Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.mft
File: TeLcLByThHv5efmwEO3EzahJ9Pg.mft (raw, json)
Hash identifier: bYeSXINoyBf8yYCna9SP3Nz8+9v7l0bqgJFRtmbGwuM=
Subject key identifier: 00:F9:93:D8:D5:6F:8A:66:7F:37:BE:C8:C2:19:5D:00:02:34:B9:F8
Authority key identifier: 4D:E2:DC:2C:1C:93:84:7B:F9:79:F9:B0:10:ED:C4:CD:A8:49:F4:F8
Certificate issuer: /CN=4de2dc2c1c93847bf979f9b010edc4cda849f4f8
Certificate serial: 019A4DE20EE5505813CB5B225CD6BB97BC73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TeLcLByThHv5efmwEO3EzahJ9Pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 08:00:51 +0000
Manifest this update: Tue 04 Nov 2025 08:00:51 +0000
Manifest next update: Wed 05 Nov 2025 08:00:51 +0000
Files and hashes: 1: 8JnpLlF6ouYCq_pQniNXbCodhsg.roa (hash: 3w9gQ6ISRWOwFH7sOq0mD8XYTAeUJvnIkcQX2VgiAHE=)
2: TeLcLByThHv5efmwEO3EzahJ9Pg.crl (hash: jYkckTLfQZR0ns1frxMlVNEJe6wPx+8JEwFBjGCOwmg=)
3: UrlGR9v18F5T4YYElfr8yqGscS0.roa (hash: fj1TXr5g11+IfyDk1z4S0+oWVp/JX8PPHR9S29gA7PE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TeLcLByThHv5efmwEO3EzahJ9Pg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:0e:e5:50:58:13:cb:5b:22:5c:d6:bb:97:bc:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4de2dc2c1c93847bf979f9b010edc4cda849f4f8
Validity
Not Before: Nov 4 08:00:51 2025 GMT
Not After : Nov 5 08:00:51 2025 GMT
Subject: CN=00f993d8d56f8a667f37bec8c2195d000234b9f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:90:05:8f:94:ba:a6:71:01:62:5a:c6:a8:9c:
34:bf:2f:83:0b:ed:39:94:b0:6a:73:4b:81:d2:9a:
2b:69:18:a9:5c:dc:ff:45:cd:8b:58:64:d1:16:7c:
80:70:7e:a6:2e:9b:51:9b:21:8b:74:7e:ff:11:0d:
97:bc:bf:b0:0d:7b:70:c0:9d:80:2c:12:17:9e:7f:
d7:cd:5f:ea:14:6f:a5:f2:25:79:95:b1:72:4f:c3:
7a:3d:58:48:e5:95:93:af:a4:88:06:22:f4:b1:1e:
05:a2:91:61:18:cd:23:ce:8e:9d:eb:66:fb:78:5f:
3d:e2:30:7f:4a:9e:52:03:ed:d9:dc:9f:bc:a7:c9:
3c:0f:62:99:12:9e:00:8c:3b:6e:eb:d6:6b:e4:36:
09:d3:d1:b1:fe:f9:5d:71:c8:45:89:05:ca:ea:dd:
cf:1b:fb:b9:f0:7a:39:28:f8:47:ac:81:8b:3f:cf:
b1:77:a9:a3:76:b3:8e:ee:7c:e8:2d:9a:98:d2:84:
8b:8b:3e:3e:9b:4f:dc:3d:91:ea:2e:48:28:31:8d:
90:68:ec:83:86:fd:8e:52:68:2e:e4:d6:dd:14:c0:
e0:a4:f4:b9:55:57:cf:69:fe:2e:16:0d:58:cd:10:
ba:a1:c2:8d:72:9c:a6:92:34:57:ad:40:6c:13:33:
ce:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F9:93:D8:D5:6F:8A:66:7F:37:BE:C8:C2:19:5D:00:02:34:B9:F8
X509v3 Authority Key Identifier:
keyid:4D:E2:DC:2C:1C:93:84:7B:F9:79:F9:B0:10:ED:C4:CD:A8:49:F4:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeLcLByThHv5efmwEO3EzahJ9Pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:0d:e2:1b:4f:e8:c5:04:32:2c:5f:aa:60:ed:f3:1a:12:5b:
df:e3:bf:ef:dc:14:21:e7:4f:bb:f6:a1:56:4e:8a:a8:5a:6f:
f2:c4:bd:15:fc:62:38:3e:81:cb:c2:0c:23:bd:e7:c6:32:84:
c0:41:91:73:b3:a7:ce:c8:79:0b:2d:f1:41:e0:4d:ca:0a:5c:
11:7f:f1:92:73:5f:8d:c9:48:3c:9f:e0:32:35:59:95:4a:ee:
e5:df:4d:22:dd:ab:66:c5:83:67:a7:f6:1c:8f:10:e3:c1:77:
e9:5d:26:95:58:af:15:f5:24:aa:0f:fc:40:59:27:1f:02:46:
59:4f:23:13:6d:b6:42:67:6c:a9:01:d7:aa:db:d1:9a:3f:5c:
82:12:c6:e1:fa:10:57:32:84:30:92:0b:27:bb:d7:ed:67:ba:
c1:8d:2e:6e:50:b2:a8:d6:2c:47:e6:ac:7d:52:6f:3d:56:56:
89:89:b9:a5:bb:38:70:ab:cd:05:f8:2c:f4:18:0c:b8:30:4d:
73:af:70:91:db:a1:7a:84:be:1f:80:10:57:0c:02:54:60:bc:
ca:d5:c2:25:67:81:63:31:f2:50:95:0b:d8:d1:3e:7e:f1:55:
90:32:e6:8d:7a:5d:f6:62:4c:3a:8f:33:ab:ee:fa:5d:85:7f:
a7:f1:2b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:14 2025 by rpki-client