Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.mft
File: tmdL-ORX4pV-7k9R-Le0TFfbmio.mft (raw, json)
Hash identifier: aBHQauPmfmh0eOSRfrlxa1qA6GTmWHXQla/WV3Dln60=
Subject key identifier: 0B:3B:7C:96:D7:83:D4:8E:24:A9:07:23:DE:5D:5E:17:DC:F3:93:EA
Authority key identifier: B6:67:4B:F8:E4:57:E2:95:7E:EE:4F:51:F8:B7:B4:4C:57:DB:9A:2A
Certificate issuer: /CN=b6674bf8e457e2957eee4f51f8b7b44c57db9a2a
Certificate serial: 019A503E42F28645601C18E9E32A8A8CB4AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmdL-ORX4pV-7k9R-Le0TFfbmio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.mft
Manifest number: 1108
Signing time: Tue 04 Nov 2025 19:00:48 +0000
Manifest this update: Tue 04 Nov 2025 19:00:48 +0000
Manifest next update: Wed 05 Nov 2025 19:00:48 +0000
Files and hashes: 1: tmdL-ORX4pV-7k9R-Le0TFfbmio.crl (hash: +AzyH+lIwaKaFV0vVc+brwwHMCNswscrl/pmMuBkrcA=)
2: tyBiH_k1-T3tg2PjNihavpjVNFg.roa (hash: +MCpw/+jgYqZnXSoZlFEXezP/GiLWQcwVakj6OdX0hc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.mft
rsync://rpki.ripe.net/repository/DEFAULT/tmdL-ORX4pV-7k9R-Le0TFfbmio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:42:f2:86:45:60:1c:18:e9:e3:2a:8a:8c:b4:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6674bf8e457e2957eee4f51f8b7b44c57db9a2a
Validity
Not Before: Nov 4 19:00:48 2025 GMT
Not After : Nov 5 19:00:48 2025 GMT
Subject: CN=0b3b7c96d783d48e24a90723de5d5e17dcf393ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6a:37:46:af:d6:68:36:c8:b5:c0:ad:cb:ce:
9e:52:94:43:be:09:1b:13:36:23:ac:e7:71:88:1b:
8c:38:fd:bc:ed:f6:2e:59:df:85:54:fb:f1:c9:1a:
e6:34:f5:cb:9c:c6:71:ec:1b:80:65:71:9f:40:eb:
71:fa:54:26:df:fd:75:33:96:b1:5f:a8:50:c9:d9:
71:8d:a6:f7:44:f1:40:84:03:6c:3f:4c:86:b6:4d:
c2:be:82:8d:a6:a0:e8:69:2b:ae:99:1b:8f:b6:c5:
08:89:60:7d:1e:7c:02:66:07:34:1a:59:15:db:55:
a1:4d:6d:59:c6:32:18:cd:85:93:cb:24:cc:a8:09:
11:99:02:9b:79:d9:d0:4f:ec:33:da:f2:16:8b:bc:
ff:d3:5f:2d:2d:4e:2b:d5:b0:ad:a4:2a:f0:8b:50:
f9:03:b3:de:6a:0b:f3:64:7d:5f:bf:24:e3:97:e6:
55:d3:5e:55:2a:f0:5d:4f:85:06:da:2f:a6:e2:94:
5d:89:f5:4b:cb:18:0d:99:b7:77:73:a9:99:89:28:
37:2c:4f:47:25:73:8d:df:24:54:7d:4e:7c:7e:a7:
d1:15:99:6b:9f:27:46:6c:de:7f:93:87:d2:d0:df:
fe:b9:0c:cc:0d:97:e1:b2:a8:38:1c:a8:96:ea:15:
cb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:3B:7C:96:D7:83:D4:8E:24:A9:07:23:DE:5D:5E:17:DC:F3:93:EA
X509v3 Authority Key Identifier:
keyid:B6:67:4B:F8:E4:57:E2:95:7E:EE:4F:51:F8:B7:B4:4C:57:DB:9A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmdL-ORX4pV-7k9R-Le0TFfbmio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:13:b4:63:6d:31:e5:bb:13:65:09:da:16:4b:1f:58:df:0d:
84:1a:e5:0e:a7:19:d7:5d:d9:8d:d7:9f:81:be:ae:d3:3a:a3:
e6:26:bf:24:a6:3b:c6:7d:f2:2d:2b:86:1f:b4:65:82:dd:07:
b9:2b:0c:d9:61:c7:0c:1c:a3:2f:df:1c:62:44:59:10:3d:39:
20:fa:9a:57:63:3a:be:64:35:37:b6:22:48:7d:56:6c:6b:24:
0d:cc:f8:30:df:fc:d6:d9:b1:1d:f7:2c:3d:9a:3e:83:e8:17:
7c:c0:8f:27:5b:a7:64:a3:1a:00:df:fc:4c:17:ca:c9:9c:6d:
7f:ef:f9:53:50:41:00:a2:62:67:b1:b3:07:43:17:1f:a0:ca:
21:2d:f7:69:d0:61:73:e4:13:b8:d6:a5:b5:6c:27:6c:37:e9:
2c:ad:c8:56:22:69:e7:fe:d1:a2:5f:49:5a:43:ce:19:93:b2:
83:54:ed:66:c4:4b:02:f1:f7:25:a4:23:ac:98:2e:bd:a8:25:
f9:58:4d:62:a5:bb:33:90:2f:3e:d3:f0:4d:e2:7a:2c:5f:c4:
56:35:96:37:09:68:8e:1a:77:ce:96:26:66:d1:a4:3e:68:1e:
16:cd:72:55:66:a4:2b:df:dc:65:82:8b:b8:80:f8:d5:f0:eb:
b6:68:6b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:31 2025 by rpki-client