Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
File: TD6do79ZOALMgz_l2UelJpb1jI0.mft (raw, json)
Hash identifier: 8a3ggPjF6bMAyefI2EXFE+jEcTUloO0y6zzYTtAsrw0=
Subject key identifier: C8:34:3B:15:A7:E1:ED:32:15:E6:3F:41:61:AA:80:EE:FA:B2:CC:03
Authority key identifier: 4C:3E:9D:A3:BF:59:38:02:CC:83:3F:E5:D9:47:A5:26:96:F5:8C:8D
Certificate issuer: /CN=4c3e9da3bf593802cc833fe5d947a52696f58c8d
Certificate serial: 019A52D228C04684630DECE81957C1B8CF5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
Manifest number: 164F
Signing time: Wed 05 Nov 2025 07:01:35 +0000
Manifest this update: Wed 05 Nov 2025 07:01:35 +0000
Manifest next update: Thu 06 Nov 2025 07:01:35 +0000
Files and hashes: 1: EWuOguv1P9Rw7Q-U1qAW9dBN2No.roa (hash: rN97euvDe5WCriK9EjJsNO5wn2cUGLmPhpQvNqo71q8=)
2: TD6do79ZOALMgz_l2UelJpb1jI0.crl (hash: EuT6hmGONCfB/7CcZUcgQrEAYny/dITbueo7XtbFVUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:28:c0:46:84:63:0d:ec:e8:19:57:c1:b8:cf:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3e9da3bf593802cc833fe5d947a52696f58c8d
Validity
Not Before: Nov 5 07:01:35 2025 GMT
Not After : Nov 6 07:01:35 2025 GMT
Subject: CN=c8343b15a7e1ed3215e63f4161aa80eefab2cc03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:79:6c:ca:8a:0f:e4:1a:cf:24:f9:9f:2e:f7:
8d:69:90:4e:6b:74:3b:70:99:38:9c:35:3d:e9:8f:
f7:b9:c9:10:d3:a5:61:9b:d3:4b:b9:f2:50:7e:e6:
35:a3:6a:25:73:f5:bf:d9:51:d9:62:83:df:9b:b5:
98:7a:f5:7e:73:89:24:bb:36:6b:eb:53:65:5b:24:
34:61:ef:a6:4d:a5:65:98:0e:bf:5a:43:6e:ff:74:
ae:91:be:b4:42:1a:88:4a:9b:a7:13:ff:6b:c0:3e:
fe:f0:c9:04:81:8b:6c:be:ad:4b:96:7b:dd:8c:98:
d2:21:8c:3a:17:e8:ae:d4:af:42:16:2a:8f:13:5d:
ea:18:d9:f1:8a:51:d2:6d:0b:ed:ba:cb:28:98:8d:
13:fc:1e:d2:d1:e2:ca:1d:c8:cd:14:9b:74:7b:ca:
fb:24:74:13:62:a6:8a:77:06:d7:32:4c:8b:4c:69:
a0:32:73:67:a0:1b:87:41:ac:ef:77:34:24:ec:71:
69:fc:99:9b:1f:1a:bc:08:f7:41:d1:88:65:6e:7e:
fe:69:e9:c7:ad:31:a4:8b:6a:27:ac:ce:49:57:b0:
25:57:96:d7:98:fb:46:6d:a5:37:6a:ad:1c:69:ee:
75:df:0f:bd:de:5a:55:dc:81:27:37:53:80:46:8b:
d8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:34:3B:15:A7:E1:ED:32:15:E6:3F:41:61:AA:80:EE:FA:B2:CC:03
X509v3 Authority Key Identifier:
keyid:4C:3E:9D:A3:BF:59:38:02:CC:83:3F:E5:D9:47:A5:26:96:F5:8C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:91:da:12:1f:7d:4b:1b:62:84:fa:5b:bc:59:b7:eb:2e:e8:
53:fe:66:05:40:99:5a:83:d7:39:5b:64:7e:ec:c8:f1:63:26:
4b:c6:93:9a:f0:48:f4:8c:be:a6:82:da:cd:be:a4:cd:bb:7a:
60:a0:2f:27:49:22:cc:7d:45:78:54:ae:43:13:85:c5:24:da:
c7:35:56:0e:78:de:50:6d:c1:eb:3f:9e:f6:b7:0f:09:67:87:
b5:09:54:2a:14:1c:ad:cd:6b:c6:9d:32:92:b1:53:3a:20:b9:
20:42:0e:d9:2d:05:93:a1:53:fa:44:d7:56:b2:1c:07:44:c3:
7a:33:52:60:06:fc:b4:c5:4d:62:71:ca:cd:76:17:16:e6:84:
73:80:2c:10:3e:5e:9f:65:ae:74:ed:35:ca:03:39:df:f5:ab:
bc:c3:84:6b:ea:30:2a:f4:27:00:88:ba:e4:93:1d:59:00:11:
07:5a:cf:00:90:93:82:23:46:e0:b3:aa:14:5f:19:cd:aa:32:
cd:49:2e:2c:22:b6:91:4c:ea:18:da:4c:26:57:2a:9d:6d:49:
80:6b:d6:58:86:d4:4b:4a:93:15:ce:01:93:db:da:73:31:49:
56:7a:2a:d8:ab:1d:78:20:00:34:05:86:52:11:e5:a8:70:39:
be:21:fb:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:55:24 2025 by rpki-client