E5B05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDPA4U1X6rw7ZeOKdza-vkkJLp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft
Manifest number: 0E52
Signing time: Tue 04 Nov 2025 12:00:18 +0000
Manifest this update: Tue 04 Nov 2025 12:00:18 +0000
Manifest next update: Wed 05 Nov 2025 12:00:18 +0000
Files and hashes: 1: NgIKF8jcDLCHN3aJD8aULMWPG30.roa (hash: 9imCN3WetXg8Q1ELNvwqDIt+zXYLct6tp7egk/4AdG8=)
2: TDPA4U1X6rw7ZeOKdza-vkkJLp4.crl (hash: HmKl4Y1STSIiFPY0jj2NzeHsgFZ41kU+GVn01hkZHr0=)
3: k_nIf6wVx1Xdxat4zYtnBqTL13Y.roa (hash: HaoM7rJ6dUREUsX3C7dLkVUY9dcgJCaHV1PnH/ISMtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDPA4U1X6rw7ZeOKdza-vkkJLp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:45:5e:8f:e0:21:bb:f9:8b:92:b7:75:3e:5b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c33c0e14d57eabc3b65e38a7736bebe49092e9e
Validity
Not Before: Nov 4 12:00:18 2025 GMT
Not After : Nov 5 12:00:18 2025 GMT
Subject: CN=cb2d600bd62bc10b3903b0aeeb3a669133b58918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:54:fd:09:dc:e0:6a:4e:03:6a:11:d0:5f:69:
17:88:85:51:8e:4a:bd:01:f4:5b:08:a8:2e:dc:8c:
cb:58:c5:ad:66:35:24:fe:cc:ca:6b:b1:c7:dd:a7:
c2:bf:3c:e6:13:be:0e:7e:2f:4c:a1:13:99:93:eb:
2e:da:92:96:ab:19:73:7b:2c:f4:fa:a7:53:5b:55:
58:8d:97:e0:d1:95:7e:99:2f:ed:ea:8f:8b:a3:bf:
52:a4:42:e8:14:f8:bc:d0:06:2c:e2:2b:a5:8b:80:
43:73:21:4b:bc:b2:cd:6b:69:4c:c4:d5:89:cf:5e:
6f:44:f7:03:0e:66:63:9b:52:e9:4e:ec:99:61:16:
63:d6:66:f8:39:e0:34:25:28:28:2a:d3:ff:b6:10:
50:f1:2d:81:ea:5b:61:5c:6f:3e:01:cd:cf:5f:bb:
b2:f4:bb:34:6d:44:9a:e2:2f:6c:7b:0c:03:a0:43:
d5:5a:a7:87:2e:63:e4:a1:8b:a0:b3:1b:c4:14:cf:
9f:1f:81:c2:26:fd:2c:34:41:73:10:45:af:09:e6:
97:f9:25:ea:1c:1e:16:bf:64:e0:5c:a2:56:3a:91:
18:88:98:2f:6f:60:c0:c8:12:7b:c3:71:e1:59:7b:
49:7c:38:26:3b:e8:97:c5:71:2e:c9:f3:2e:54:ca:
5d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:2D:60:0B:D6:2B:C1:0B:39:03:B0:AE:EB:3A:66:91:33:B5:89:18
X509v3 Authority Key Identifier:
keyid:4C:33:C0:E1:4D:57:EA:BC:3B:65:E3:8A:77:36:BE:BE:49:09:2E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDPA4U1X6rw7ZeOKdza-vkkJLp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:55:55:f5:7b:e3:a3:7d:65:79:ce:65:e4:fd:55:f9:4c:5f:
b4:7b:8e:85:9b:c2:73:a5:0a:ea:5b:e0:90:1e:26:60:66:4a:
ab:86:d3:26:b3:d2:62:f4:92:92:0f:96:8d:bc:93:ab:5c:be:
58:c4:fc:4d:66:30:6b:fd:a2:ad:0f:76:f2:0f:04:de:b5:e0:
26:23:d9:2e:f8:ae:ca:e8:f9:7c:1f:59:32:fe:93:c3:c3:f3:
ef:a2:5e:77:a4:51:fc:b8:23:ab:75:80:16:41:11:ce:1d:08:
02:f1:3a:15:fd:00:30:4f:c0:d6:8e:4a:b7:0a:38:97:ab:ba:
81:4f:c3:83:0b:d1:56:cc:d1:f2:ad:a6:c7:0d:ce:25:28:7e:
6d:58:8b:01:50:af:73:06:4d:b7:b6:9d:45:9b:60:1c:75:76:
bf:7f:fb:ac:77:5a:ec:92:c8:91:09:a7:fe:09:f1:1f:20:84:
9a:5b:87:dd:6c:73:d1:73:7f:dc:ef:b7:0d:3a:f6:01:22:1c:
b9:4b:97:1c:d1:dd:f1:76:86:67:28:01:5f:9a:4e:24:eb:2c:
ba:bb:be:f5:22:2f:4e:50:aa:82:3d:d3:c7:c2:d0:95:60:10:
48:fc:58:88:65:54:4e:08:4d:5a:2c:0b:1b:2e:e8:fa:61:27:
f5:90:de:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:30:03 2025 by rpki-client