Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
File: TddPu7rljdCHbZnoDsgqEaRHf34.mft (raw, json)
Hash identifier: kBaw4SR9J7XTJgMNASYrwqQrynReF77UucKYtBLu9RY=
Subject key identifier: 14:16:6F:65:10:BA:90:24:3F:78:48:83:0C:38:E7:58:2A:BC:07:0F
Authority key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
Certificate issuer: /CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Certificate serial: 0199FB0F4166F2A127A771D3F05482CE29DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
Manifest number: 0EE1
Signing time: Sun 19 Oct 2025 06:01:44 +0000
Manifest this update: Sun 19 Oct 2025 06:01:44 +0000
Manifest next update: Mon 20 Oct 2025 06:01:44 +0000
Files and hashes: 1: 4Jp18k3WgZxFLlIl31FziAZ_pyE.roa (hash: Rdy6GJGskKOgLLcQAYAa6TgfgY93QdTyE4LXA4WR8FE=)
2: J-mZDParjvz3ljIfTzlhasavsBo.roa (hash: X+bwHIE0wlCUwYusUU0uKi4Yc/Kz9/L2eOGJbsIOXJw=)
3: JbzhdefJbSbcMWzYg2HKOZi42yQ.roa (hash: Lr8qqBdkJKxtoR5S2Pga1jAiow0N/LgTqH30jZ9Ys0M=)
4: TddPu7rljdCHbZnoDsgqEaRHf34.crl (hash: p3jHamLMde2/GztJybBEJ10BDrJVCcnwyQsIzlkyBbU=)
5: cxjVghHfKz7r8jK0ajPAm20QF-U.roa (hash: HPsMihI6S6ZtrZUoih477ooLtwdT/SYfO2io/vTyfY8=)
6: d852wo13D922O1kxvHO2L_8C0MU.roa (hash: HBCOzohfyjSX600EtZoiv9El3W7QzIDEos4plB6TxSI=)
7: hDkefyVIo6CtSmC9usLxfbXSHJo.roa (hash: 2L43qW8nvv7ZuypirwxJV5b95hzLgxd1pp/3t2CraNw=)
8: jIbMiSFlsQdlGZXR1HxPoO5c35o.roa (hash: QE4Ii8v6WxF41ed0I+H7egny9WwHZOU3Z66ypjFLn7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:41:66:f2:a1:27:a7:71:d3:f0:54:82:ce:29:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Validity
Not Before: Oct 19 06:01:44 2025 GMT
Not After : Oct 20 06:01:44 2025 GMT
Subject: CN=14166f6510ba90243f7848830c38e7582abc070f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ff:d8:84:0f:2a:4c:de:75:da:f7:4a:48:1a:
c9:85:b7:fb:78:43:6c:50:8a:40:e4:92:f9:2c:c3:
4f:a7:9d:13:77:74:4d:23:bd:d6:dd:bc:2d:01:93:
89:34:3d:c6:ad:ff:fa:0c:ae:16:aa:21:39:7a:93:
9c:a3:88:59:d7:eb:19:b0:e0:57:06:04:54:8b:1b:
95:48:4c:bd:e0:16:50:e5:35:23:19:13:0f:94:0e:
2a:06:26:e1:80:4a:ae:79:72:c5:49:94:29:d9:cd:
57:32:fa:c6:1c:0e:07:43:23:77:f6:ed:40:c0:43:
21:2e:d5:d2:79:01:2f:c2:76:1e:6b:e9:74:0a:8a:
d9:22:b4:ad:60:04:85:63:2c:14:2d:e1:64:7d:76:
a8:f2:c5:65:a4:04:d9:ce:5d:95:a0:b4:e2:2d:e9:
98:09:33:fe:bb:c1:2f:ea:16:47:21:1d:2c:8d:6f:
40:7a:46:35:c2:d0:32:7a:98:bc:d1:b0:a0:b5:4e:
00:ef:ff:6f:6a:61:8d:28:1f:bc:6c:e9:59:ca:77:
82:a5:4b:04:41:0a:59:08:ad:a5:ae:15:51:71:cf:
53:62:1b:c7:0f:81:e3:f8:11:68:e9:f5:44:38:a2:
d7:06:86:e3:03:bc:f7:a9:f5:e1:82:18:a1:46:ac:
bc:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:16:6F:65:10:BA:90:24:3F:78:48:83:0C:38:E7:58:2A:BC:07:0F
