Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
File: TdbneabA8LCSFmIjgEZ9zi0Roxg.mft (raw, json)
Hash identifier: Q5vxpcJOW+7KEiMV28aFnjMEAhsqVXSZF3qSrWiLotI=
Subject key identifier: 99:9F:36:D4:AC:0D:80:21:22:75:F0:C7:A1:26:75:FB:1B:4B:66:7B
Authority key identifier: 4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18
Certificate issuer: /CN=4dd6e779a6c0f0b09216622380467dce2d11a318
Certificate serial: 0199FBEBC821BB2DF873D6C1B4F5832A87F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
Manifest number: 1674
Signing time: Sun 19 Oct 2025 10:02:37 +0000
Manifest this update: Sun 19 Oct 2025 10:02:37 +0000
Manifest next update: Mon 20 Oct 2025 10:02:37 +0000
Files and hashes: 1: TdbneabA8LCSFmIjgEZ9zi0Roxg.crl (hash: eDwPjsrBn8s/ZEmcUHdtMOoAzps866qSQ9j6L6U003k=)
2: gjoyy0FPdmf2zrdNnLaoUXfqkA8.roa (hash: RTgHJsDHudCpwL05o4vGq9BVppolqh2KaIXjwJZDWfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:c8:21:bb:2d:f8:73:d6:c1:b4:f5:83:2a:87:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd6e779a6c0f0b09216622380467dce2d11a318
Validity
Not Before: Oct 19 10:02:37 2025 GMT
Not After : Oct 20 10:02:37 2025 GMT
Subject: CN=999f36d4ac0d80212275f0c7a12675fb1b4b667b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a3:6f:14:f1:1b:2b:1c:99:ae:a1:88:fc:57:
3c:30:d9:ac:7e:76:6b:18:e0:00:d1:d4:3a:d2:97:
6d:d4:46:1b:a3:6d:1d:41:e5:84:f9:3c:2b:0d:d3:
4f:c8:78:ba:b4:38:d2:d1:30:bd:2f:2a:81:f3:4c:
1b:9b:35:e6:99:69:4d:2c:f9:4a:9b:6d:b0:68:b8:
d0:2d:3a:22:5a:49:f8:d6:ed:f6:8c:11:b1:17:3e:
4c:fe:19:be:c5:8b:72:4c:a6:8d:7d:7a:c2:38:d7:
7b:7f:b7:3c:b8:3c:cf:61:73:a6:9b:96:a6:a8:b8:
e0:e7:44:c6:da:63:a0:78:83:fc:0d:8e:b8:b3:8b:
af:b5:0f:76:12:0f:68:10:a3:49:d4:48:b3:84:0d:
f8:c5:4a:1f:97:21:5d:d0:9b:83:be:85:ed:7a:4b:
2f:35:25:5d:f9:1d:82:6c:15:5b:15:ca:d1:56:fe:
27:72:5b:da:3e:f9:c0:cf:91:2e:e7:83:26:d3:47:
6e:09:dc:36:8d:5d:2b:51:eb:ff:bd:22:f4:94:b2:
68:9f:77:57:d4:6b:27:1b:12:98:3c:cf:d8:3e:7f:
a5:f3:50:52:f0:d7:3c:f5:94:6f:7c:b1:76:6f:95:
ae:57:da:27:2b:f4:16:96:45:69:4c:75:7f:38:bd:
56:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:9F:36:D4:AC:0D:80:21:22:75:F0:C7:A1:26:75:FB:1B:4B:66:7B
X509v3 Authority Key Identifier:
keyid:4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:86:66:fe:e7:20:51:ff:69:d9:1d:b8:11:aa:59:d5:e4:e1:
d3:9a:de:b9:81:ae:6b:00:7e:1e:d5:8d:bc:e1:d7:42:71:d9:
