Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
File: TDOTsqG9eRmFmAeDirHjsAN7i08.mft (raw, json)
Hash identifier: UgFz4h0CxZW5eASJA7FJ+niadJZvTgb3Avt9LzeNnIo=
Subject key identifier: 42:0C:BD:FA:FD:80:DC:91:61:B4:9B:0F:F5:EB:41:10:34:93:56:B5
Authority key identifier: 4C:33:93:B2:A1:BD:79:19:85:98:07:83:8A:B1:E3:B0:03:7B:8B:4F
Certificate issuer: /CN=4c3393b2a1bd7919859807838ab1e3b0037b8b4f
Certificate serial: 0199FC58AC23DD1453049B04639BEC6B3F1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDOTsqG9eRmFmAeDirHjsAN7i08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
Manifest number: 0DDE
Signing time: Sun 19 Oct 2025 12:01:33 +0000
Manifest this update: Sun 19 Oct 2025 12:01:33 +0000
Manifest next update: Mon 20 Oct 2025 12:01:33 +0000
Files and hashes: 1: TDOTsqG9eRmFmAeDirHjsAN7i08.crl (hash: 7iDdutw8AyO0YSRqBOmELzcsOWFZ35/vXf7OeEvrcEs=)
2: y6xk5yyaeCIuQcfJUMGsvyLuakI.roa (hash: 5cTQO7InxQ4ef2VY7Tlc4nQ2LkIPqai+B4whSvQRHdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDOTsqG9eRmFmAeDirHjsAN7i08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:ac:23:dd:14:53:04:9b:04:63:9b:ec:6b:3f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3393b2a1bd7919859807838ab1e3b0037b8b4f
Validity
Not Before: Oct 19 12:01:33 2025 GMT
Not After : Oct 20 12:01:33 2025 GMT
Subject: CN=420cbdfafd80dc9161b49b0ff5eb4110349356b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d1:fa:d6:8c:c4:a6:59:86:25:08:92:76:41:
81:48:4d:e1:3a:9e:86:71:7b:ff:fe:70:95:f6:81:
05:11:43:db:4a:dc:69:8b:6f:df:95:6d:5d:b1:6b:
64:3d:31:5d:fa:46:63:c0:56:49:57:6c:44:a6:cd:
7f:83:cd:8c:c2:0a:f3:e4:0f:04:b5:4c:7b:e8:07:
f4:be:33:63:c5:0b:c2:d7:2f:9b:73:40:c4:4e:68:
d9:58:00:a3:cb:66:9d:ef:ca:54:19:da:89:1f:bd:
7c:d9:71:30:a7:a5:28:6f:95:03:5e:26:f8:7c:7f:
19:a4:04:c2:06:b2:54:99:5a:b5:b6:bd:33:65:ef:
e0:bc:d4:32:59:ac:65:d0:5a:df:19:d7:c5:66:44:
bf:72:81:ef:ef:32:5c:45:d7:82:08:3a:d1:fe:d6:
33:77:64:17:ff:21:12:7b:c8:4c:f7:6a:38:be:0f:
1f:b2:eb:e3:b1:87:9f:3b:5a:a5:b3:56:21:a1:a1:
7f:a8:cf:85:c2:7c:61:f0:eb:52:dc:df:5e:56:76:
a5:dd:3a:08:d9:7d:e7:15:82:2d:57:97:19:00:bf:
74:c2:f9:5a:77:cb:98:c1:9e:3e:fb:71:56:a9:2e:
32:92:89:04:b4:73:36:7b:dc:85:43:0c:a7:42:81:
6d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:0C:BD:FA:FD:80:DC:91:61:B4:9B:0F:F5:EB:41:10:34:93:56:B5
X509v3 Authority Key Identifier:
keyid:4C:33:93:B2:A1:BD:79:19:85:98:07:83:8A:B1:E3:B0:03:7B:8B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDOTsqG9eRmFmAeDirHjsAN7i08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:f2:99:c6:d4:24:a1:6d:06:c1:07:78:20:a6:79:ab:ca:31:
35:d1:c4:6f:f9:f0:8b:7a:b7:90:b6:1e:25:ff:89:0a:9f:d9:
51:62:5e:06:a8:3c:ae:a5:2d:e1:88:85:61:3f:c6:62:99:fb:
97:c7:29:c3:a6:cc:b5:94:78:3a:8b:78:e8:6a:d1:84:9f:fa:
0a:55:c1:ca:cf:04:0b:24:ae:32:9b:c9:e0:18:3d:a0:1e:14:
48:01:4b:ac:61:a1:cc:e8:57:88:9f:6c:e0:74:a6:67:42:2b:
08:61:11:75:61:46:46:27:3f:d6:27:5b:3d:5c:f8:e4:43:cf:
33:e0:2a:79:1a:45:da:15:ba:fa:04:b7:8a:d2:2f:9a:b1:f4:
06:3c:1a:18:f6:0d:a5:6c:44:ad:57:87:e2:05:54:b0:3a:b4:
e5:6d:c9:68:8d:7b:7b:30:87:3e:cb:88:07:42:b6:26:af:a9:
6b:b8:36:b5:d1:57:b9:1d:a8:79:da:32:32:ea:a5:4d:35:5e:
d8:e8:f8:29:e5:b0:62:d9:2a:98:46:d5:77:22:a2:2c:32:c0:
3e:07:88:75:75:e4:5a:7b:b5:14:d3:32:4a:00:ce:2e:7c:27:
34:3b:0c:2c:10:57:b7:1f:1a:79:b6:a2:6e:a5:51:e7:04:35:
3d:d2:79:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:41 2025 by rpki-client