Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/TeHTcc2fJqEftklGZ0wxl198Lt8.mft
File: TeHTcc2fJqEftklGZ0wxl198Lt8.mft (raw, json)
Hash identifier: jJHmf5DxWStN6SHjqMumWvDGYBxgKMa1r7ARQ3/GO9M=
Subject key identifier: 46:69:8C:81:43:75:A1:58:6D:16:1A:99:BE:30:BD:9B:8E:95:53:BE
Authority key identifier: 4D:E1:D3:71:CD:9F:26:A1:1F:B6:49:46:67:4C:31:97:5F:7C:2E:DF
Certificate issuer: /CN=4de1d371cd9f26a11fb64946674c31975f7c2edf
Certificate serial: 019A4F2B244F647E8ADE479D4D074D831583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TeHTcc2fJqEftklGZ0wxl198Lt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/TeHTcc2fJqEftklGZ0wxl198Lt8.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 14:00:18 +0000
Manifest this update: Tue 04 Nov 2025 14:00:18 +0000
Manifest next update: Wed 05 Nov 2025 14:00:18 +0000
Files and hashes: 1: N-aQc5ZHzbkuvMdLo2TUuIB_oc4.roa (hash: IAepQRK7ijnLHmjIcS6HiPXZXeTO8dWbShOBaF70B2w=)
2: TeHTcc2fJqEftklGZ0wxl198Lt8.crl (hash: AZK0DhfULzhSpYtwMIGuGk7IJp49Vnr89qQo9mMXiYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/TeHTcc2fJqEftklGZ0wxl198Lt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/TeHTcc2fJqEftklGZ0wxl198Lt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TeHTcc2fJqEftklGZ0wxl198Lt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:24:4f:64:7e:8a:de:47:9d:4d:07:4d:83:15:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4de1d371cd9f26a11fb64946674c31975f7c2edf
Validity
Not Before: Nov 4 14:00:18 2025 GMT
Not After : Nov 5 14:00:18 2025 GMT
Subject: CN=46698c814375a1586d161a99be30bd9b8e9553be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2f:99:11:fc:4c:fd:6c:79:14:46:bf:2b:ff:
1a:49:8b:06:34:42:20:da:44:f7:80:72:f3:5f:de:
03:d9:18:30:bf:5c:60:82:39:7a:4f:ba:dc:33:6d:
a3:27:f0:33:59:51:b6:f1:a6:12:35:35:b7:cf:cf:
bd:08:d3:fe:c6:8a:7f:39:60:f1:c0:b4:3a:b6:83:
17:29:d5:6e:bd:69:15:ee:a8:3c:5e:c7:3c:99:2f:
70:48:ed:cd:a9:b5:be:fa:a9:a5:c6:5f:87:e4:92:
21:16:ad:89:de:e0:14:4e:23:95:1f:32:08:1a:fc:
24:8f:c3:d6:1d:d9:20:c7:9d:51:80:d2:1d:c1:b0:
04:71:fc:48:2c:68:6f:4c:7d:d8:57:2d:37:f7:ce:
79:51:85:dd:e0:c6:98:7d:ac:fa:79:c3:c7:c1:44:
34:fd:e4:c5:e9:82:e5:d1:42:87:90:a2:c6:f9:1d:
05:96:5d:dd:ba:7a:9b:5c:d5:37:a7:53:d9:0a:80:
b6:e7:56:3e:fb:5a:f1:74:1b:49:49:36:f6:d2:8a:
b9:47:55:b7:7f:2d:38:0a:5f:5b:11:8a:df:b6:3c:
14:4d:06:fc:6a:e9:79:13:70:34:b1:e7:42:2d:08:
bb:9a:09:56:39:ee:42:58:ad:1a:aa:bd:86:18:be:
83:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:69:8C:81:43:75:A1:58:6D:16:1A:99:BE:30:BD:9B:8E:95:53:BE
X509v3 Authority Key Identifier:
keyid:4D:E1:D3:71:CD:9F:26:A1:1F:B6:49:46:67:4C:31:97:5F:7C:2E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeHTcc2fJqEftklGZ0wxl198Lt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/TeHTcc2fJqEftklGZ0wxl198Lt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/TeHTcc2fJqEftklGZ0wxl198Lt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:a3:ee:23:2f:a8:77:d9:51:b3:6e:f1:df:c9:dc:45:1b:28:
24:bf:47:e7:37:22:56:8b:2e:ed:25:c9:4e:fe:6f:79:e0:3b:
7d:54:64:f9:ab:12:d9:84:08:18:44:99:0d:6e:65:db:5a:4d:
ae:dd:4f:37:50:14:ef:e0:89:63:cf:51:84:7a:42:b1:92:bb:
fe:6a:d1:e1:69:e6:9e:db:44:b9:f8:12:5e:11:e1:03:51:ac:
51:27:3a:53:d9:96:10:fc:74:ed:6a:30:6d:1f:6d:74:ef:75:
c5:35:b7:d4:95:4a:f7:31:9a:9e:8f:65:6d:69:c0:cf:21:18:
ed:8c:f9:25:d8:71:6d:64:58:43:6a:0f:77:04:c6:13:3d:5a:
5c:67:cc:28:ff:ab:fd:cb:02:25:e9:e9:ed:65:d2:91:73:f7:
70:37:80:fe:ed:a8:fc:8d:a7:3b:50:8a:7d:17:70:97:a6:64:
d7:f0:70:3d:ed:31:d1:00:3e:b9:57:65:53:3f:f0:c2:cd:6f:
3f:7e:6f:06:0e:06:b3:c2:d3:71:15:46:f5:be:ab:fc:35:64:
d7:e6:b6:9e:79:37:38:4a:1d:d6:a8:e8:56:53:2a:ea:1a:c6:
7f:cb:66:f5:37:4c:dc:ac:17:c9:e4:2f:30:f3:8d:71:24:2f:
af:c9:29:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:47 2025 by rpki-client