a6:5f:ee:f6:bd:c0:af:b1:7c:2f:70:24:2f:28:8e:f3:cf:86:
ee:cd:ee:6c:61:99:4a:19:f7:d9:40:0e:cf:26:1a:8c:ff:e7:
85:c8:af:58:4c:04:7f:c7:67:d9:bd:c9:bc:09:18:30:68:a4:
38:fe:17:c0:8e:af:10:d8:2a:b8:9c:28:1f:d4:9d:b7:02:f7:
3c:95:03:de:ad:1a:84:5d:0e:64:d8:ff:89:f1:93:c8:2c:14:
df:01:96:ea:6e:b6:16:54:60:ec:94:d8:08:db:15:e0:51:2d:
49:79:d2:43:9b:28:88:9b:15:c6:b0:8a:50:46:fe:31:ee:0c:
f9:33:05:2f:3a:f7:c7:f3:f6:d7:f6:d4:6a:f2:21:a8:df:64:
b6:f5:c1:20:34:5e:36:27:38:1f:37:03:2b:81:fb:6c:a4:fb:
9d:af:40:5e:2a:92:7e:88:b0:a9:79:bb:ad:7d:ba:4e:cb:7b:
e7:8d:ea:d4:b6:49:17:37:25:7e:0c:3e:4e:74:76:c1:2a:02:
90:29:f5:59:66:2a:d5:e2:27:29:b7:8e:10:8e:6a:59:34:ca:
e4:44:ad:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn768ghuy34c9bBtPWDKof1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZDZlNzc5YTZjMGYwYjA5MjE2NjIyMzgwNDY3ZGNlMmQx
MWEzMTgwHhcNMjUxMDE5MTAwMjM3WhcNMjUxMDIwMTAwMjM3WjAzMTEwLwYDVQQD
Eyg5OTlmMzZkNGFjMGQ4MDIxMjI3NWYwYzdhMTI2NzVmYjFiNGI2NjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16NvFPEbKxyZrqGI/Fc8MNmsfnZr
GOAA0dQ60pdt1EYbo20dQeWE+TwrDdNPyHi6tDjS0TC9LyqB80wbmzXmmWlNLPlK
m22waLjQLToiWkn41u32jBGxFz5M/hm+xYtyTKaNfXrCONd7f7c8uDzPYXOmm5am
qLjg50TG2mOgeIP8DY64s4uvtQ92Eg9oEKNJ1EizhA34xUoflyFd0JuDvoXteksv
NSVd+R2CbBVbFcrRVv4nclvaPvnAz5Eu54Mm00duCdw2jV0rUev/vSL0lLJon3dX
1GsnGxKYPM/YPn+l81BS8Nc89ZRvfLF2b5WuV9onK/QWlkVpTHV/OL1WkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJmfNtSsDYAhInXwx6EmdfsbS2Z7MB8GA1UdIwQY
MBaAFE3W53mmwPCwkhZiI4BGfc4tEaMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGRibmVhYkE4TENTRm1JamdFWjl6aTBSb3hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9mMGIyODUtZDAzOC00ZGU2LTkzNzQt
YzQ3MmU2MmViZWE4LzEvVGRibmVhYkE4TENTRm1JamdFWjl6aTBSb3hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9mMGIyODUtZDAzOC00ZGU2LTkzNzQtYzQ3MmU2MmViZWE4
LzEvVGRibmVhYkE4TENTRm1JamdFWjl6aTBSb3hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS4Zm/ucg
Uf9p2R24EapZ1eTh05reuYGuawB+HtWNvOHXQnHZpl/u9r3Ar7F8L3AkLyiO88+G
7s3ubGGZShn32UAOzyYajP/nhcivWEwEf8dn2b3JvAkYMGikOP4XwI6vENgquJwo
H9SdtwL3PJUD3q0ahF0OZNj/ifGTyCwU3wGW6m62FlRg7JTYCNsV4FEtSXnSQ5so
iJsVxrCKUEb+Me4M+TMFLzr3x/P21/bUavIhqN9ktvXBIDReNic4HzcDK4H7bKT7
na9AXiqSfoiwqXm7rX26Tst7543q1LZJFzclfgw+TnR2wSoCkCn1WWYq1eInKbeO
EI5qWTTK5ESt6g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:57:20 2025 by rpki-client