Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
File: TecEA8nS15Ys8RPZPEYvlJPYc2I.mft (raw, json)
Hash identifier: SwJ8uf4WyNlmnyGTBRXLAT0Nh/tfgtJNETxvCBKiddc=
Subject key identifier: 46:7F:5F:79:AF:2F:FB:D0:6E:0C:DB:81:26:FB:25:0B:DB:BE:40:38
Authority key identifier: 4D:E7:04:03:C9:D2:D7:96:2C:F1:13:D9:3C:46:2F:94:93:D8:73:62
Certificate issuer: /CN=4de70403c9d2d7962cf113d93c462f9493d87362
Certificate serial: 01988AA0BDABE3D1C03AD91272DB0A1B29D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
Manifest number: 1622
Signing time: Fri 08 Aug 2025 17:00:46 +0000
Manifest this update: Fri 08 Aug 2025 17:00:46 +0000
Manifest next update: Sat 09 Aug 2025 17:00:46 +0000
Files and hashes: 1: GbfL1ZrfRVmwsoIJhPo9qm8dkFU.roa (hash: 5rCvc90C0u6LOlrowQ6t9CQlQZi5SGZg6tgn8PV2EF4=)
2: TecEA8nS15Ys8RPZPEYvlJPYc2I.crl (hash: oLJyUCVG8039KuLyzhb6NGjM5n4pU464RN7HWYl/YI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 17:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:a0:bd:ab:e3:d1:c0:3a:d9:12:72:db:0a:1b:29:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4de70403c9d2d7962cf113d93c462f9493d87362
Validity
Not Before: Aug 8 17:00:46 2025 GMT
Not After : Aug 9 17:00:46 2025 GMT
Subject: CN=467f5f79af2ffbd06e0cdb8126fb250bdbbe4038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ed:d3:56:f9:f6:d5:d6:5d:83:aa:d8:91:b1:
73:94:b0:02:7a:7c:83:91:11:97:18:a2:d4:c6:62:
fb:2a:d4:d4:08:a4:e1:cb:c1:f4:77:52:fe:8a:da:
f9:da:1e:bb:4b:00:a2:f8:c0:c3:4f:00:8a:75:be:
99:38:2e:0e:aa:38:5b:08:db:7e:64:87:b3:91:95:
9a:66:76:58:b3:74:8b:f0:07:af:9e:8c:ea:f1:cb:
46:d8:6f:58:49:0a:e3:c1:f0:38:5d:b4:84:9a:61:
5a:e8:dc:36:0c:95:b3:ba:8e:1b:8b:4e:68:23:4d:
a9:d5:01:05:98:42:4b:c0:61:3d:6d:6f:89:87:7a:
bf:32:cc:fb:2e:ef:60:2e:bc:c0:46:43:c5:59:cf:
28:cb:3d:df:55:48:9d:64:58:ee:ed:c6:db:1d:21:
41:7f:ff:2f:70:5e:92:b4:ab:c5:55:d6:51:09:65:
61:0e:c2:13:da:02:62:53:6f:99:60:9d:1b:bf:a9:
12:3d:78:85:c7:0c:e0:02:e5:5e:1b:ff:cf:ff:e0:
fe:8c:e9:d6:fd:c7:37:a2:1d:b2:98:48:c3:ad:84:
b4:c8:b0:9e:48:1c:4d:4c:6b:69:61:78:66:fb:b8:
fb:91:10:53:c4:17:cd:81:9b:6a:c5:5f:df:ba:e4:
e1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:7F:5F:79:AF:2F:FB:D0:6E:0C:DB:81:26:FB:25:0B:DB:BE:40:38
X509v3 Authority Key Identifier:
keyid:4D:E7:04:03:C9:D2:D7:96:2C:F1:13:D9:3C:46:2F:94:93:D8:73:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:0b:a3:32:d3:ef:6b:b7:e9:9b:0a:89:24:72:14:05:8a:6b:
a7:18:80:70:c0:9b:be:21:f6:e0:68:41:58:48:ef:5f:48:0d:
37:c8:33:c8:ba:c2:9e:f9:57:b5:23:06:d1:6d:02:f1:4d:83:
b3:be:02:cc:34:1c:03:da:5b:73:df:b5:42:ed:23:13:2e:1c:
4d:27:51:97:25:7b:69:b9:f0:3a:5c:21:c9:04:22:3d:26:1d:
61:40:87:f7:4e:2a:cf:07:d2:bf:1f:de:9c:a9:0e:98:fc:ed:
12:5e:89:44:cc:1f:bd:2a:b3:f5:f0:98:23:a0:ca:c8:32:17:
47:d4:e3:78:7e:24:62:cd:f9:f5:bc:94:05:6d:47:d0:be:a3:
85:3e:2d:77:d3:89:2d:8d:41:d9:fb:f4:34:db:2c:bf:e3:f7:
3c:b6:f9:cf:af:f6:9d:dc:17:11:39:ca:a3:5e:ca:3b:34:4a:
29:d0:21:a7:15:bd:d1:55:42:72:ae:3b:53:6f:1f:b4:94:5d:
94:67:3d:28:d7:8b:a8:82:26:4f:82:ac:da:ab:e0:de:61:bd:
dd:e8:d6:70:53:d2:03:d9:d4:35:80:9f:6c:e2:60:db:af:ce:
b8:b0:bb:98:1a:53:57:09:1b:15:70:39:b5:f6:ff:61:96:09:
44:12:71:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:17:08 2025 by rpki-client