Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft
File: TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft (raw, json)
Hash identifier: XBVsRRd+Tp8ixbMVgUxxyB2B+NDrvM5d4Z4FLOFDijI=
Subject key identifier: C2:80:E0:7D:30:E5:37:5B:8C:AF:2F:32:12:0B:32:B8:43:13:59:14
Authority key identifier: 4C:3F:42:8F:D9:83:4C:D5:EC:9B:B1:60:F8:B6:DC:F4:46:EF:5D:93
Certificate issuer: /CN=4c3f428fd9834cd5ec9bb160f8b6dcf446ef5d93
Certificate serial: 0199FC58A4D257D7883467C1FD2758E04701
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft
Manifest number: 10DC
Signing time: Sun 19 Oct 2025 12:01:31 +0000
Manifest this update: Sun 19 Oct 2025 12:01:31 +0000
Manifest next update: Mon 20 Oct 2025 12:01:31 +0000
Files and hashes: 1: GJVV3SoEfsa0pgtLtiw7hYQqnlY.roa (hash: X3L+IE/tHK5/79Ef7HYRs6p2vD8nOugSbhs0gMsz8zU=)
2: TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.crl (hash: JL7H1nGv3XZNIuqpTswT3zFjfEofl2c4OW9/Lncolrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:a4:d2:57:d7:88:34:67:c1:fd:27:58:e0:47:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3f428fd9834cd5ec9bb160f8b6dcf446ef5d93
Validity
Not Before: Oct 19 12:01:31 2025 GMT
Not After : Oct 20 12:01:31 2025 GMT
Subject: CN=c280e07d30e5375b8caf2f32120b32b843135914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:91:94:57:b9:d2:26:05:b6:a4:80:94:f1:1a:
d7:67:94:cc:19:5d:47:ae:69:13:07:c2:f4:5c:7d:
18:b9:f0:bd:77:78:e4:31:42:bf:05:d4:80:2e:ff:
c9:bb:5b:ce:31:e3:67:89:fb:aa:f9:20:95:bd:7c:
35:b4:58:13:cc:b3:b5:1a:08:4d:12:f6:f1:ef:0c:
66:bb:cc:46:cd:e7:0b:0d:02:fc:76:7b:fb:f8:4c:
d1:3f:da:fa:33:13:d9:06:25:b8:6e:ef:61:62:0a:
0d:51:88:e0:6e:11:a6:58:24:7c:60:22:99:74:7c:
9d:d5:f1:66:15:b5:26:b3:f3:67:42:36:b5:36:eb:
9c:e2:1c:ff:b6:81:43:f1:22:f4:da:b4:f7:8a:17:
df:f5:e6:2a:a6:d9:0f:44:36:8d:8f:2c:6e:13:b4:
fb:8a:7c:6a:7f:7b:88:bd:5e:76:16:ec:7d:f2:87:
56:26:e2:62:45:a9:6c:33:c0:2c:02:fb:bc:1c:4a:
cb:67:c1:7b:d8:33:4c:d7:7c:35:5d:5b:58:62:6b:
97:86:5c:f3:c7:8f:36:fc:ed:41:04:ef:10:f7:14:
20:ac:48:d8:16:7b:96:da:89:5a:92:06:0e:a8:10:
19:df:b8:38:22:97:85:53:22:fe:d9:a4:f8:db:13:
a2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:80:E0:7D:30:E5:37:5B:8C:AF:2F:32:12:0B:32:B8:43:13:59:14
X509v3 Authority Key Identifier:
keyid:4C:3F:42:8F:D9:83:4C:D5:EC:9B:B1:60:F8:B6:DC:F4:46:EF:5D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:47:d9:6a:f4:dc:e1:ad:a4:1e:9b:4a:09:97:ee:fe:cb:fb:
d6:46:ae:cb:f3:c1:2c:a6:82:c1:a9:3f:8f:c8:29:d2:2d:dd:
59:21:bd:c1:33:3c:f1:42:3c:6c:f8:86:b5:e5:a3:b2:74:de:
67:16:14:06:82:7a:97:60:ea:cb:3f:70:72:2a:b0:16:ac:2f:
05:7c:01:92:ee:98:ea:e7:1b:64:2b:a3:31:cb:00:c0:5b:01:
ff:a7:7d:e4:eb:fd:0f:44:97:04:97:6d:35:a2:9e:4a:30:28:
35:2b:92:d4:e4:94:38:5e:5c:32:be:33:75:1c:9d:c6:ab:cd:
68:cb:1e:4f:ca:a4:f6:ff:d8:2b:8f:e8:61:32:02:e7:04:6d:
8c:77:7b:7f:b2:e4:32:11:4b:ac:1f:b4:2b:34:de:5b:41:e9:
01:3f:19:c3:b1:aa:15:c1:f1:9f:e4:00:1d:b4:70:b3:0f:59:
0b:3c:77:2f:82:84:a3:6a:0b:13:f7:1c:4e:7f:8a:0d:0d:59:
d9:c3:04:eb:0b:ea:ef:14:62:3b:72:48:08:5e:66:63:1d:0e:
ec:d6:c9:e7:6a:71:9a:af:8c:43:2c:57:2b:38:36:cd:d2:05:
cd:54:0b:c8:0d:e9:15:5f:00:f1:39:59:c6:6f:81:e4:32:41:
7c:ae:08:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:41:55 2025 by rpki-client