Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.mft
File: tdh_3Ccq4Fhhh4bnQXB1V79OGjM.mft (raw, json)
Hash identifier: mYdd3F6fKLQYZtIWLi9wmA5amPbBfv2JHIuK21mp83Y=
Subject key identifier: 87:A5:F3:72:AA:09:F9:33:1C:79:D2:2C:85:45:33:F0:7A:8A:A1:AE
Authority key identifier: B5:D8:7F:DC:27:2A:E0:58:61:87:86:E7:41:70:75:57:BF:4E:1A:33
Certificate issuer: /CN=b5d87fdc272ae058618786e741707557bf4e1a33
Certificate serial: 0198D4046372343092429D8DCE72005DB91D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.mft
Manifest number: 03E4
Signing time: Fri 22 Aug 2025 23:01:53 +0000
Manifest this update: Fri 22 Aug 2025 23:01:53 +0000
Manifest next update: Sat 23 Aug 2025 23:01:53 +0000
Files and hashes: 1: qQy9nbutIB840i93Gc6Vw1Yt6lA.roa (hash: 65g5a8+QhFyUXfSxWzLsMCFvk+W/xMxKhOR8kW2aeMw=)
2: tdh_3Ccq4Fhhh4bnQXB1V79OGjM.crl (hash: raAf1FGGYiTIJVd9PuGdGtrA6cmj7inOzPWYwM4daHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:63:72:34:30:92:42:9d:8d:ce:72:00:5d:b9:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5d87fdc272ae058618786e741707557bf4e1a33
Validity
Not Before: Aug 22 23:01:53 2025 GMT
Not After : Aug 23 23:01:53 2025 GMT
Subject: CN=87a5f372aa09f9331c79d22c854533f07a8aa1ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5a:51:fe:b0:a9:4b:0b:23:26:3a:fc:c1:7d:
76:e2:8e:81:2c:8c:b4:a3:39:5b:a3:68:8d:2c:fa:
57:3c:2b:61:de:8e:6e:81:78:8b:a3:fd:b1:62:1c:
8d:d8:d7:f6:ba:24:fa:5e:19:60:8f:46:42:e6:a8:
d3:4f:41:d0:63:4b:42:94:1f:a9:7e:27:9d:6f:27:
e3:0a:b1:60:14:e4:52:60:ec:d3:1c:b0:c2:9a:20:
d2:2c:5d:d0:81:57:ac:bf:e9:33:f1:f7:b5:e2:fa:
bd:84:4c:19:1d:f0:10:93:df:cc:2c:a9:7e:96:c8:
ca:ac:6c:0c:9b:37:96:89:84:22:fc:19:65:99:51:
3b:b8:38:4d:59:88:2c:d4:7f:4c:ba:8e:7d:fc:df:
d6:08:94:2d:96:81:7e:87:7b:32:d5:44:1a:7b:3a:
ed:d0:92:e5:f4:89:0d:d6:70:31:49:f7:02:81:19:
10:c0:6e:95:b4:ad:2d:0f:0c:9b:f6:f4:18:e2:8f:
38:8b:4b:77:9d:64:1c:c6:09:60:d0:80:a3:1d:3e:
4b:78:e6:0a:b3:26:65:4e:c5:09:a2:1b:c2:57:7e:
ab:4b:5f:79:8c:77:da:93:6a:bf:73:c9:1d:0f:e8:
18:15:22:73:1f:d3:20:b2:24:0d:5f:19:f7:f4:ca:
0e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A5:F3:72:AA:09:F9:33:1C:79:D2:2C:85:45:33:F0:7A:8A:A1:AE
X509v3 Authority Key Identifier:
keyid:B5:D8:7F:DC:27:2A:E0:58:61:87:86:E7:41:70:75:57:BF:4E:1A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:85:31:3b:d0:6e:45:1f:30:c3:6a:ec:fa:5a:15:ad:7f:8d:
c4:29:2a:f2:1c:c5:7e:22:1b:2e:89:16:64:c2:4a:22:ff:77:
07:cf:db:e9:d4:01:8c:dc:63:04:62:7c:2f:d7:b6:2d:1f:38:
5d:e8:d3:11:9b:6f:fd:e5:2c:90:0f:8e:0b:12:f0:f3:0b:6f:
fe:0a:04:01:be:49:24:9a:59:45:b7:ee:af:8d:63:66:b4:8f:
19:72:84:2d:cf:b8:34:09:d8:c9:bb:2c:75:94:69:fd:9c:0b:
77:e2:44:ad:41:68:cc:c6:22:72:7e:28:f8:53:8f:93:19:07:
ab:c0:8c:1e:8f:64:95:37:63:7c:c0:5c:4e:2a:a3:51:8d:41:
6a:40:6c:b9:d8:56:40:18:2e:0e:c9:90:52:4e:27:60:c0:3a:
ca:65:2b:fb:a4:20:01:19:31:10:0f:97:91:1a:56:46:ea:9d:
d4:f3:68:d7:a5:8b:df:1e:24:da:b3:ae:fa:f9:6b:64:88:73:
52:9e:79:bf:42:b7:d7:b0:0a:66:09:1a:be:57:ea:5b:77:6c:
18:93:ef:ee:df:3f:0a:2c:30:4a:66:ee:12:83:97:80:30:e6:
47:e0:da:3c:c8:38:27:04:b0:b2:53:7f:f3:d5:be:51:fc:77:
be:e8:a3:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:14:18 2025 by rpki-client