Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.mft
File: tdh_3Ccq4Fhhh4bnQXB1V79OGjM.mft (raw, json)
Hash identifier: 4WzymWetDkF458Mqea4qW19TiQpXEmNAgr74w7d8zBc=
Subject key identifier: 4C:16:9B:90:ED:3D:F6:94:D3:D7:16:72:A0:60:3E:F8:93:E4:29:42
Authority key identifier: B5:D8:7F:DC:27:2A:E0:58:61:87:86:E7:41:70:75:57:BF:4E:1A:33
Certificate issuer: /CN=b5d87fdc272ae058618786e741707557bf4e1a33
Certificate serial: 0199FB7CC51D011D93D49A3299D333452FAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.mft
Manifest number: 047D
Signing time: Sun 19 Oct 2025 08:01:21 +0000
Manifest this update: Sun 19 Oct 2025 08:01:21 +0000
Manifest next update: Mon 20 Oct 2025 08:01:21 +0000
Files and hashes: 1: qQy9nbutIB840i93Gc6Vw1Yt6lA.roa (hash: 65g5a8+QhFyUXfSxWzLsMCFvk+W/xMxKhOR8kW2aeMw=)
2: tdh_3Ccq4Fhhh4bnQXB1V79OGjM.crl (hash: ID2lMlIyLQNroNdVuVY/ry9Dt2CjL93iCgD3+EozSK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:c5:1d:01:1d:93:d4:9a:32:99:d3:33:45:2f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5d87fdc272ae058618786e741707557bf4e1a33
Validity
Not Before: Oct 19 08:01:21 2025 GMT
Not After : Oct 20 08:01:21 2025 GMT
Subject: CN=4c169b90ed3df694d3d71672a0603ef893e42942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:87:3c:2d:28:da:55:cc:0c:7e:0b:63:62:00:
0c:fe:0f:5a:5a:6c:74:9f:e1:34:74:f6:6e:7e:65:
40:85:f7:c6:d5:b2:27:d1:b6:9b:c9:07:29:1e:25:
48:fc:1f:a4:8c:21:2f:18:86:14:20:d1:5a:43:74:
a5:36:4c:47:dc:f8:69:c0:16:dc:19:fa:ca:74:38:
16:5c:e1:d3:e2:30:50:a7:13:a5:aa:81:b9:21:ba:
d1:64:20:15:b4:4f:99:06:10:44:46:4f:f7:9d:bf:
82:b2:06:36:53:e6:7b:f9:8d:a2:40:f1:f3:c5:9c:
1a:e9:21:e7:58:a2:cc:64:91:84:de:f2:18:be:91:
e4:94:d9:39:25:2a:fb:e8:a3:8a:f8:7a:4f:6e:bf:
ff:f9:19:b6:96:ab:d9:80:fc:b7:3e:50:06:49:77:
1c:3c:5b:cf:bc:37:4b:ae:7a:11:5c:ea:b5:14:b7:
0a:84:3e:fc:e3:37:49:a6:54:3e:ce:32:3a:6b:4a:
ac:89:e1:ce:d5:b6:f7:63:98:75:d2:01:a2:ca:ce:
d5:b7:e6:b1:06:ed:98:a0:b6:14:1c:77:7e:3a:25:
90:3c:03:81:e2:e5:40:fb:35:5b:24:4d:06:d8:d2:
e7:0e:21:5b:21:99:88:32:0b:4c:6a:d1:3d:4b:68:
08:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:16:9B:90:ED:3D:F6:94:D3:D7:16:72:A0:60:3E:F8:93:E4:29:42
X509v3 Authority Key Identifier:
keyid:B5:D8:7F:DC:27:2A:E0:58:61:87:86:E7:41:70:75:57:BF:4E:1A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:7c:f9:24:de:60:3e:25:16:cf:1e:2f:bb:e1:40:c7:24:1b:
50:8a:21:3d:31:c3:b2:61:d3:a0:4b:34:52:db:8e:59:5b:11:
af:be:45:53:a0:a5:4b:44:e1:d6:cc:cb:1f:c8:3d:0a:f6:c3:
55:ec:63:27:86:cb:df:99:50:82:44:97:bf:e0:93:16:7f:cb:
05:9b:0a:c3:1c:07:81:c8:a7:d0:e2:45:57:70:60:7d:72:04:
aa:40:27:b7:34:c1:b2:41:dc:94:c2:70:16:e1:4c:a8:70:e3:
fa:8d:33:5e:03:40:39:63:a3:7c:a0:71:ae:88:22:46:3c:2a:
43:d8:6d:d4:73:3e:09:aa:5f:44:dc:7e:1d:03:96:5d:35:6b:
ad:72:49:25:bf:ba:13:ff:b2:80:7c:fd:cc:e6:a9:8e:fc:da:
16:17:8c:51:54:13:d9:20:ce:49:45:d9:3f:2d:da:ff:c5:9c:
0e:3f:77:5e:45:d9:ee:cb:c3:d8:6b:a6:23:5d:83:2c:9c:54:
18:69:66:fb:f4:98:30:15:3b:01:ea:f6:6e:b8:69:94:97:eb:
e6:7e:1a:d6:c9:8b:07:37:d9:e6:0c:7e:f3:47:3c:9b:e4:b6:
57:e8:da:23:7b:2e:51:51:2b:11:a2:fc:7b:b3:13:bf:b3:19:
5c:95:12:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:50:05 2025 by rpki-client