X509v3 Authority Key Identifier:
keyid:4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:76:63:19:a6:a8:6c:7a:28:7a:ce:ef:80:35:c3:3b:b1:15:
e0:5a:fd:b1:a5:22:9a:0b:cb:a8:d3:a4:90:2e:2b:89:ed:52:
a9:1b:1d:4e:e5:89:63:69:0b:fa:5d:c6:a6:2b:62:bf:01:48:
bf:44:e0:45:4e:1c:20:c1:c8:6b:4d:eb:06:8a:e7:81:f5:29:
4c:af:d2:a6:3c:ad:cc:f5:fc:c4:51:cb:6c:6c:01:a7:61:4b:
2c:14:ac:eb:d6:9d:de:22:b9:dc:29:d9:3a:a5:3c:20:3e:44:
5f:01:0c:d5:9e:26:be:70:ac:12:b3:fd:c3:67:70:8e:16:d7:
27:05:09:aa:c3:56:81:05:94:57:6e:eb:be:3b:aa:87:41:21:
67:56:d9:7c:0a:86:73:05:ed:c3:4c:bd:eb:01:fa:df:4f:cf:
be:45:06:53:23:0c:ee:8e:04:78:94:a9:9d:6e:3b:a3:e2:1e:
51:1e:88:a5:74:09:8b:d2:b4:74:73:8a:06:af:63:94:a1:4a:
5e:0f:75:50:65:3c:d9:71:a9:cd:b3:90:dd:7d:b4:bc:79:73:
ca:a9:e9:2e:aa:80:09:1b:94:39:1c:16:3a:cc:6c:d4:9d:2f:
ff:5a:cd:51:cc:36:42:96:ca:c8:ac:b3:67:62:c4:99:df:b9:
55:ae:0a:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7D0Fm8qEnp3HT8FSCzinaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZDc0ZmJiYmFlNThkZDA4NzZkOTllODBlYzgyYTExYTQ0
NzdmN2UwHhcNMjUxMDE5MDYwMTQ0WhcNMjUxMDIwMDYwMTQ0WjAzMTEwLwYDVQQD
EygxNDE2NmY2NTEwYmE5MDI0M2Y3ODQ4ODMwYzM4ZTc1ODJhYmMwNzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo//YhA8qTN512vdKSBrJhbf7eENs
UIpA5JL5LMNPp50Td3RNI73W3bwtAZOJND3Grf/6DK4WqiE5epOco4hZ1+sZsOBX
BgRUixuVSEy94BZQ5TUjGRMPlA4qBibhgEqueXLFSZQp2c1XMvrGHA4HQyN39u1A
wEMhLtXSeQEvwnYea+l0CorZIrStYASFYywULeFkfXao8sVlpATZzl2VoLTiLemY
CTP+u8Ev6hZHIR0sjW9AekY1wtAyepi80bCgtU4A7/9vamGNKB+8bOlZyneCpUsE
QQpZCK2lrhVRcc9TYhvHD4Hj+BFo6fVEOKLXBobjA7z3qfXhghihRqy85QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBQWb2UQupAkP3hIgww451gqvAcPMB8GA1UdIwQY
MBaAFE3XT7u65Y3Qh22Z6A7IKhGkR39+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGRkUHU3cmxqZENIYlpub0RzZ3FFYVJIZjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZjVmNTctZTgyOC00YmNmLThkMmIt
OGVhYjdmNGZlNzdlLzEvVGRkUHU3cmxqZENIYlpub0RzZ3FFYVJIZjM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi85ZjVmNTctZTgyOC00YmNmLThkMmItOGVhYjdmNGZlNzdl
LzEvVGRkUHU3cmxqZENIYlpub0RzZ3FFYVJIZjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFXZjGaao
bHooes7vgDXDO7EV4Fr9saUimgvLqNOkkC4rie1SqRsdTuWJY2kL+l3GpitivwFI
v0TgRU4cIMHIa03rBorngfUpTK/SpjytzPX8xFHLbGwBp2FLLBSs69ad3iK53CnZ
OqU8ID5EXwEM1Z4mvnCsErP9w2dwjhbXJwUJqsNWgQWUV27rvjuqh0EhZ1bZfAqG
cwXtw0y96wH630/PvkUGUyMM7o4EeJSpnW47o+IeUR6IpXQJi9K0dHOKBq9jlKFK
Xg91UGU82XGpzbOQ3X20vHlzyqnpLqqACRuUORwWOsxs1J0v/1rNUcw2QpbKyKyz
Z2LEmd+5Va4KBw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 12:54:50 2025 by rpki-client