Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.mft
File: Te9bj_uvfVavXTny-UyUbXL3cPM.mft (raw, json)
Hash identifier: aCc8GsjGcvfSmlCVbnXihL7lOFEDLeU9D3mfVhpjHSY=
Subject key identifier: BF:C0:55:74:9D:CC:9C:48:3F:1D:94:F5:D6:3B:A9:B6:34:3B:2C:9E
Authority key identifier: 4D:EF:5B:8F:FB:AF:7D:56:AF:5D:39:F2:F9:4C:94:6D:72:F7:70:F3
Certificate issuer: /CN=4def5b8ffbaf7d56af5d39f2f94c946d72f770f3
Certificate serial: 019A4F98CB630DC236657BD82EAD995DDADA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Te9bj_uvfVavXTny-UyUbXL3cPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.mft
Manifest number: 1385
Signing time: Tue 04 Nov 2025 16:00:04 +0000
Manifest this update: Tue 04 Nov 2025 16:00:04 +0000
Manifest next update: Wed 05 Nov 2025 16:00:04 +0000
Files and hashes: 1: C0P7fdeMbUq_SUkoUNzucceRO_o.roa (hash: IOK/1252dBZyKN3aeAn78pq+rzDgEYZNrHyoRwRIUaA=)
2: Te9bj_uvfVavXTny-UyUbXL3cPM.crl (hash: QpHdU8K+MkxemxR9Hn7oqdEE48RsdNclg0X9Co9sSRI=)
3: a1f2RcCwBt9bPHww1QitG1PQubM.roa (hash: SAUWVRAb+b0RAh7fSmAkBAsYks5uXo8G20Pv9xs5FYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Te9bj_uvfVavXTny-UyUbXL3cPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:cb:63:0d:c2:36:65:7b:d8:2e:ad:99:5d:da:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4def5b8ffbaf7d56af5d39f2f94c946d72f770f3
Validity
Not Before: Nov 4 16:00:04 2025 GMT
Not After : Nov 5 16:00:04 2025 GMT
Subject: CN=bfc055749dcc9c483f1d94f5d63ba9b6343b2c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9d:1f:74:28:96:ed:5f:8d:4c:f5:2c:60:c9:
4a:d0:48:65:d6:e9:22:6b:80:f2:13:7d:37:72:99:
6a:ba:fc:0e:b8:fc:d7:d5:42:5a:7f:5e:15:78:58:
88:41:fb:26:0d:60:3f:ea:73:50:f6:7c:53:66:e9:
94:7b:40:08:da:8c:c2:d1:3c:0c:a8:1e:fa:84:4f:
e4:b2:9e:b0:4f:74:75:fe:2a:57:c1:5b:63:27:4f:
0f:93:e4:c2:c0:29:0f:b1:b5:e7:2b:da:7e:67:01:
c2:38:bc:b7:d0:c0:ba:01:a4:76:5c:34:73:2c:42:
30:7e:6f:22:4f:58:69:06:f6:d5:c0:13:80:c0:82:
dc:28:bb:19:02:6f:3b:d2:30:30:b8:27:63:6a:64:
e1:a7:87:30:66:ed:36:b2:fe:bc:81:fb:94:35:aa:
bb:8d:09:0c:04:82:3b:aa:e7:aa:17:b7:73:e8:7e:
66:03:ef:ff:89:33:cd:6a:e8:54:84:61:84:5e:c5:
7c:e4:34:c0:ab:9d:74:39:10:d6:8f:12:da:1f:7f:
2c:31:5f:43:77:10:31:e6:1e:ce:83:df:5e:d2:b9:
d3:cc:3f:75:1d:19:51:d8:41:fa:b5:e4:1b:50:7a:
d7:86:5a:7d:32:41:37:03:66:91:ec:0d:46:91:03:
17:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C0:55:74:9D:CC:9C:48:3F:1D:94:F5:D6:3B:A9:B6:34:3B:2C:9E
X509v3 Authority Key Identifier:
keyid:4D:EF:5B:8F:FB:AF:7D:56:AF:5D:39:F2:F9:4C:94:6D:72:F7:70:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Te9bj_uvfVavXTny-UyUbXL3cPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:a6:42:6a:80:4b:3f:4e:bd:62:af:0b:db:c5:26:5f:3c:8d:
24:22:cb:68:3e:25:0e:dc:42:d5:9a:d3:06:3e:30:49:be:0b:
36:e0:8e:46:7c:c4:f3:ee:c2:e2:2f:b7:f4:ce:51:d6:78:fc:
f8:a3:31:15:e7:43:1d:ef:1f:5a:d3:6a:8f:cc:d8:7e:d4:83:
72:47:a1:f2:42:bf:b4:bc:80:0d:d0:5b:23:ee:e1:f5:ad:07:
3d:af:6a:c4:56:d4:ef:7f:b6:88:93:45:a1:62:79:9a:2a:40:
b5:e6:12:29:7e:59:5b:f9:75:b9:d2:12:84:e2:be:3c:c9:40:
83:18:43:7c:04:a6:66:7e:e9:ea:ba:6b:7d:d8:91:39:db:f8:
8e:9f:19:18:2c:6d:c8:87:21:f4:77:cd:e1:f3:77:c7:f5:f2:
75:9c:75:1e:7e:28:41:83:d6:3f:8b:1c:17:36:ee:9f:6d:30:
20:f9:e7:6d:38:f5:05:68:01:54:bd:92:9e:92:b1:61:ee:35:
cb:b7:bc:48:74:48:08:9b:a8:85:07:fb:19:0f:64:db:67:3f:
df:d0:f6:fa:03:56:7a:69:ce:85:d4:dc:bc:29:4f:a8:fd:59:
54:03:68:71:c2:41:5c:a7:0e:bd:e8:e0:56:16:a7:89:20:32:
75:e8:d9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:26 2025 by rpki-client