Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
File: TDOTsqG9eRmFmAeDirHjsAN7i08.mft (raw, json)
Hash identifier: Vmb2TlAAzik7v9eO0AEqy4mJko02ruySz/DBzjGaaTo=
Subject key identifier: 05:49:02:24:8C:72:97:A9:4C:2C:90:99:35:A9:0A:76:8D:DF:F2:E5
Authority key identifier: 4C:33:93:B2:A1:BD:79:19:85:98:07:83:8A:B1:E3:B0:03:7B:8B:4F
Certificate issuer: /CN=4c3393b2a1bd7919859807838ab1e3b0037b8b4f
Certificate serial: 019A533EEFAD073DCA849B24237AD21F8BA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDOTsqG9eRmFmAeDirHjsAN7i08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
Manifest number: 0E0B
Signing time: Wed 05 Nov 2025 09:00:24 +0000
Manifest this update: Wed 05 Nov 2025 09:00:24 +0000
Manifest next update: Thu 06 Nov 2025 09:00:24 +0000
Files and hashes: 1: TDOTsqG9eRmFmAeDirHjsAN7i08.crl (hash: rvRXEERVUSOqYsk910uoHHQnO1Eb3Gz4YuRVVqvLS38=)
2: y6xk5yyaeCIuQcfJUMGsvyLuakI.roa (hash: 5cTQO7InxQ4ef2VY7Tlc4nQ2LkIPqai+B4whSvQRHdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDOTsqG9eRmFmAeDirHjsAN7i08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3e:ef:ad:07:3d:ca:84:9b:24:23:7a:d2:1f:8b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3393b2a1bd7919859807838ab1e3b0037b8b4f
Validity
Not Before: Nov 5 09:00:24 2025 GMT
Not After : Nov 6 09:00:24 2025 GMT
Subject: CN=054902248c7297a94c2c909935a90a768ddff2e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:05:79:fe:dc:c3:f1:48:69:f3:63:4d:06:fd:
58:f6:40:fd:76:0a:45:52:79:16:90:4e:57:c3:3b:
f7:93:31:4e:cd:03:9d:ed:0c:67:91:9f:1a:30:73:
87:cf:56:f9:2a:b1:01:12:40:31:97:e7:87:27:4a:
a5:70:c6:85:f2:05:92:70:2d:77:ca:6d:fa:e4:36:
c4:c5:bb:0c:a5:83:01:64:14:82:99:93:44:4f:f3:
83:a8:7b:34:d8:3f:af:62:35:b7:c6:66:7b:42:9d:
26:18:a9:40:38:2a:fd:87:94:31:fd:e7:19:82:f7:
61:2b:41:8b:2f:f2:85:17:2b:d5:69:70:ed:26:82:
1b:e9:c3:d4:cb:8f:00:10:72:e5:b8:81:9e:4c:05:
b0:c3:67:be:b0:d3:ce:fa:4d:6c:27:9e:1c:2c:e8:
f1:13:c7:ed:8f:f9:b6:41:d0:e0:45:bc:d3:de:97:
52:76:bd:70:b0:cc:d3:b9:3d:de:68:3a:36:12:d6:
93:0b:3b:09:54:79:f0:db:db:20:ec:8e:c4:c6:eb:
6b:e2:91:94:27:96:a7:4a:cc:67:81:24:cc:bf:18:
f8:f2:6f:cf:cf:04:ea:13:cb:34:df:88:80:0b:53:
3a:fc:f2:24:99:45:48:19:e1:90:1f:1d:73:b8:71:
06:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:49:02:24:8C:72:97:A9:4C:2C:90:99:35:A9:0A:76:8D:DF:F2:E5
X509v3 Authority Key Identifier:
keyid:4C:33:93:B2:A1:BD:79:19:85:98:07:83:8A:B1:E3:B0:03:7B:8B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDOTsqG9eRmFmAeDirHjsAN7i08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:db:8b:4e:12:27:ef:65:d0:0b:49:50:02:9e:17:0c:6b:4d:
e5:a2:6c:bc:16:12:3e:ff:ff:18:4a:d1:e8:f4:25:d6:30:51:
c0:5b:4d:a5:0e:21:14:8e:dd:ef:86:64:05:ba:fb:9e:b7:5f:
17:a4:c1:a2:6f:77:d0:28:9b:5b:dc:5e:54:4f:14:46:7a:9d:
3e:0b:89:91:95:a7:86:8c:4a:d0:0d:5b:86:c2:cf:a4:2f:de:
ef:0b:13:e4:c2:ae:3c:ae:9a:68:d3:d3:61:a2:d9:14:4d:eb:
64:02:a6:81:d1:bb:20:40:23:7c:61:91:a7:68:a8:ab:6c:85:
f8:eb:7d:26:e1:41:c7:da:22:f0:25:2c:2f:1a:00:20:d7:e0:
92:66:aa:bd:95:1f:64:98:c3:f9:b6:3e:77:99:e3:37:2b:99:
97:a2:8b:ed:b7:eb:da:44:17:d9:cc:bb:34:7d:41:57:50:cc:
54:b4:72:f0:29:4c:b7:21:9a:8f:c5:97:48:7a:d9:63:68:f4:
6b:4f:e2:b3:d8:64:62:47:44:f3:d3:a4:34:67:25:25:eb:ff:
46:9b:4b:88:c4:f4:df:91:7f:14:6e:08:c2:c2:49:00:46:23:
eb:03:d3:54:98:23:a0:51:b2:7a:74:eb:1e:84:c5:66:34:12:
24:ca:27:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:28:52 2025 by rpki-client